| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Programme installieren sich selbständigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
27.07.2015, 13:51
| #1 |
 |  Windows 7: Programme installieren sich selbständig Hallo Liebes Trojaner Team, mein Kumpel hat sich scheinbar ein Virus eingefangen. Es sollen sich mehrere Programme selbst installiert haben wie z.B. Crossbrowse Pc ist auch ziemlich langsam nun. Da ich nicht annährend so gut bin wie ihr im säubern von Computern würde ich gerne eure Hilfe in anspruch nehmen. Hier ein Paar Logs zum anfang =) Da das Log von GMER deutlich zu groß ist und Addition auch nicht dazu passt, muss ich es leider als Zip anhängen. Danke schonmal für die Hilfe. Defogger Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:25 on 27/07/2015 (Iceflex)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Pro Agent -> Removed
Checking for services/drivers...
-=E.O.F=-
Frst Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
durchgeführt von Iceflex (Administrator) auf ICEFLEX-PC (27-07-2015 14:26:51)
Gestartet von C:\Users\Iceflex\Desktop
Geladene Profile: Iceflex (Verfügbare Profile: Iceflex & Mcx1-ICEFLEX-PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser Pfad: "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" -- "%1")
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(DTools LIMITED) C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(CinemaPlus_1.3dV27.07) C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe
(Cinema_Plus-1.2V27.07) C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe
(CinemaPlus_1.3dV27.07) C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe
(CinemaPlusV27.07) C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe
(Cinema PlusV21.07) C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe
(CinemaPlusV27.07) C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe
(Cinema_Plus-1.2V27.07) C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe
(Webar) C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe
(Cinema PlusV21.07) C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe
(Webar) C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe
(Cinema_Plus-1.2V27.07) C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe
(iCinema) C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe
(iCinema) C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe
(Abengine) C:\Program Files (x86)\FastSearch\acengine.exe
(Webar) C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe
(iCinema) C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe
(NavRight) C:\ProgramData\NavRight\NavRight.exe
() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
(CinemaPlus_1.3dV27.07) C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe
(fbindexer) C:\Users\Iceflex\AppData\Roaming\FlipBoards\fbindexer.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
() C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\hnsnFBA0.tmp
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(SIEN S.A.) C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe
() C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp
() C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp
(XTab system) C:\Program Files (x86)\MiuiTab\ProtectService.exe
(SearchProtect) C:\Program Files (x86)\MiuiTab\CmdShell.exe
(XTab system) C:\Program Files (x86)\MiuiTab\HPNotify.exe
(Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe
(NavRight) C:\ProgramData\NavRight\NavRight.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Panda Security) C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Search Module Ltd.) C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe
(ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(WS) C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
() C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(zik.mu) C:\Program Files\BubbleSound\3D BubbleSound.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Web Bar Media) C:\Program Files\WebBar\2.0.5659.26749\wb.exe
() C:\Users\Iceflex\AppData\Local\Temp\isdkNMYftZuu\ISightHost.exe
() C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe
() C:\Program Files (x86)\baidu\baidu.exe
(iQIYI.COM) C:\IQIYI Video\Common\QyKernel.exe
() C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(SteelSeries) D:\Programme\Steelseries\World of Warcraft Cataclysm MMO Gaming Mouse\WoWMHID2.exe
() C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\Monitor.EXE
() C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe
(SoftBrain Technologies Ltd.) C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe
() C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\OSD.exe
(SoftBrain Technologies Ltd.) C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(SteelSeries) D:\Programme\Steelseries\World of Warcraft Cataclysm MMO Gaming Mouse\WoWMTray2.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\Updater.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Cinema PlusV21.07) C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7205592 2014-02-02] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe [14115328 2015-01-09] (zik.mu)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [SteelSeries World of Warcraft Cataclysm MMO Gaming Mouse] => D:\Programme\Steelseries\World of Warcraft Cataclysm MMO Gaming Mouse\WoWMHID2.exe [1993216 2011-08-18] (SteelSeries)
HKLM-x32\...\Run: [SL-6481 Gaming Keyboard] => C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\Monitor.exe [1976832 2014-06-21] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_de_014010041] => C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe [3979408 2015-07-25] ()
HKLM-x32\...\Run: [SmartWeb] => C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [gmsd_de_005010041] => C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe [3978896 2015-07-25] ()
HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-07-26] (YTDownloader)
HKLM-x32\...\Run: [SPDriver] => C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe [3225088 2015-07-27] ()
HKLM-x32\...\RunOnce: [upmbot_de_014010041.exe] => C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe [3289744 2015-07-25] ()
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Logitech Vid] => C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [EADM] => D:\Programme\Origin\Origin.exe [3632112 2015-07-27] (Electronic Arts)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2860080 2015-06-29] (Blizzard Entertainment)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [MyComGames] => C:\Users\Iceflex\AppData\Local\MyComGames\MyComGames.exe [4071368 2015-07-23] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [InetStat] => C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe [840206 2015-07-27] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [apphide] => C:\Program Files (x86)\baidu\baidu.exe [69632 2015-07-22] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [HCDNClient] => C:\IQIYI Video\Common\QyKernel.exe [576104 2015-05-12] (iQIYI.COM)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [DeskBar] => C:\Users\Iceflex\AppData\Local\DeskBar\dblaunch.exe [226816 2015-07-27] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-07-26] (YTDownloader)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [SPDriver] => C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe [3225088 2015-07-27] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Super Optimizer] => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe [676400 2015-07-23] ()
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil64_17_0_0_190_ActiveX.exe [623792 2015-06-27] (Adobe Systems Incorporated)
AppInit_DLLs-x32: C:\ProgramData\NavRight\NavRight32.dll => C:\ProgramData\NavRight\NavRight32.dll [782336 2015-07-21] (NavRight)
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-09-27]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-07-27]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2012-12-25] ()
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-07-27]
ShortcutTarget: SmartWeb.lnk -> C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=ds&ts=1437992311&z=c38612f4146c5c666a86af3gezec8mft5tbo4cdg0e&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1437992311&z=c38612f4146c5c666a86af3gezec8mft5tbo4cdg0e&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
URLSearchHook: HKLM-x32 - (No Name) - {61f0d019-b016-4d56-9dae-7b7706cd6755} - Keine Datei
URLSearchHook: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - Keine Datei
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=F7Rztutdk0000,ccb0e664-5a17-4be7-a976-4b125b931c92,&q={searchTerms}
SearchScopes: HKLM -> {AD662815-21CD-4949-AF69-CCD0C990AFF8} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKLM-x32 -> {AD662815-21CD-4949-AF69-CCD0C990AFF8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=51730d5c-ecb2-4d32-bf09-620b40e81bd5&ref=toolbox&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {1AE7D8FB-0335-4946-99FA-FE0E70D8688D} URL = hxxp://www.oursurfing.com/web/?type=dspp&ts=1437992372&z=a172c6d037964548bcdd10cg7z1c2mbt8tcodc1m3o&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://search.iminent.com/?appId=51730d5c-ecb2-4d32-bf09-620b40e81bd5&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www-searching.com/search.aspx?s=F7Rztutdk0000,ccb0e664-5a17-4be7-a976-4b125b931c92,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {4350EA1B-0563-4D27-B165-32C5596230EA} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=F7Rztutdk0000,ccb0e664-5a17-4be7-a976-4b125b931c92,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {AD662815-21CD-4949-AF69-CCD0C990AFF8} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {B3D83886-5D8E-4314-9490-95D8FAC3AC5C} URL = hxxp://www.oursurfing.com/web/?type=dspp&ts=1437992372&z=a172c6d037964548bcdd10cg7z1c2mbt8tcodc1m3o&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {C948C644-3EFD-4F36-96A0-34190BE22832} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&ts=1437992385&type=default&q={searchTerms}
BHO: No Name -> {41564952-412D-5637-4300-7A786E7484D7} -> Keine Datei
BHO: IMinent WebBooster (BHO) -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll [2015-06-10] (SIEN)
BHO: Shopper Pro -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> C:\ProgramData\ShopperPro\ShopperPro64.dll [2015-07-27] (Goobzo Ltd.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-23] (Thinkgood Co. Limited)
BHO-x32: No Name -> {61f0d019-b016-4d56-9dae-7b7706cd6755} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> D:\Games\Star Trek\Arc\Plugins\ArcPluginIE.dll [2015-02-12] (Perfect World Entertainment Inc)
BHO-x32: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -> Keine Datei
BHO-x32: IMinent WebBooster (BHO) -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx86.dll [2015-06-10] (SIEN)
BHO-x32: Shopper Pro -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> C:\ProgramData\ShopperPro\ShopperPro.dll [2015-07-27] (Goobzo Ltd.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)
BHO-x32: °®ÆæÒÕÖúÊÖ -> {FB4F6285-4C32-49F2-950F-A5998F9CEC6C} -> C:\IQIYI Video\Common\Accelerator\IEHelper.dll [2015-04-29] (爱奇艺)
Toolbar: HKLM-x32 - No Name - {61f0d019-b016-4d56-9dae-7b7706cd6755} - Keine Datei
Toolbar: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002 -> No Name - {61F0D019-B016-4D56-9DAE-7B7706CD6755} - Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\SysWOW64\acengine.dll [299072 2015-07-27] (Abengine)
Winsock: Catalog9 02 C:\Windows\SysWOW64\acengine.dll [299072 2015-07-27] (Abengine)
Winsock: Catalog9 03 C:\Windows\SysWOW64\acengine.dll [299072 2015-07-27] (Abengine)
Winsock: Catalog9 04 C:\Windows\SysWOW64\acengine.dll [299072 2015-07-27] (Abengine)
Winsock: Catalog9 15 C:\Windows\SysWOW64\acengine.dll [299072 2015-07-27] (Abengine)
Winsock: Catalog9-x64 01 C:\Windows\system32\acengine64.dll [350216 2015-07-27] (Abengine)
Winsock: Catalog9-x64 02 C:\Windows\system32\acengine64.dll [350216 2015-07-27] (Abengine)
Winsock: Catalog9-x64 03 C:\Windows\system32\acengine64.dll [350216 2015-07-27] (Abengine)
Winsock: Catalog9-x64 04 C:\Windows\system32\acengine64.dll [350216 2015-07-27] (Abengine)
Winsock: Catalog9-x64 15 C:\Windows\system32\acengine64.dll [350216 2015-07-27] (Abengine)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{78E4A09C-8DCF-4543-BA52-ACBB2AEC8397}: [NameServer] 52.17.204.69,8.8.8.8
Tcpip\..\Interfaces\{78E4A09C-8DCF-4543-BA52-ACBB2AEC8397}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer] 52.17.204.69,8.8.8.8
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll [2015-06-27] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll No File
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [2015-05-12] ()
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-14] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-27] ()
FF Plugin-x32: @ei.UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISB.dll [2013-05-29] (Utility Chest)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [2015-05-12] ()
FF Plugin-x32: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> D:\Games\Star Trek\Arc\Plugins\npArcPluginFF.dll [2015-02-12] (Perfect World Entertainment Inc)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-07-27] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-07-27] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: @my.com/Games -> C:\Users\Iceflex\AppData\Local\MyComGames\NPMyComDetector.dll [2015-07-23] (My.com, Inc)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Iceflex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-12-31] ()
FF HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-01-31]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-07-17] <==== ATTENTION
Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ATTENTION
CHR Profile: C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-04]
CHR Extension: (Google Drive) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-04]
CHR Extension: (Shopping Assistant) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnjggdilcdgekjihmoeplahbfajgacf [2015-07-27]
CHR Extension: (YouTube) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-04]
CHR Extension: (Google Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-04]
CHR Extension: (I - Cinema) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk [2015-07-27]
CHR Extension: (Java API Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm [2015-03-01]
CHR Extension: (World of Warcraft Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijloicdileadhbjdlccmbaihgjjhkmjl [2015-07-15]
CHR Extension: (Skype Click to Call) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-12-22]
CHR Extension: (CinemaPlus_5.1V27.07) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-07-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-31]
CHR Extension: (Cinema_Plus-1.2V27.07) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-07-27]
CHR Extension: (Gmail) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-04]
CHR HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [adpeheiliennogfclcgmchdfdmafjegc] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ehhlaekjfiiojlddgndcnefflngfmhen] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [nociobghckdhokecfeajdpimjeapnopn] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - chrome.exe
Opera:
=======
OPR Extension: (Ge-Force) - C:\Users\Iceflex\AppData\Roaming\Opera Software\Opera Stable\Extensions\jhongheibdpfhdpfccheljfcabgliidh [2015-07-27]
OPR Extension: (CinemaPlus_1.3dV27.07) - C:\Users\Iceflex\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-07-27]
OPR Extension: (Cinema_Plus-1.2V27.07) - C:\Users\Iceflex\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-07-27]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.mystartsearch.com/?type=sc&ts=1437992839&z=8f69b4f5da1b44e9eb0d111gaz8c7m8t0t1o5m2t0c&from=cmi&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
==================== Services (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 7eb89871; c:\Program Files (x86)\PragmaInstance\PragmaInstance.dll [2989568 2015-07-27] () [Datei ist nicht signiert]
R2 acengine; C:\Program Files (x86)\FastSearch\acengine.exe [1787024 2015-07-13] (Abengine) [Datei ist nicht signiert]
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-09-27] (Adobe Systems) [Datei ist nicht signiert]
S3 ArcService; D:\Games\Star Trek\Arc\ArcService.exe [88400 2015-02-12] (Perfect World Entertainment Inc)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-04-03] () [Datei ist nicht signiert]
R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [112560 2015-07-26] ()
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [915736 2013-06-19] (BitRaider, LLC)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ClaraUpdater; C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [926832 2015-07-27] (ClaraLabs)
R2 comyninu; C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\hnsnFBA0.tmp [161792 2015-07-27] () [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-01] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-07-27] (globalUpdate) [Datei ist nicht signiert] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-07-27] (globalUpdate) [Datei ist nicht signiert] <==== ATTENTION
R2 GlobalUpdater; C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152 2015-07-14] (SIEN S.A.)
R2 gopibeko; C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp [120832 2015-07-27] () [Datei ist nicht signiert]
R2 hyverumu; C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp [209920 2015-07-27] () [Datei ist nicht signiert]
R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-07-23] (XTab system)
R2 IMService; C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe [5321368 2015-07-14] (Iminent)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; D:\Programme\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
R2 panda_url_filtering; C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe [296760 2014-09-19] (Panda Security)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
R2 SMUpd; C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe [2865152 2015-07-27] (Search Module Ltd.) [Datei ist nicht signiert]
R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346416 2015-07-27] (ShopperPro)
S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-06-30] (Web Bar Media)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe [435880 2015-07-27] (DTools LIMITED) <==== ATTENTION
R2 wssvc_1.10.0.20; C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe [300120 2015-07-06] (WS)
S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
R2 rekidefy; C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs [X]
==================== Drivers (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-02] (DT Soft Ltd)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] ()
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-10-31] (Atheros)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 panda_url_filteringd; C:\ProgramData\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S3 qca_shb; C:\Windows\system32\drivers\qca_shb.sys [99328 2012-10-31] (Qualcomm Atheros Communications Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58528 2015-07-26] (YTDownloader)
R3 SMUpdd; C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [41632 2015-07-27] ()
R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [41632 2015-07-27] ()
R2 SPDRIVER_1.42.1.2194; C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.sys [52384 2015-07-27] ()
R3 SSMO3v2Filter; C:\Windows\System32\drivers\MO3v2Driver.sys [23040 2010-11-22] (Sagatek Co. Ltd.)
R1 wsfd_vt_1_10_0_20; C:\Windows\System32\drivers\wsfd_vt_1_10_0_20.sys [61312 2015-07-06] (WS)
S3 BRDriver64; \??\C:\programdata\bitraider\BRDriver64.sys [X]
S4 NvStUSB; \SystemRoot\system32\drivers\nvstusb.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 14:26 - 2015-07-27 14:27 - 00044914 _____ C:\Users\Iceflex\Desktop\FRST.txt
2015-07-27 14:26 - 2015-07-27 14:26 - 00004034 _____ C:\Windows\System32\Tasks\F4xUuhVkqd
2015-07-27 14:26 - 2015-07-27 14:26 - 00001000 _____ C:\Windows\Tasks\F4xUuhVkqd.job
2015-07-27 14:25 - 2015-07-27 14:25 - 00002273 _____ C:\Users\Public\Desktop\Facebook.lnk
2015-07-27 14:25 - 2015-07-27 14:25 - 00000556 _____ C:\Users\Iceflex\Desktop\defogger_disable.log
2015-07-27 14:23 - 2015-07-27 14:19 - 02146816 _____ (Farbar) C:\Users\Iceflex\Desktop\FRST64.exe
2015-07-27 14:23 - 2015-07-27 14:19 - 00380416 _____ C:\Users\Iceflex\Desktop\Gmer-19357.exe
2015-07-27 14:23 - 2015-07-27 14:19 - 00050477 _____ C:\Users\Iceflex\Desktop\Defogger.exe
2015-07-27 12:50 - 2015-07-27 12:50 - 00003472 ____N C:\bootsqm.dat
2015-07-27 12:33 - 2015-07-27 14:17 - 00006184 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-6.job
2015-07-27 12:33 - 2015-07-27 14:17 - 00003796 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7.job
2015-07-27 12:33 - 2015-07-27 14:17 - 00003452 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.job
2015-07-27 12:33 - 2015-07-27 14:17 - 00002768 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5_user.job
2015-07-27 12:33 - 2015-07-27 14:17 - 00002768 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5.job
2015-07-27 12:33 - 2015-07-27 12:52 - 00000344 _____ C:\Windows\Tasks\Superclean.job
2015-07-27 12:33 - 2015-07-27 12:33 - 00009212 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-6
2015-07-27 12:33 - 2015-07-27 12:33 - 00006826 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7
2015-07-27 12:33 - 2015-07-27 12:33 - 00006480 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6
2015-07-27 12:33 - 2015-07-27 12:33 - 00005798 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5
2015-07-27 12:33 - 2015-07-27 12:33 - 00003260 _____ C:\Windows\System32\Tasks\Superclean
2015-07-27 12:33 - 2015-07-27 12:33 - 00001090 _____ C:\Users\Iceflex\Desktop\Super Optimizer.lnk
2015-07-27 12:33 - 2015-07-27 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer
2015-07-27 12:33 - 2015-07-27 12:33 - 00000000 ____D C:\ProgramData\{53594cc9-bdea-1826-5359-94cc9bde3326}
2015-07-27 12:33 - 2015-07-27 12:33 - 00000000 ____D C:\Program Files (x86)\Super Optimizer
2015-07-27 12:32 - 2015-07-27 14:26 - 00000000 ____D C:\Program Files (x86)\8aa94385-b663-4bd1-bb89-290f01d44487
2015-07-27 12:32 - 2015-07-27 14:17 - 00005840 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-7.job
2015-07-27 12:32 - 2015-07-27 14:17 - 00005498 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-11.job
2015-07-27 12:32 - 2015-07-27 14:17 - 00002090 _____ C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-10_user.job
2015-07-27 12:32 - 2015-07-27 12:33 - 00008870 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-7
2015-07-27 12:32 - 2015-07-27 12:33 - 00000000 ____D C:\Program Files (x86)\Ge-Force
2015-07-27 12:32 - 2015-07-27 12:32 - 00008528 _____ C:\Windows\System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-11
2015-07-27 12:30 - 2015-07-27 14:26 - 00006170 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6
2015-07-27 12:30 - 2015-07-27 14:26 - 00005480 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5
2015-07-27 12:30 - 2015-07-27 14:26 - 00003142 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.job
2015-07-27 12:30 - 2015-07-27 14:26 - 00002450 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5_user.job
2015-07-27 12:30 - 2015-07-27 14:26 - 00002450 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.job
2015-07-27 12:30 - 2015-07-27 14:17 - 00001032 _____ C:\Windows\Tasks\hOEQrYeLUBFOPHEbeKwGKQSFaz.job
2015-07-27 12:30 - 2015-07-27 12:30 - 00004066 _____ C:\Windows\System32\Tasks\hOEQrYeLUBFOPHEbeKwGKQSFaz
2015-07-27 12:29 - 2015-07-27 14:26 - 00008894 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6
2015-07-27 12:29 - 2015-07-27 14:26 - 00008552 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7
2015-07-27 12:29 - 2015-07-27 14:26 - 00008218 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11
2015-07-27 12:29 - 2015-07-27 14:26 - 00006508 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7
2015-07-27 12:29 - 2015-07-27 14:26 - 00005866 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.job
2015-07-27 12:29 - 2015-07-27 14:26 - 00005522 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7.job
2015-07-27 12:29 - 2015-07-27 14:26 - 00005188 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11.job
2015-07-27 12:29 - 2015-07-27 14:26 - 00003478 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7.job
2015-07-27 12:29 - 2015-07-27 14:25 - 00007528 _____ C:\Windows\System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3
2015-07-27 12:29 - 2015-07-27 14:25 - 00004498 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3.job
2015-07-27 12:29 - 2015-07-27 14:25 - 00002116 _____ C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10_user.job
2015-07-27 12:29 - 2015-07-27 12:33 - 00000000 ____D C:\Users\Iceflex\AppData\Local\WebBar
2015-07-27 12:29 - 2015-07-27 12:30 - 00000000 ____D C:\Users\Iceflex\AppData\Local\BrowserHelper
2015-07-27 12:29 - 2015-07-27 12:30 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV21.07
2015-07-27 12:29 - 2015-07-27 12:29 - 00004516 _____ C:\Windows\System32\Tasks\ShopperPro
2015-07-27 12:29 - 2015-07-27 12:29 - 00004246 _____ C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041
2015-07-27 12:29 - 2015-07-27 12:29 - 00003784 _____ C:\Windows\System32\Tasks\WebBarUpdateTask
2015-07-27 12:29 - 2015-07-27 12:29 - 00003730 _____ C:\Windows\System32\Tasks\SMupdate1
2015-07-27 12:29 - 2015-07-27 12:29 - 00003502 _____ C:\Windows\System32\Tasks\SPDriver
2015-07-27 12:29 - 2015-07-27 12:29 - 00003260 _____ C:\Windows\System32\Tasks\WebBarLaunchTask
2015-07-27 12:29 - 2015-07-27 12:29 - 00000000 ____D C:\ProgramData\InstallSightSDK
2015-07-27 12:29 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files\WebBar
2015-07-27 12:29 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files\Common Files\ShopperPro
2015-07-27 12:29 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files (x86)\f2cc58b0-020d-4a02-b4df-2629288f236e
2015-07-27 12:28 - 2015-07-27 12:29 - 00000000 ____D C:\ProgramData\ShopperPro
2015-07-27 12:28 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files (x86)\PragmaInstance
2015-07-27 12:28 - 2015-07-27 12:28 - 00003912 _____ C:\Windows\System32\Tasks\YTDownloaderUpd
2015-07-27 12:28 - 2015-07-27 12:28 - 00003590 _____ C:\Windows\System32\Tasks\YTDownloader
2015-07-27 12:28 - 2015-07-27 12:28 - 00003576 _____ C:\Windows\System32\Tasks\ShopperProJSUpd
2015-07-27 12:28 - 2015-07-27 12:28 - 00001953 _____ C:\Users\Iceflex\Desktop\YTDownloader.lnk
2015-07-27 12:28 - 2015-07-27 12:28 - 00000000 ____D C:\Users\Public\Documents\ShopperPro
2015-07-27 12:28 - 2015-07-27 12:28 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2015-07-27 12:28 - 2015-07-27 12:28 - 00000000 ____D C:\Program Files (x86)\YTDownloader
2015-07-27 12:28 - 2015-07-27 12:28 - 00000000 ____D C:\Program Files (x86)\ShopperPro
2015-07-27 12:28 - 2015-07-27 12:28 - 00000000 ____D C:\Program Files (x86)\Custom Background
2015-07-27 12:27 - 2015-07-27 14:17 - 00001028 _____ C:\Windows\Tasks\3EiWdjfG9MoN1P2oDMW9Cbrz.job
2015-07-27 12:27 - 2015-07-27 12:28 - 00000000 ____D C:\Users\Iceflex\AppData\Local\gmsd_de_005010041
2015-07-27 12:27 - 2015-07-27 12:28 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010041
2015-07-27 12:27 - 2015-07-27 12:27 - 00004062 _____ C:\Windows\System32\Tasks\3EiWdjfG9MoN1P2oDMW9Cbrz
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\mystartsearch
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 ____D C:\Users\Iceflex\AppData\Local\SmartWeb
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 ____D C:\Program Files (x86)\MyFunCards
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 _____ C:\dummy.htm
2015-07-27 12:26 - 2015-07-27 14:26 - 00003142 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.job
2015-07-27 12:26 - 2015-07-27 14:17 - 00003478 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7.job
2015-07-27 12:26 - 2015-07-27 14:17 - 00002450 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5_user.job
2015-07-27 12:26 - 2015-07-27 14:17 - 00002450 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.job
2015-07-27 12:26 - 2015-07-27 12:32 - 00000000 ____D C:\Program Files (x86)\youtubeadblocker
2015-07-27 12:26 - 2015-07-27 12:30 - 00000000 ____D C:\Program Files (x86)\PariceLaess
2015-07-27 12:26 - 2015-07-27 12:28 - 00000000 ____D C:\ProgramData\12440536295579549627
2015-07-27 12:26 - 2015-07-27 12:27 - 00005480 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5
2015-07-27 12:26 - 2015-07-27 12:26 - 00006508 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7
2015-07-27 12:26 - 2015-07-27 12:26 - 00006170 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6
2015-07-27 12:26 - 2015-07-27 12:26 - 00004252 _____ C:\Windows\System32\Tasks\SMW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041
2015-07-27 12:26 - 2015-07-27 12:26 - 00003862 _____ C:\Windows\System32\Tasks\SMWUpd
2015-07-27 12:26 - 2015-07-27 12:26 - 00003848 _____ C:\Windows\System32\Tasks\Smp
2015-07-27 12:26 - 2015-07-27 12:26 - 00000000 ____D C:\Users\Iceflex\AppData\Local\DeskBar
2015-07-27 12:26 - 2015-07-27 12:26 - 00000000 ____D C:\ProgramData\SearchModule
2015-07-27 12:26 - 2015-07-27 12:26 - 00000000 ____D C:\Program Files\Common Files\Goobzo
2015-07-27 12:25 - 2015-07-27 14:25 - 00005866 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.job
2015-07-27 12:25 - 2015-07-27 14:17 - 00005522 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7.job
2015-07-27 12:25 - 2015-07-27 14:17 - 00005188 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11.job
2015-07-27 12:25 - 2015-07-27 14:17 - 00004498 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3.job
2015-07-27 12:25 - 2015-07-27 12:52 - 00000366 _____ C:\Windows\Tasks\BudgetWise.job
2015-07-27 12:25 - 2015-07-27 12:32 - 00003728 _____ C:\Windows\System32\Tasks\Inst_Rep
2015-07-27 12:25 - 2015-07-27 12:25 - 00008894 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6
2015-07-27 12:25 - 2015-07-27 12:25 - 00008552 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7
2015-07-27 12:25 - 2015-07-27 12:25 - 00008218 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11
2015-07-27 12:25 - 2015-07-27 12:25 - 00007528 _____ C:\Windows\System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3
2015-07-27 12:25 - 2015-07-27 12:25 - 00003282 _____ C:\Windows\System32\Tasks\BudgetWise
2015-07-27 12:25 - 2015-07-27 12:25 - 00000863 _____ C:\Users\Iceflex\Desktop\3D BubbleSound.lnk
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\Users\Iceflex\AppData\Local\CrashRpt
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\ProgramData\daegndpidjibkaokepbpgfijeebplbkd
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\ProgramData\{dd5984d6-ce84-337f-dd59-984d6ce8135b}
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\Program Files\BubbleSound
2015-07-27 12:25 - 2015-07-27 12:25 - 00000000 ____D C:\Program Files (x86)\b69720a3-2063-4347-a42e-9d927e0d7349
2015-07-27 12:24 - 2015-07-27 14:24 - 00002116 _____ C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10_user.job
2015-07-27 12:24 - 2015-07-27 14:17 - 00002450 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5_user.job
2015-07-27 12:24 - 2015-07-27 14:17 - 00002450 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.job
2015-07-27 12:24 - 2015-07-27 14:17 - 00001016 _____ C:\Windows\Tasks\wM5dDPObXxKzVEXJUM.job
2015-07-27 12:24 - 2015-07-27 12:27 - 00000000 ____D C:\Program Files (x86)\Cinema_Plus-1.2V27.07
2015-07-27 12:24 - 2015-07-27 12:24 - 00005480 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5
2015-07-27 12:24 - 2015-07-27 12:24 - 00004050 _____ C:\Windows\System32\Tasks\wM5dDPObXxKzVEXJUM
2015-07-27 12:23 - 2015-07-27 14:23 - 00005866 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.job
2015-07-27 12:23 - 2015-07-27 14:23 - 00003142 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.job
2015-07-27 12:23 - 2015-07-27 14:23 - 00002116 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-10_user.job
2015-07-27 12:23 - 2015-07-27 14:18 - 00004498 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-3.job
2015-07-27 12:23 - 2015-07-27 14:17 - 00005522 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-7.job
2015-07-27 12:23 - 2015-07-27 14:17 - 00005188 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-11.job
2015-07-27 12:23 - 2015-07-27 14:17 - 00003478 _____ C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7.job
2015-07-27 12:23 - 2015-07-27 12:24 - 00000000 ____D C:\Program Files (x86)\CinemaPlus_1.3dV27.07
2015-07-27 12:23 - 2015-07-27 12:23 - 00008894 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-6
2015-07-27 12:23 - 2015-07-27 12:23 - 00008552 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-7
2015-07-27 12:23 - 2015-07-27 12:23 - 00008218 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-11
2015-07-27 12:23 - 2015-07-27 12:23 - 00007528 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-3
2015-07-27 12:23 - 2015-07-27 12:23 - 00006508 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7
2015-07-27 12:23 - 2015-07-27 12:23 - 00006170 _____ C:\Windows\System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6
2015-07-27 12:23 - 2015-07-27 12:23 - 00000000 ____D C:\Program Files (x86)\e478756a-91bb-4dba-a000-e28b5a7b844e
2015-07-27 12:22 - 2015-07-27 12:55 - 00000000 ___HD C:\Users\Iceflex\AppData\Roaming\FlipBoards
2015-07-27 12:22 - 2015-07-27 12:23 - 00000000 ____D C:\Windows\System32\Tasks\FlipBoards
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\Users\Public\QiYi
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\IQIYI Video
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\agederar
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\Users\Iceflex\AppData\Local\SysassistByHotWheel
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\ProgramData\IQIYI Video
2015-07-27 12:22 - 2015-07-27 12:22 - 00000000 ____D C:\IQIYI Video
2015-07-27 12:21 - 2015-07-27 12:53 - 00001317 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-07-27 12:21 - 2015-07-27 12:53 - 00001305 _____ C:\Users\Public\Desktop\Opera.lnk
2015-07-27 12:21 - 2015-07-27 12:26 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\InetStat
2015-07-27 12:21 - 2015-07-27 12:21 - 00003850 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1437992470
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Opera Software
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Opera Software
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Program Files (x86)\F1EB78A0-1437992506-11D5-BA88-50465D073624
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Program Files (x86)\baidu
2015-07-27 12:20 - 2015-07-27 14:24 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-27 12:20 - 2015-07-27 14:21 - 00000000 ____D C:\Users\Iceflex\AppData\Local\mbot_de_014010041
2015-07-27 12:20 - 2015-07-27 12:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
2015-07-27 12:20 - 2015-07-27 12:20 - 00000000 ____D C:\ProgramData\IHProtectUpDate
2015-07-27 12:20 - 2015-07-27 12:20 - 00000000 ____D C:\Program Files (x86)\mbot_de_014010042
2015-07-27 12:20 - 2015-07-27 12:20 - 00000000 ____D C:\Program Files (x86)\mbot_de_014010041
2015-07-27 12:19 - 2015-07-27 14:25 - 00004094 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-07-27 12:19 - 2015-07-27 14:25 - 00002390 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-07-27 12:19 - 2015-07-27 14:25 - 00001060 _____ C:\Windows\Tasks\Crossbrowse.job
2015-07-27 12:19 - 2015-07-27 12:20 - 00000000 ____D C:\ProgramData\1WinManPro1
2015-07-27 12:19 - 2015-07-27 12:20 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Crossbrowse
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 _____ C:\Windows\prleth.sys
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-27 12:18 - 2015-07-27 14:22 - 00000000 ____D C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624
2015-07-27 12:18 - 2015-07-27 14:18 - 00005844 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-6.job
2015-07-27 12:18 - 2015-07-27 14:18 - 00005520 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.job
2015-07-27 12:18 - 2015-07-27 14:18 - 00003456 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-6.job
2015-07-27 12:18 - 2015-07-27 14:18 - 00003140 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00005500 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-7.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00005186 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00005184 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00005166 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-11.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00003476 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00003456 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-7.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00002772 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5_user.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00002772 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00002448 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5_user.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00002448 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.job
2015-07-27 12:18 - 2015-07-27 14:17 - 00001000 _____ C:\Windows\Tasks\Pn8IAC2P21.job
2015-07-27 12:18 - 2015-07-27 12:52 - 00009944 _____ C:\Windows\SysWOW64\acengineOff.ini
2015-07-27 12:18 - 2015-07-27 12:52 - 00009944 _____ C:\Windows\system32\acengineOff.ini
2015-07-27 12:18 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files (x86)\a9e7144b-cc20-4f13-bba2-cc1df55c4de0
2015-07-27 12:18 - 2015-07-27 12:18 - 00008872 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-6
2015-07-27 12:18 - 2015-07-27 12:18 - 00008548 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6
2015-07-27 12:18 - 2015-07-27 12:18 - 00008530 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-7
2015-07-27 12:18 - 2015-07-27 12:18 - 00008216 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11
2015-07-27 12:18 - 2015-07-27 12:18 - 00008214 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7
2015-07-27 12:18 - 2015-07-27 12:18 - 00008196 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-11
2015-07-27 12:18 - 2015-07-27 12:18 - 00006506 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7
2015-07-27 12:18 - 2015-07-27 12:18 - 00006486 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-7
2015-07-27 12:18 - 2015-07-27 12:18 - 00006484 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-6
2015-07-27 12:18 - 2015-07-27 12:18 - 00006168 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6
2015-07-27 12:18 - 2015-07-27 12:18 - 00005802 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5
2015-07-27 12:18 - 2015-07-27 12:18 - 00005478 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5
2015-07-27 12:18 - 2015-07-27 12:18 - 00004034 _____ C:\Windows\System32\Tasks\Pn8IAC2P21
2015-07-27 12:18 - 2015-07-27 12:18 - 00003092 _____ C:\Windows\System32\Tasks\sab3009
2015-07-27 12:18 - 2015-07-27 12:18 - 00000002 _____ C:\END
2015-07-27 12:18 - 2015-07-27 12:18 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\oursurfing
2015-07-27 12:18 - 2015-07-27 12:18 - 00000000 ____D C:\Program Files (x86)\1d0afd65-a048-4448-a105-720a98169387
2015-07-27 12:18 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-27 12:17 - 2015-07-27 14:25 - 00003976 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-07-27 12:17 - 2015-07-27 14:25 - 00003722 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-07-27 12:17 - 2015-07-27 14:25 - 00000978 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-07-27 12:17 - 2015-07-27 14:25 - 00000974 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-07-27 12:17 - 2015-07-27 14:25 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-27 12:17 - 2015-07-27 14:18 - 00000000 ____D C:\Program Files (x86)\FastSearch
2015-07-27 12:17 - 2015-07-27 14:17 - 00004496 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3.job
2015-07-27 12:17 - 2015-07-27 14:17 - 00004476 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-3.job
2015-07-27 12:17 - 2015-07-27 14:17 - 00002114 _____ C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10_user.job
2015-07-27 12:17 - 2015-07-27 14:17 - 00002094 _____ C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-10_user.job
2015-07-27 12:17 - 2015-07-27 12:29 - 00000000 ____D C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624
2015-07-27 12:17 - 2015-07-27 12:18 - 00000000 ____D C:\Program Files (x86)\I - Cinema
2015-07-27 12:17 - 2015-07-27 12:18 - 00000000 ____D C:\Program Files (x86)\CinemaPlus_5.1V27.07
2015-07-27 12:17 - 2015-07-27 12:17 - 00007526 _____ C:\Windows\System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3
2015-07-27 12:17 - 2015-07-27 12:17 - 00007506 _____ C:\Windows\System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-3
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\ASPackage
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Users\Iceflex\AppData\Local\globalUpdate
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Program Files (x86)\SearchProtect2_IMonetizer
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-07-27 12:17 - 2015-07-13 06:01 - 00350216 _____ (Abengine) C:\Windows\system32\acengine64.dll
2015-07-27 12:17 - 2015-07-13 06:01 - 00299072 _____ (Abengine) C:\Windows\SysWOW64\acengine.dll
2015-07-27 12:16 - 2015-07-27 12:58 - 00000000 ____D C:\Users\Iceflex\AppData\Local\BoBrowser
2015-07-27 12:16 - 2015-07-27 12:53 - 00001182 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 12:53 - 00001152 _____ C:\Users\Iceflex\Desktop\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 12:17 - 00000000 ____D C:\Program Files (x86)\Iminent
2015-07-27 12:16 - 2015-07-27 12:16 - 00004054 _____ C:\Windows\System32\Tasks\PostPoneInstall
2015-07-27 12:16 - 2015-07-27 12:16 - 00003164 _____ C:\Windows\System32\Tasks\Run_Bobby_Browser
2015-07-27 12:16 - 2015-07-27 12:16 - 00001312 _____ C:\Users\Iceflex\AppData\Local\Chrome .lnk
2015-07-27 12:16 - 2015-07-27 12:16 - 00000965 _____ C:\Users\Iceflex\AppData\Local\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 12:16 - 00000298 _____ C:\Users\Iceflex\Desktop\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 12:16 - 00000298 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 12:16 - 00000298 _____ C:\Users\Iceflex\AppData\Local\Firefox .lnk
2015-07-27 12:15 - 2015-07-27 14:17 - 00000346 ____H C:\Windows\Tasks\HGFTONKTGNYRDTTL.job
2015-07-27 12:15 - 2015-07-27 14:17 - 00000328 _____ C:\Windows\Tasks\DVIASFY1.job
2015-07-27 12:15 - 2015-07-27 12:28 - 00000000 ____D C:\ProgramData\NavRight
2015-07-27 12:15 - 2015-07-27 12:16 - 00007636 _____ C:\claraInstaller.txt
2015-07-27 12:15 - 2015-07-27 12:15 - 00004170 _____ C:\Windows\System32\Tasks\WordShark Auto Updater 1.10.0.20 Pending Update
2015-07-27 12:15 - 2015-07-27 12:15 - 00004164 _____ C:\Windows\System32\Tasks\WordShark Auto Updater 1.10.0.20 Core
2015-07-27 12:15 - 2015-07-27 12:15 - 00003384 _____ C:\Windows\System32\Tasks\HGFTONKTGNYRDTTL
2015-07-27 12:15 - 2015-07-27 12:15 - 00002850 _____ C:\Windows\System32\Tasks\DVIASFY1
2015-07-27 12:15 - 2015-07-27 12:15 - 00000000 ____D C:\ProgramData\Service8609
2015-07-27 12:15 - 2015-07-27 12:15 - 00000000 ____D C:\ProgramData\12db864551ae4c578eb17db1a9f5d3cf
2015-07-27 12:15 - 2015-07-27 12:15 - 00000000 ____D C:\Program Files (x86)\WordShark_1.10.0.20
2015-07-27 12:14 - 2015-07-27 12:18 - 00000000 ____D C:\Program Files (x86)\app_setup
2015-07-27 12:14 - 2015-07-27 12:14 - 00000000 ____D C:\Program Files (x86)\MyPCBU
2015-07-27 12:13 - 2015-07-27 12:13 - 01000153 _____ C:\Users\Iceflex\Downloads\Cracked Honorbuddy Auth Serve Downloader__3687_i1566519080_il54498.exe.zip
2015-07-27 11:41 - 2015-07-27 11:41 - 01183539 _____ C:\Users\Iceflex\Downloads\Fischit3.4.rar
2015-07-27 11:38 - 2015-07-27 11:38 - 00120616 _____ C:\Users\Iceflex\Downloads\WRobot.zip
2015-07-25 21:11 - 2015-07-27 12:17 - 00000660 _____ C:\Users\Public\Desktop\World of Warships.lnk
2015-07-25 21:11 - 2015-07-25 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-07-25 21:08 - 2015-07-25 21:08 - 06949352 _____ (Wargaming.net ) C:\Users\Iceflex\Downloads\WoWS_internet_install_eu.exe
2015-07-23 02:58 - 2015-07-23 02:58 - 00000122 _____ C:\Users\Iceflex\Desktop\Skyforge My.com.url
2015-07-23 02:58 - 2015-07-23 02:58 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com
2015-07-23 00:20 - 2015-07-27 14:19 - 00000000 ____D C:\Users\Iceflex\AppData\Local\MyComGames
2015-07-23 00:20 - 2015-07-23 00:20 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2015-07-23 00:18 - 2015-07-23 00:18 - 04541936 _____ C:\Users\Iceflex\Downloads\SkyforgeLoader_de.exe
2015-07-21 12:26 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 12:26 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 12:26 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 12:26 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-15 10:32 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:32 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:32 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:32 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:32 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:32 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:32 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:32 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:32 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:32 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:32 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:32 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:32 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:32 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:32 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:32 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:32 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:32 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:32 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:32 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:32 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:32 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:32 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:32 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:32 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:32 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:32 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:32 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:32 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:32 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:32 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:32 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:32 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:32 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:32 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:32 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:32 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:32 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:32 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:32 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:32 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:32 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:32 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:32 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 10:31 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 10:31 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 10:31 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 10:31 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:31 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:31 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:31 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:31 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:31 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:31 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:31 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:31 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:31 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:31 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:31 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:31 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:31 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:31 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:31 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:31 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:31 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:31 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:31 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-15 10:31 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 10:31 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:31 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:25 - 2015-07-15 10:25 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Iceflex\Downloads\flashplayer18_ha_install.exe
2015-07-15 10:21 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 10:21 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 10:21 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 10:21 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:21 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:21 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:21 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:21 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:21 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:21 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:21 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:21 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:21 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:21 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:21 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:21 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:21 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:21 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:21 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:21 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:21 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:21 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:21 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:21 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:21 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:21 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:21 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:21 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:21 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:21 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 10:21 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 10:10 - 2015-07-15 10:10 - 00931408 _____ (Google Inc.) C:\Users\Iceflex\Downloads\ChromeSetup.exe
2015-07-06 21:11 - 2015-07-06 21:11 - 00061312 _____ (WS) C:\Windows\system32\Drivers\wsfd_vt_1_10_0_20.sys
2015-07-06 21:11 - 2015-07-06 21:11 - 00057728 _____ (WS) C:\Windows\system32\Drivers\wsfd_vw_1_10_0_20.sys
2015-07-06 11:49 - 2015-07-06 11:49 - 07052760 _____ (Wargaming.net ) C:\Users\Iceflex\Downloads\WoWS_internet_install_na.exe
2015-07-03 09:13 - 2015-07-03 15:04 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\MediaPurge
2015-07-03 09:11 - 2015-07-27 12:17 - 00001953 _____ C:\Users\Iceflex\Desktop\Mediapurge.lnk
2015-07-03 09:11 - 2015-07-03 09:11 - 04044725 _____ C:\Users\Iceflex\Downloads\Mediapurge_installer_5.61a.exe
2015-07-03 09:11 - 2015-07-03 09:11 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediapurge
2015-07-03 09:11 - 2015-07-03 09:11 - 00000000 ____D C:\Program Files (x86)\Mediapurge
2015-07-03 09:08 - 2015-07-03 09:08 - 00015088 _____ C:\Users\Iceflex\Downloads\MMFR1572wh01_-_UL-d6e4eqnpu27.dlc
2015-07-01 19:15 - 2015-07-01 19:15 - 00000000 ____D C:\Users\Iceflex\AppData\Local\UWebKit151
2015-07-01 18:25 - 2015-07-02 21:02 - 00000000 ____D C:\Users\Iceflex\Downloads\Gameforge Live
2015-07-01 18:25 - 2015-07-01 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-07-01 18:25 - 2015-07-01 18:25 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Gameforge4d
2015-07-01 18:22 - 2015-07-01 18:23 - 20223080 _____ (Gameforge ) C:\Users\Iceflex\Downloads\OMD_GameforgeLiveSetup (1).exe
2015-07-01 18:22 - 2015-07-01 18:22 - 20223080 _____ (Gameforge ) C:\Users\Iceflex\Downloads\OMD_GameforgeLiveSetup.exe
2015-07-01 17:23 - 2015-07-01 17:22 - 00238376 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2015-06-27 18:40 - 2015-07-09 22:40 - 17582768 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-06-27 17:32 - 2015-06-17 11:10 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-06-27 17:32 - 2015-06-17 11:10 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00408392 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 14:26 - 2015-01-25 03:11 - 00000000 ____D C:\FRST
2015-07-27 14:26 - 2010-11-21 08:50 - 00699868 _____ C:\Windows\system32\perfh007.dat
2015-07-27 14:26 - 2010-11-21 08:50 - 00149750 _____ C:\Windows\system32\perfc007.dat
2015-07-27 14:26 - 2009-07-14 07:13 - 01622228 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 14:25 - 2015-01-25 03:10 - 00000356 _____ C:\Users\Iceflex\defogger_reenable
2015-07-27 14:25 - 2012-12-22 22:31 - 01858256 _____ C:\Windows\WindowsUpdate.log
2015-07-27 14:24 - 2013-03-18 18:30 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 14:24 - 2012-12-23 16:05 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Skype
2015-07-27 14:23 - 2014-02-02 02:00 - 00110331 _____ C:\Windows\setupact.log
2015-07-27 14:23 - 2012-12-25 01:22 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Deployment
2015-07-27 14:23 - 2009-07-14 06:45 - 00032080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 14:23 - 2009-07-14 06:45 - 00032080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 14:20 - 2013-10-06 13:52 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Battle.net
2015-07-27 14:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 13:10 - 2015-01-20 04:35 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-07-27 13:03 - 2014-01-31 08:47 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-27 12:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-27 12:53 - 2013-11-26 09:45 - 00001615 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 12:52 - 2009-07-14 06:45 - 00289952 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 12:51 - 2014-02-04 16:56 - 00024556 _____ C:\Windows\PFRO.log
2015-07-27 12:51 - 2013-11-24 20:37 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Unity
2015-07-27 12:40 - 2013-11-24 20:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-27 12:33 - 2012-12-23 16:07 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\TS3Client
2015-07-27 12:28 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-27 12:26 - 2012-12-22 22:32 - 00065520 _____ C:\Users\Iceflex\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-27 12:24 - 2014-01-31 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-27 12:22 - 2014-12-16 11:43 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieBrowserModeList
2015-07-27 12:22 - 2014-06-14 13:39 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieUserList
2015-07-27 12:22 - 2014-06-14 13:39 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieSiteList
2015-07-27 12:18 - 2012-12-14 15:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-27 12:17 - 2015-05-11 12:23 - 00002243 _____ C:\Users\UpdatusUser\Desktop\Knuddels.lnk
2015-07-27 12:17 - 2015-05-11 12:23 - 00002243 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Knuddels.lnk
2015-07-27 12:17 - 2013-10-09 00:48 - 00002266 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 12:17 - 2013-10-09 00:48 - 00001915 _____ C:\Users\UpdatusUser\Desktop\Microsoft Security Essentials.lnk
2015-07-27 12:17 - 2013-10-09 00:48 - 00001433 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 12:17 - 2013-10-09 00:48 - 00001427 _____ C:\Users\UpdatusUser\Desktop\Internet Explorer.lnk
2015-07-27 12:17 - 2013-10-09 00:48 - 00001411 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 12:17 - 2013-08-21 12:14 - 00000781 _____ C:\Users\Iceflex\Desktop\!!!Musik!!!.lnk
2015-07-27 12:17 - 2013-08-05 12:47 - 00002266 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 12:17 - 2013-08-05 12:47 - 00001915 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Microsoft Security Essentials.lnk
2015-07-27 12:17 - 2013-08-05 12:47 - 00001433 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 12:17 - 2013-08-05 12:47 - 00001427 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Internet Explorer.lnk
2015-07-27 12:17 - 2013-08-05 12:47 - 00001411 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 12:17 - 2013-01-15 21:23 - 00000726 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2015-07-27 12:17 - 2012-12-22 22:32 - 00002266 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001903 _____ C:\Users\Default\Desktop\Microsoft Security Essentials.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001903 _____ C:\Users\Default User\Desktop\Microsoft Security Essentials.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001433 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001433 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001427 _____ C:\Users\Default\Desktop\Internet Explorer.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001427 _____ C:\Users\Default User\Desktop\Internet Explorer.lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001399 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 12:17 - 2012-12-21 15:43 - 00001399 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 12:17 - 2012-12-14 15:45 - 00002266 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 12:17 - 2012-12-14 15:45 - 00002266 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-25 21:11 - 2013-10-29 07:03 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-07-25 14:41 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-23 14:22 - 2012-12-23 16:14 - 00000000 ___RD C:\Users\Iceflex\Desktop\Programme
2015-07-20 15:08 - 2015-03-30 12:25 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\vlc
2015-07-19 11:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-17 10:55 - 2012-12-23 16:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-17 10:55 - 2012-12-23 16:05 - 00000000 ____D C:\ProgramData\Skype
2015-07-16 22:30 - 2014-08-20 12:26 - 00000000 ____D C:\Program Files (x86)\OBS
2015-07-16 22:30 - 2013-07-16 16:09 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\OBS
2015-07-16 11:00 - 2014-12-11 04:25 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-16 11:00 - 2014-05-07 00:41 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-16 11:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-16 00:30 - 2013-08-09 00:00 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 20:26 - 2015-02-15 14:04 - 00000000 ____D C:\Users\Iceflex\AppData\Local\JDownloader 2.0
2015-07-12 22:10 - 2015-03-31 21:18 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\dvdcss
2015-07-11 21:13 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-11 16:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-09 10:54 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-06 15:35 - 2013-08-05 18:16 - 06637568 ___SH C:\Users\Iceflex\Desktop\Thumbs.db
2015-07-03 08:43 - 2012-01-13 16:22 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 21:02 - 2015-06-01 17:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-01 19:17 - 2014-09-22 18:49 - 00000000 ____D C:\Users\Iceflex\Documents\My Games
2015-07-01 18:30 - 2012-12-22 22:42 - 00000000 ___RD C:\Users\Iceflex\Desktop\Games
2015-07-01 18:29 - 2014-03-16 01:48 - 00512850 _____ C:\Windows\DirectX.log
2015-07-01 17:13 - 2012-12-23 18:44 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-06-29 21:48 - 2013-10-06 13:52 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-06-27 18:40 - 2015-03-03 23:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-27 18:40 - 2012-04-16 10:33 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-27 18:40 - 2012-01-13 15:34 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-27 17:38 - 2015-05-19 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-27 17:38 - 2012-12-21 15:18 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-27 17:33 - 2015-05-19 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Iceflex\AppData\Roaming\3EiWdjfG9MoN1P2oDMW9Cbrz
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Iceflex\AppData\Roaming\3EiWdjfG9MoN1P2oDMW9Cbrz.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Iceflex\AppData\Roaming\F4xUuhVkqd
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Iceflex\AppData\Roaming\F4xUuhVkqd.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Iceflex\AppData\Roaming\hOEQrYeLUBFOPHEbeKwGKQSFaz
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Iceflex\AppData\Roaming\hOEQrYeLUBFOPHEbeKwGKQSFaz.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Iceflex\AppData\Roaming\Pn8IAC2P21
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Iceflex\AppData\Roaming\Pn8IAC2P21.exe
2014-09-27 01:24 - 2014-11-11 01:24 - 0000135 _____ () C:\Users\Iceflex\AppData\Roaming\WB.CFG
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Iceflex\AppData\Roaming\wM5dDPObXxKzVEXJUM
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Iceflex\AppData\Roaming\wM5dDPObXxKzVEXJUM.exe
2014-10-23 19:24 - 2014-10-23 19:24 - 0022528 _____ () C:\Users\Iceflex\AppData\Local\27525892dsisetup275314932.exe
2015-07-27 12:16 - 2015-07-27 12:16 - 0001312 _____ () C:\Users\Iceflex\AppData\Local\Chrome .lnk
2014-10-23 19:24 - 2014-10-23 19:24 - 0000010 _____ () C:\Users\Iceflex\AppData\Local\DSI.DAT
2015-07-27 12:16 - 2015-07-27 12:16 - 0000298 _____ () C:\Users\Iceflex\AppData\Local\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 12:16 - 0000965 _____ () C:\Users\Iceflex\AppData\Local\Iexplore .lnk
2014-09-27 00:36 - 2014-09-27 00:36 - 0003898 _____ () C:\Users\Iceflex\AppData\Local\recently-used.xbel
2012-12-22 22:32 - 2012-04-16 10:41 - 0000017 _____ () C:\Users\Iceflex\AppData\Local\resmon.resmoncfg
2013-07-20 11:02 - 2013-07-20 11:02 - 0482476 _____ () C:\ProgramData\1374310767.bdinstall.bin
2013-08-09 00:27 - 2013-08-09 00:27 - 0246392 _____ () C:\ProgramData\1376000700.bdinstall.bin
2014-02-02 02:04 - 2014-02-02 02:04 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\Iceflex\AppData\Local\Temp\4416.exe
C:\Users\Iceflex\AppData\Local\Temp\6920.exe
C:\Users\Iceflex\AppData\Local\Temp\69a7d2359d534e3423ed674187eded12.dll
C:\Users\Iceflex\AppData\Local\Temp\7978.exe
C:\Users\Iceflex\AppData\Local\Temp\8321.exe
C:\Users\Iceflex\AppData\Local\Temp\8422.exe
C:\Users\Iceflex\AppData\Local\Temp\8546.exe
C:\Users\Iceflex\AppData\Local\Temp\8588.exe
C:\Users\Iceflex\AppData\Local\Temp\AutoRun.exe
C:\Users\Iceflex\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Iceflex\AppData\Local\Temp\avgnt.exe
C:\Users\Iceflex\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Iceflex\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Iceflex\AppData\Local\Temp\EAInstall.dll
C:\Users\Iceflex\AppData\Local\Temp\eauninstall.exe
C:\Users\Iceflex\AppData\Local\Temp\fsd5A04.exe
C:\Users\Iceflex\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\Iceflex\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\Iceflex\AppData\Local\Temp\i4jdel0.exe
C:\Users\Iceflex\AppData\Local\Temp\IQIYIsetup_l_spl004@kb005.exe
C:\Users\Iceflex\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Iceflex\AppData\Local\Temp\nsh8460.tmp.exe
C:\Users\Iceflex\AppData\Local\Temp\nsw8884.exe
C:\Users\Iceflex\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Iceflex\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Iceflex\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\Iceflex\AppData\Local\Temp\nvStInst.exe
C:\Users\Iceflex\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\Iceflex\AppData\Local\Temp\proxy_vole654269872010476805.dll
C:\Users\Iceflex\AppData\Local\Temp\qqpcmgr_v10.10.16434.218_72830_Silence.exe
C:\Users\Iceflex\AppData\Local\Temp\sdf2DF5.exe
C:\Users\Iceflex\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Iceflex\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Iceflex\AppData\Local\Temp\setup3.exe
C:\Users\Iceflex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Iceflex\AppData\Local\Temp\sonarinst.exe
C:\Users\Iceflex\AppData\Local\Temp\sqlite-unknown-c0c87852-2b31-4011-8b9d-6023ea97ff65-sqlitejdbc.dll
C:\Users\Iceflex\AppData\Local\Temp\supoptsetup.exe
C:\Users\Iceflex\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe
C:\Users\Iceflex\AppData\Local\Temp\uninst1.exe
C:\Users\Iceflex\AppData\Local\Temp\Uninstall.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\Wildstar.exe
C:\Users\Iceflex\AppData\Local\Temp\_is6392.exe
C:\Users\Iceflex\AppData\Local\Temp\{7B47E483-0A4E-4FF7-996F-EC17E5813A75}.exe
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert
testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION!
LastRegBack: 2015-07-23 01:38
==================== Ende von log ============================
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 14:16
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Windows 7: Programme installieren sich selbständig Hi,
__________________Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
27.07.2015, 14:26
| #3 |
| | Windows 7: Programme installieren sich selbständig Addition 1/2
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:26-07-2015
durchgeführt von Iceflex an 2015-07-27 14:27:58
Gestartet von C:\Users\Iceflex\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3034823679-1296368078-3842842608-500 - Administrator - Disabled)
Gast (S-1-5-21-3034823679-1296368078-3842842608-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3034823679-1296368078-3842842608-1008 - Limited - Enabled)
Iceflex (S-1-5-21-3034823679-1296368078-3842842608-1002 - Administrator - Enabled) => C:\Users\Iceflex
Mcx1-ICEFLEX-PC (S-1-5-21-3034823679-1296368078-3842842608-1006 - Limited - Enabled) => C:\Users\Mcx1-ICEFLEX-PC
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
agederar (HKLM-x32\...\{9f58a80e-3c37-4557-0e9d-4857a20ed324}) (Version: 1.0.0 - ryofward) <==== ATTENTION!
Alien Isolation Ripley Edition MULTi2 1.0 (HKLM-x32\...\Alien Isolation Ripley Edition MULTi2 1.0) (Version: - )
Alien Isolation Ripley Edition Update 1 MULTi2 1.0 (HKLM-x32\...\Alien Isolation Ripley Edition Update 1 MULTi2 1.0) (Version: - )
AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ATTENTION!
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Assassin's Creed Freedom Cry (HKLM-x32\...\Steam App 277590) (Version: - Ubisoft Montreal)
Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version: - Ubisoft Montreal)
Assassins Creed IV Black Flag Digital Deluxe Edition MULTI-5 1.01 (HKLM-x32\...\Assassins Creed IV Black Flag Digital Deluxe Edition MULTI-5 1.01) (Version: - )
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Aufstieg des Hexenkönigs™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - )
Axxa's World of Warcraft Logo Creator v1.2 (HKLM-x32\...\Axxa's World of Warcraft Logo Creator v1.2) (Version: - )
Batman: Arkham Origins (HKLM-x32\...\Batman: Arkham Origins_is1) (Version: - Warner Bros. Interactive Entertainment)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.25648 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BioShock Infinite Burial at Sea Episode One DLC Plus Update v1.1.23.63123 1.0 (HKLM-x32\...\BioShock Infinite Burial at Sea Episode One DLC Plus Update v1.1.23.63123 1.0) (Version: - )
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.6.3 - BitRaider, LLC)
BubbleSound (HKLM\...\BubbleSound) (Version: 1.0 - BubbleSound) <==== ATTENTION!
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Cinema_Plus-1.2V27.07 (HKLM-x32\...\Cinema_Plus-1.2V27.07) (Version: 1.36.01.22 - Cinema_Plus-1.2V27.07) <==== ATTENTION
CinemaPlus_1.3dV27.07 (HKLM-x32\...\CinemaPlus_1.3dV27.07) (Version: 1.36.01.22 - CinemaPlus_1.3dV27.07) <==== ATTENTION
CinemaPlus_5.1V27.07 (HKLM-x32\...\CinemaPlus_5.1V27.07) (Version: 1.36.01.22 - CinemaPlusV27.07) <==== ATTENTION
CinemaPlus-3.2cV21.07 (HKLM-x32\...\CinemaPlus-3.2cV21.07) (Version: 1.36.01.22 - Cinema PlusV21.07) <==== ATTENTION
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
Crossbrowse (HKLM-x32\...\Crossbrowse) (Version: 39.6.2171.95 - The Crossbrowse Authors) <==== ATTENTION!
Curse Client (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Custom Background (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version: - ) <==== ATTENTION
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 5.2.0.0348 - DT Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version: - Stunlock Studios)
Dead Rising 3 Apocalypse Edition MULTi2 1.0 (HKLM-x32\...\Dead Rising 3 Apocalypse Edition MULTi2 1.0) (Version: - )
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Defiance (HKLM-x32\...\Steam App 224600) (Version: - Trion Worlds, Inc.)
DefianceRuntimes (HKLM-x32\...\{79B1FF35-9EA8-48ED-98D6-19ABE004BE89}) (Version: 1.0.2 - Trion Worlds, Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 10 MULTi2 1.5.139.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 10 MULTi2 1.5.139.1020) (Version: - )
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.5.149.1020 - Electronic Arts Inc.)
Dragon Age Inquisition Digital Deluxe Edition Incl. Update 2 & Hotfix MULTi2 1.0 (HKLM-x32\...\Dragon Age Inquisition Digital Deluxe Edition Incl. Update 2 & Hotfix MULTi2 1.0) (Version: - )
Dragon Ball Xenoverse (HKLM-x32\...\{XXXXXXXX-XXXX-XXXX-XXXX-BLACKBOX0036}) (Version: 6.0 - Black Box)
Dungeons 2 (HKLM-x32\...\Dungeons 2_is1) (Version: - )
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.6.0.0 - Electronic Arts)
EF Duplicate MP3 Finder (HKLM\...\EF Duplicate MP3 Finder) (Version: - EFSoftware)
EPSON SX235 Series Printer Uninstall (HKLM\...\EPSON SX235 Series) (Version: - SEIKO EPSON Corporation)
EPU-4 Engine (HKLM-x32\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.03.03 - )
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
FastSearch (HKLM-x32\...\FastSearch) (Version: 3.0.0.9 - FastSearch)
flipboards (HKLM-x32\...\flipboards) (Version: 3.6.9 - flipboards)
Forum Terminal (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Forum Terminal)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Friendly Error (HKLM-x32\...\FriendlyError) (Version: - )
Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge)
GamesDesktop 014.005010041 (HKLM-x32\...\gmsd_de_005010041_is1) (Version: - GAMESDESKTOP) <==== ATTENTION
Ge-Force (HKLM-x32\...\Ge-Force) (Version: 1.36.01.22 - Webar) <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HOTSLogsUploader (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\fe710033985bcaab) (Version: 1.0.0.9 - HOTSLogsUploader)
I - Cinema (HKLM-x32\...\I - Cinema) (Version: 1.36.01.22 - iCinema)
Iminent (HKLM-x32\...\IMBoosterARP) (Version: 7.48.4.1 - Iminent) <==== ATTENTION
IminentToolbar (HKLM-x32\...\IminentToolbar) (Version: 7.48.4.1 - Iminent) <==== ATTENTION
Impulse (HKLM-x32\...\Impulse) (Version: - Stardock)
Impulse (x32 Version: 1.0 - Stardock Corporation) Hidden
InetStat (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\InetStat) (Version: 0.5b - InetStat) <==== ATTENTION!
Infinite Crisis™ (HKLM-x32\...\Steam App 345520) (Version: - Turbine, Inc.)
InfraRecorder (HKLM-x32\...\InfraRecorder) (Version: - Christian Kindahl)
IObit Apps Toolbar v10.8 (HKLM-x32\...\{27BBDC43-A392-479F-9887-2DCC26C58920}) (Version: 10.8 - Spigot, Inc.) <==== ATTENTION
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
KCService.de Fernwartung (HKLM-x32\...\{25D56EF8-ED54-41F2-B3AB-C62F76A54E1E}) (Version: 1.0.0 - KCS Service GmbH)
Knuddels Desktop App (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Knuddels Desktop App ) (Version: "2014.12.13.0" - "Knuddels Desktop App")
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Logitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7248) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Lucius II (HKLM-x32\...\Lucius II_is1) (Version: - )
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Marvel Heroes Game (HKLM-x32\...\{ca6069b5-fc6b-4ce8-a03e-2304143706b7}_is1) (Version: 1.0 - Gazillion Entertainment)
Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.61 - Peter Lorenz)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Murdered Soul Suspect Multi2 1.0 (HKLM-x32\...\Murdered Soul Suspect Multi2 1.0) (Version: - )
My.com Game Center (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\MyComGames) (Version: 3.139 - My.com B.V.)
MyBestOffersToday 014.014010041 (HKLM-x32\...\mbot_de_014010041_is1) (Version: - MYBESTOFFERSTODAY) <==== ATTENTION
MyPCBU version 2.25 (HKLM-x32\...\{7D7D6742-5B49-4454-9E9B-748E731E741A}_is1) (Version: 2.25 - )
mystartsearch uninstall (HKLM-x32\...\mystartsearch uninstall) (Version: - mystartsearch) <==== ATTENTION
NavRight (HKLM-x32\...\NavRight) (Version: - )
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.30 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}) (Version: 3.41.9593 - Apache Software Foundation)
Opera Stable 30.0.1835.125 (HKLM-x32\...\Opera 30.0.1835.125) (Version: 30.0.1835.125 - Opera Software)
Orcs Must Die! Unchained (HKLM-x32\...\{8EBA33AF-48E0-4207-A4EE-96029415AD76}_is1) (Version: - Gameforge 4D GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
oursurfing uninstall (HKLM-x32\...\oursurfing uninstall) (Version: - oursurfing) <==== ATTENTION
Panda Security URL Filtering (HKLM-x32\...\Panda Security URL Filtering) (Version: 2.0.2.0 - Panda Security)
PariceLaess (HKLM-x32\...\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}) (Version: - ) <==== ATTENTION
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106 - Realtek Semiconductor Corp.)
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version: - Piranha Bytes)
Ryse Son of Rome MULTi2 1.0 (HKLM-x32\...\Ryse Son of Rome MULTi2 1.0) (Version: - )
Ryse Son of Rome Update 2 [Hotfix] MULTi2 1.0 (HKLM-x32\...\Ryse Son of Rome Update 2 [Hotfix] MULTi2 1.0) (Version: - )
Saints Row Gat Out of Hell MULTi7 1.0 (HKLM-x32\...\Saints Row Gat Out of Hell MULTi7 1.0) (Version: - )
Saints Row Gat Out of Hell Update 1 MULTi7 1.0 (HKLM-x32\...\Saints Row Gat Out of Hell Update 1 MULTi7 1.0) (Version: - )
Saints Row IV Commander in Chief Edition 1.0 (HKLM-x32\...\Saints Row IV Commander in Chief Edition 1.0) (Version: - )
Search module (HKLM-x32\...\Search module) (Version: - Goobzo)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - )
Sherlock Holmes Crimes and Punishments Version 1.0 (HKLM-x32\...\{DA951913-30E5-4182-8731-84C2163310B8}_is1) (Version: 1.0 - Focus Home Interactive)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shopper-Pro (HKLM-x32\...\ShopperPro) (Version: - ) <==== ATTENTION
skyforge_mycom (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\skyforge_mycom) (Version: 1.28 - My.com B.V.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
SmartWeb (HKLM-x32\...\SmartWeb) (Version: 8.0.9 - SoftBrain Technologies Ltd.) <==== ATTENTION
Sniper Elite 3(CREATED BY XEONKING©) (HKLM-x32\...\Sniper Elite 3_is1) (Version: 1.10 - )
South Park Der Stab der Wahrheit Incl. Ultimate Fellowship Pack MULTI-2 1.00 (HKLM-x32\...\South Park Der Stab der Wahrheit Incl. Ultimate Fellowship Pack MULTI-2 1.00) (Version: - )
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Startfenster (HKLM\...\Startfenster) (Version: - Startfenster)
State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Optimizer v3.2 (HKLM-x32\...\Super Optimizer_is1) (Version: 3.2.0.1 - Super PC Tools ltd) <==== ATTENTION
Support PL 1.1 (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{7eb89871}) (Version: - riceLes) <==== ATTENTION
TeamSpeak 3 Client (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
The Walking Dead - Survival Instinct version 5.1 (HKLM-x32\...\{5FF2B4BB-9D81-4312-B574-DE26A738C6C6}_is1) (Version: 5.1 - Black_Box)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.10.1 - Electronic Arts)
Tom Clancy's Splinter Cell Blacklist The 5th Freedom Edition 1.01 (HKLM-x32\...\Tom Clancy's Splinter Cell Blacklist The 5th Freedom Edition 1.01) (Version: - )
Tomb Raider Deutsch-Patch Plus Crack 1.0 (HKLM-x32\...\Tomb Raider Deutsch-Patch Plus Crack 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Tomb Raider Survival Edition DLC-Pack 1.0 (HKLM-x32\...\Tomb Raider Survival Edition DLC-Pack 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Tomb Raider Update v.1.01.748.0 Deutsche Version 1.0 (HKLM-x32\...\Tomb Raider Update v.1.01.748.0 Deutsche Version 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Total War Attila German Edition 1.0 (HKLM-x32\...\Total War Attila German Edition 1.0) (Version: - )
Tukui Client (HKLM-x32\...\{BAD6EBBD-A6A9-41C9-898A-8C868A552E4C}) (Version: 2.4.6 - Tukui)
Unity Web Player (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
VIRTUIS ADVANCED Gaming Keyboard Driver (HKLM-x32\...\{B3CDED64-7DC2-429D-A325-BBC3CF793AA6}) (Version: 1.0 - SPEEDLINK)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft Logs Uploader (HKLM-x32\...\com.warcraft.logs) (Version: 1.4.3 - UNKNOWN)
Warcraft Logs Uploader (x32 Version: 1.4.3 - UNKNOWN) Hidden
Watch Dogs Digital Deluxe Edition Multi2 1.0 (HKLM-x32\...\Watch Dogs Digital Deluxe Edition Multi2 1.0) (Version: - )
Web Bar 2.0.5659.26749 (HKLM\...\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1) (Version: 2.0.5659.26749 - Web Bar Media) <==== ATTENTION!
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wolfenstein The New Order German Edition [Full Uncut] Texturen FIX 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] Texturen FIX 1.0.0.1) (Version: - )
WordShark 1.10.0.20 (HKLM-x32\...\WordShark_1.10.0.20) (Version: 1.10.0.20 - WordShark) <==== ATTENTION
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
World of Warcraft(R): Cataclysm(TM) MMO Gaming Mouse (HKLM-x32\...\{B832F6BF-B53E-4A51-BD95-A1D5D956207C}) (Version: 1.01.0015 - SteelSeries)
World of Warships (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
Yahoo Community Smartbar (HKLM-x32\...\{9E105931-898D-457E-B175-7F422AA0A5E3}) (Version: 1.51.66.11081 - Linkury Inc.) <==== ATTENTION
Yahoo Community Smartbar Engine (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\{acbe00db-bf7d-48d2-9ba8-87aa7ac49535}) (Version: 1.51.66.11081 - Linkury Inc.) <==== ATTENTION
youtubeadblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: - ) <==== ATTENTION
YTDownloader (HKLM-x32\...\YTDownloader) (Version: - YTDownloader) <==== ATTENTION
Zombie Army Trilogy MULTi2 1.0 (HKLM-x32\...\Zombie Army Trilogy MULTi2 1.0) (Version: - )
爱奇艺影音 (HKLM-x32\...\IQIYI Video) (Version: - 爱奇艺)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 -> C:\Users\Iceflex\AppData\Roaming\agederar\fortetri.dll () <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002_Classes\CLSID\{ba7fca4f-8a4f-420e-badc-91a3f19f12d6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002_Classes\CLSID\{bf6974fd-1f53-4d09-ac8b-c74dd11f1209}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
27-07-2015 12:29:34 Windows Defender Checkpoint
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00564E69-5823-483A-B2B8-49B50165DA6A} - System32\Tasks\HGFTONKTGNYRDTTL => C:\ProgramData\Service8609\Service8609.exe [2015-06-28] () <==== ATTENTION
Task: {006EC6C6-3508-4C4A-BE24-83DBFCA98E34} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-7 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-7.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {032554DD-4405-4E60-A5FF-2B99AC53D0E0} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {0696C6B1-94D8-422D-A58A-E7B68033B326} - \{C93D6588-8F6F-4E38-97EE-E25414FD0021} No Task File <==== ATTENTION
Task: {07A76620-69F7-479B-9C06-C3A0041E083C} - System32\Tasks\WebBarLaunchTask => C:\Program Files\WebBar\wbsvc.exe [2015-06-30] (Web Bar Media) <==== ATTENTION
Task: {09F72894-9AD7-44C1-9F14-060D206CDA81} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-10_user => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {12B4D98D-F8DB-42C0-9CEC-A0BEC3131C00} - System32\Tasks\SMW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041 => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {1372882D-4007-4BC5-ABC3-EA7896FE4467} - System32\Tasks\WebBarUpdateTask => C:\Program Files\WebBar\wbsvc.exe [2015-06-30] (Web Bar Media) <==== ATTENTION
Task: {14B57CC0-9436-4B95-A78E-6692FF818D9F} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {1D2D5F1F-FD96-40CB-AB5E-19598ECFE12E} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-07-27] () <==== ATTENTION
Task: {205CCD13-6150-48FD-A377-20F271DE767A} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {21849FEB-D929-43C9-B539-761AD7527736} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-6 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {22DC7E64-A98D-42A1-AD4C-80FA9547A195} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe [2015-07-27] (Goobzo) <==== ATTENTION
Task: {23995AAE-D566-4266-BBC4-D9B5CEBCD929} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-6 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {2608F1E8-F797-4682-AC59-0312D661AE8F} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {264FEB56-1AE6-41E6-9624-60665D25F3B6} - System32\Tasks\3EiWdjfG9MoN1P2oDMW9Cbrz => C:\Users\Iceflex\AppData\Roaming\3EiWdjfG9MoN1P2oDMW9Cbrz.exe [2015-04-20] () <==== ATTENTION
Task: {2693D979-7AE1-4733-859A-E159433060F7} - System32\Tasks\SMWUpd => C:\Program Files\Common Files\Goobzo\GBUpdate\updater.exe [2015-07-27] (Goobzo) <==== ATTENTION
Task: {2D202418-3E40-4D5E-BE0F-9E665682BA71} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-07-27] (globalUpdate) <==== ATTENTION
Task: {31379221-40AB-459B-8CFD-525552D11734} - \FGRun No Task File <==== ATTENTION
Task: {31CD228A-B8A8-4DFE-BA45-119DF81CEA01} - System32\Tasks\BudgetWise => c:\programdata\{dd5984d6-ce84-337f-dd59-984d6ce8135b}\priceless_p_soft_partner.exe [2014-07-27] () <==== ATTENTION
Task: {36E7C921-AC02-4E42-8041-4E633C8123D4} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-11 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-11.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {371DA349-3C0B-41BD-806C-5F2A3167CCE6} - System32\Tasks\SPDriver => C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe [2015-07-27] () <==== ATTENTION
Task: {37CBB7EF-B033-44A8-8169-C7754780CEBB} - System32\Tasks\wM5dDPObXxKzVEXJUM => C:\Users\Iceflex\AppData\Roaming\wM5dDPObXxKzVEXJUM.exe [2015-04-20] () <==== ATTENTION
Task: {38404E0A-4B56-4D88-B4DF-6FA23A068784} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2012-01-03] (ASUSTek Computer Inc.)
Task: {384C2A33-488F-4633-ADBB-03A5582C3588} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-7 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-7.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {3918F217-D3D4-475C-B52F-B0C4D57C38AD} - System32\Tasks\Pn8IAC2P21 => C:\Users\Iceflex\AppData\Roaming\Pn8IAC2P21.exe [2015-04-20] () <==== ATTENTION
Task: {3C236E99-3321-4933-9B75-DA5CC3F5BC61} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-27] (Adobe Systems Incorporated)
Task: {41B9B044-6544-496E-B4EC-6CB20B6F2376} - \SidebarExecute No Task File <==== ATTENTION
Task: {41E0C869-425C-4544-B7A9-39E9AECE7E8A} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {427059C9-8A27-44FE-815F-2BE3954346D3} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {43FDFFBD-468C-44EC-BD23-25CE9111758B} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {482AFB9B-27FA-4C62-BFD4-A2A9211D88BF} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {4D8B66CE-EA3F-4A8B-B505-989EED8BCAC5} - System32\Tasks\WordShark Auto Updater 1.10.0.20 Core => C:\Program Files (x86)\WordShark_1.10.0.20\Update\WordSharkAutoUpdateClient.exe [2015-07-06] (WS) <==== ATTENTION
Task: {51ACA93D-F788-442A-89E2-71A5910532DD} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5_user => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {56169694-0501-408E-A1C9-318DFFF486CC} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-10_user => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {5B60155E-9B01-40C4-91D9-4718CE3C1E54} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-11 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-11.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {655B9830-AAAF-441C-9567-71B42DF8FDC0} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {70D9C656-098D-4912-A23B-F277DEFD29B3} - System32\Tasks\Inst_Rep => C:\Users\Iceflex\AppData\Local\Installer\Install_1698\DCytdkietut_tutdk_setup.exe [2015-07-27] ()
Task: {72C52AA4-B14F-4620-B66E-4BCFCC60CC1A} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-6 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {73A135B7-B409-4A5A-AEEB-4EC893074EC4} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-3 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-3.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {73A84E60-1ED5-4492-9994-94329325813D} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {79F56309-9C61-4A81-B332-B3FFCE7B6FB7} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-5.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {7C8E7B98-30CD-45E0-92B5-5CDD56EC77C3} - System32\Tasks\PostPoneInstall => C:\Users\Iceflex\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {7FA50EF5-B60D-4E8E-8377-7ED78C44B6F7} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {7FE85F6F-6EF6-4E21-A914-B13BCAC0E629} - System32\Tasks\WordShark Auto Updater 1.10.0.20 Pending Update => C:\Program Files (x86)\WordShark_1.10.0.20\Update\WordSharkAutoUpdateClient.exe [2015-07-06] (WS) <==== ATTENTION
Task: {809112AB-9569-4AD4-B3A8-8D5D967D1652} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {8136CF83-78F3-4255-AF50-93AB69FE6FA7} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {81CC7B0E-0C4C-43BB-8B05-E5C6ECC7D757} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {8257332F-A699-4A7D-828C-EF92F789F1CF} - System32\Tasks\FlipBoards\fbindexer => %APPDATA%\FlipBoards\fbindexer.exe
Task: {87F36859-B2AC-4ECA-B996-7A92F8CFCC22} - \{F0C12788-8288-429B-918B-53C1361CB8AF} No Task File <==== ATTENTION
Task: {88C87CD2-4624-47D7-827F-BDE7F44722F6} - System32\Tasks\SPBIW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {892C3009-748A-4A13-AB8F-1285A011751D} - \{2A180A9D-F772-4034-B343-D18D63AC2F47} No Task File <==== ATTENTION
Task: {89D6B5EB-E4D5-42C2-A2A6-FDCEBDD472B9} - \{45B0CE09-F680-41A9-9F04-71071C857770} No Task File <==== ATTENTION
Task: {8C470805-8A57-41CB-8DCE-A0605BD23A96} - System32\Tasks\Opera scheduled Autoupdate 1437992470 => C:\Program Files (x86)\Opera\launcher.exe [2015-07-10] (Opera Software)
Task: {8D7276FF-79BD-42B2-97B8-2B668CDF0CEF} - \Java Update Scheduler No Task File <==== ATTENTION
Task: {8DC2D7D8-E948-48FE-B759-8980320D8217} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-7 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-7.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {8F1CEDD4-6E6D-41A9-91F0-53E081127BE5} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {9099F45F-5E31-446F-96F5-8F1BFF96DC06} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {911CFB8B-33DC-4687-856C-BD3D924503B5} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {951CA94F-5951-410E-87D4-F1B90BACFB23} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {984F829E-070A-43B4-91D7-9DAAE0236FF1} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {99CAAE21-0BD6-4FE0-B0CA-A1D58F98EDD0} - System32\Tasks\Superclean => c:\programdata\{53594cc9-bdea-1826-5359-94cc9bde3326}\hqghumeaylnlf.exe [2014-07-27] (Super PC Tools Ltd) <==== ATTENTION
Task: {99FC62B8-4F07-478F-8222-DA3C9D257763} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-10_user => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {9A3190A8-E283-445E-B460-B090B1FC931E} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-3 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-3.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {9CAE2286-E820-426B-80C2-4AE6A14B0DD3} - \Adobe Acrobat Update Task No Task File <==== ATTENTION
Task: {9FEAC30C-255A-44C4-BBD6-311DD86D29AA} - System32\Tasks\Smp => C:\Program Files\Common Files\Goobzo\GBUpdate\smp.exe [2015-07-27] () <==== ATTENTION
Task: {A110B20E-40A6-4255-9C2B-05A5AF09B3DC} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5_user => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {A1238BEB-4285-4336-A7D0-64998A60855F} - \CreateChoiceProcessTask No Task File <==== ATTENTION
Task: {A23488C5-E001-4733-8CB7-C06B3C4AEE96} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {A852F9CB-BD8E-40DE-A8ED-57A7161489D0} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {A861FB26-DEF5-410A-9E99-25CCA9072B52} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5 => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-5.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {ACF74D0F-29B9-4F75-BF1A-47F46F22E1B9} - System32\Tasks\F4xUuhVkqd => C:\Users\Iceflex\AppData\Roaming\F4xUuhVkqd.exe [2015-04-20] () <==== ATTENTION
Task: {AE127DCF-CD80-460F-8654-A58B932C5E7C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-07-27] (globalUpdate) <==== ATTENTION
Task: {B4A6C91A-9CD2-4BCF-A244-310DF29C7656} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B5E2149D-07EF-438C-9AE1-F52FCBC2D54C} - \GoogleUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {B6D66B9E-DE01-416C-A1F2-6B38D540EFB6} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-ICEFLEX-PC => C:\Windows\ehome\McxTask.exe [2009-07-14] (Microsoft Corporation)
Task: {BB362327-BD9E-43A1-9B67-F4896BF6F9D9} - System32\Tasks\hOEQrYeLUBFOPHEbeKwGKQSFaz => C:\Users\Iceflex\AppData\Roaming\hOEQrYeLUBFOPHEbeKwGKQSFaz.exe [2015-04-20] () <==== ATTENTION
Task: {BC39DA75-060C-4F88-89A7-4C477AAFD51F} - System32\Tasks\Run_Bobby_Browser => C:\Users\Iceflex\AppData\Local\BoBrowser\Application\bobrowser.exe <==== ATTENTION
Task: {BCCB76A7-6982-4D3E-B35B-44D9E967B36B} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {BD06479E-109E-4BB1-9706-AFD46B439327} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {BD0DF92B-4C86-4BD1-B11C-701A451D690B} - \{F7913C0A-36B6-4D42-8489-1E6063136273} No Task File <==== ATTENTION
Task: {BE685A39-30FB-4E77-BC38-9D34105CAE5F} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-11 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-11.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {C45DAF3A-E8AF-4E12-9F5C-D716DD82D6EA} - \{2CAE1A63-F1DD-4FD8-B78E-CC7C2C325E0D} No Task File <==== ATTENTION
Task: {C484D854-83D5-41F0-8837-D24BDDA9997C} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5_user => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {C7B96F50-D1D6-469C-948A-DE266B8E6919} - System32\Tasks\DVIASFY1 => C:\ProgramData\NavRight\NavRight.exe [2015-07-21] (NavRight) <==== ATTENTION
Task: {C7DA81E0-2F97-4B99-88FE-A679148A3834} - \Adobe-Online-Aktualisierungsprogramm No Task File <==== ATTENTION
Task: {CEEEEF21-69D0-4C8B-8860-C5825C84E01D} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {CFDF7B43-5446-4C3A-BB2B-AEB8FDB6E6D3} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-7 => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-7.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {D145CFEC-A28F-471C-9140-7F7E711F41FD} - System32\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5_user => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-5.exe [2015-07-27] (iCinema) <==== ATTENTION
Task: {D6A256E3-ADCA-4D4B-B546-2745D543DA30} - System32\Tasks\FlipBoards\fbindexer_f => %APPDATA%\FlipBoards\fbindexer.exe
Task: {DA752C70-B39C-41D5-92E1-2EE40D595A37} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2015-07-26] (YTDownloader) <==== ATTENTION
Task: {DCA64B40-512E-40F0-A328-EBE065275247} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10_user => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {DD3B713E-9535-4596-B7F0-29C5232C7F32} - System32\Tasks\sab3009 => C:\Program Files (x86)\FastSearch\sab3009.exe [2015-07-14] ()
Task: {DDC1BB81-542E-4F7D-960B-35D64BE991E4} - \{CB1FBC56-A626-4BCD-BA00-E7528AE0DCAD} No Task File <==== ATTENTION
Task: {DFE8484F-2429-4EFF-BE4C-8F36ED7BA382} - System32\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.exe [2015-07-27] (Cinema PlusV21.07) <==== ATTENTION
Task: {E0026030-2D48-4B90-9022-9DEDCCB568B5} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2015-07-26] (Goobzo) <==== ATTENTION
Task: {E340C381-B885-4246-B8F1-C85E4E707127} - \{5735B825-542D-4206-ABBB-3C8CAA900134} No Task File <==== ATTENTION
Task: {E4D0FE61-B30D-48E8-9B55-D48006FB391C} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10_user => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {ED8139C6-A548-45B8-9ED4-028EDD80CBC9} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {F476B42B-F48A-4935-A5E7-692749AAE309} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-6 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
Task: {F5C39F79-BA39-4199-AAB6-3B141CFCDE58} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7 => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {F734DA5F-8B22-4DF8-90C4-D6E55AA19575} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe [2015-07-27] (Goobzo LTD) <==== ATTENTION
Task: {F9A2A494-B49A-4693-90BE-1EE086392B7F} - System32\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10_user => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe [2015-07-27] (Cinema_Plus-1.2V27.07) <==== ATTENTION
Task: {FA3452EA-25DD-487E-B61F-61925C3D59A5} - System32\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11 => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11.exe [2015-07-27] (CinemaPlusV27.07) <==== ATTENTION
Task: {FEB8C868-32BC-4751-9753-CD8444D0A8EE} - System32\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5_user => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-5.exe [2015-07-27] (Webar) <==== ATTENTION
Task: {FEE7F2EA-052B-47DC-A26D-7E502AB5A311} - System32\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6 => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe [2015-07-27] (CinemaPlus_1.3dV27.07) <==== ATTENTION
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-6.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-1-7.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-10_user.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-11.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-3.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-5_user.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-6.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1bd07443-3838-4818-ac33-02610eb04fda-7.job => C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\3EiWdjfG9MoN1P2oDMW9Cbrz.job => C:\Users\Iceflex\AppData\Roaming\3EiWdjfG9MoN1P2oDMW9Cbrz.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10_user.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5_user.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7.job => C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-10_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-11.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-3.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-5_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\8445e138-d85f-4a87-b610-2f63c5ecae6c-7.job => C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10_user.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5_user.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7.job => C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BudgetWise.job => c:\programdata\{dd5984d6-ce84-337f-dd59-984d6ce8135b}\priceless_p_soft_partner.exe <==== ATTENTION
Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: C:\Windows\Tasks\DVIASFY1.job => C:\ProgramData\NavRight\NavRight.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-10_user.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-11.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-5_user.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-6.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\ecf2b722-2971-4154-b09c-da1b799ef11a-7.job => C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\F4xUuhVkqd.job => C:\Users\Iceflex\AppData\Roaming\F4xUuhVkqd.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HGFTONKTGNYRDTTL.job => C:\ProgramData\Service8609\Service8609.exe <==== ATTENTION
Task: C:\Windows\Tasks\hOEQrYeLUBFOPHEbeKwGKQSFaz.job => C:\Users\Iceflex\AppData\Roaming\hOEQrYeLUBFOPHEbeKwGKQSFaz.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pn8IAC2P21.job => C:\Users\Iceflex\AppData\Roaming\Pn8IAC2P21.exe <==== ATTENTION
Task: C:\Windows\Tasks\Superclean.job => c:\programdata\{53594cc9-bdea-1826-5359-94cc9bde3326}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\wM5dDPObXxKzVEXJUM.job => C:\Users\Iceflex\AppData\Roaming\wM5dDPObXxKzVEXJUM.exe <==== ATTENTION
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-01-08 20:12 - 2015-01-08 20:12 - 02264576 _____ () C:\Program Files\BubbleSound\BubbleSound.dll
2015-05-19 15:37 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-07-03 18:05 - 2015-07-27 12:22 - 00161792 _____ () C:\Users\Iceflex\AppData\Roaming\agederar\fortetri.dll
2015-07-26 11:57 - 2015-07-26 11:57 - 00112560 _____ () C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
2015-07-27 12:18 - 2015-07-27 12:18 - 00161792 _____ () C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\hnsnFBA0.tmp
2015-07-27 12:18 - 2015-07-27 12:18 - 00120832 _____ () C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp
2015-07-27 12:17 - 2015-07-27 12:17 - 00209920 _____ () C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp
2015-02-03 18:09 - 2015-02-03 18:09 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-07-27 11:42 - 2015-07-27 11:42 - 00285696 _____ () C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs
2015-07-27 12:20 - 2015-07-25 15:50 - 03289744 _____ () C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe
2015-07-27 12:29 - 2015-05-12 15:20 - 00808960 _____ () C:\Program Files\WebBar\2.0.5659.26749\ISightSDK_x64.dll
2015-07-27 14:18 - 2015-07-27 14:18 - 00003072 _____ () C:\Users\Iceflex\AppData\Local\Temp\isdkNMYftZuu\ISightHost.exe
2015-07-27 14:18 - 2015-05-12 15:20 - 00808960 _____ () C:\Users\Iceflex\AppData\Local\Temp\isdkNMYftZuu\ISightSDK.DLL
2015-07-27 12:21 - 2015-07-27 12:21 - 00840206 _____ () C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe
2015-07-27 12:21 - 2015-07-22 18:20 - 00069632 ____H () C:\Program Files (x86)\baidu\baidu.exe
2015-07-27 12:28 - 2015-07-27 07:12 - 03225088 _____ () C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe
2014-12-05 15:02 - 2014-06-21 13:16 - 01976832 _____ () C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\Monitor.EXE
2015-07-27 12:20 - 2015-07-25 15:50 - 03979408 _____ () C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe
2015-07-27 12:27 - 2015-07-25 13:53 - 03978896 _____ () C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe
2014-12-05 15:02 - 2013-07-11 10:38 - 00169984 _____ () C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\OSD.exe
2011-11-11 15:07 - 2011-11-11 15:07 - 00265240 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-08-12 13:19 - 2011-08-12 13:19 - 00680984 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
2015-07-27 07:10 - 2015-07-27 07:10 - 01684480 _____ () C:\Program Files\Common Files\ShopperPro\spbici64.dll
2015-07-27 12:29 - 2015-07-27 12:29 - 02989568 _____ () c:\Program Files (x86)\PragmaInstance\PragmaInstance.dll
2015-05-19 15:39 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2009-04-10 01:04 - 2009-04-10 01:04 - 02141008 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtCore4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 07704400 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtGui4.dll
2009-04-22 23:53 - 2009-04-22 23:53 - 00969040 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtNetwork4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00475472 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtOpenGL4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00363856 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtXml4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00200016 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtSql4.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00027472 _____ () C:\Program Files (x86)\Logitech\Vid HD\SDL.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 11311952 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtWebKit4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00291664 _____ () C:\Program Files (x86)\Logitech\Vid HD\phonon4.dll
2011-01-13 03:57 - 2011-01-13 03:57 - 00751616 _____ () C:\Program Files (x86)\Logitech\Vid HD\vpxmd.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00029008 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qgif4.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00035152 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qico4.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00138064 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll
2011-11-11 15:08 - 2011-11-11 15:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 15:08 - 2011-11-11 15:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 15:08 - 2011-11-11 15:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 15:08 - 2011-11-11 15:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 15:08 - 2011-11-11 15:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2014-12-05 15:02 - 2013-08-17 15:13 - 00036864 _____ () C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\Lang\Lang_EN.dll
2014-12-05 15:02 - 2012-11-05 09:37 - 00061440 _____ () C:\Program Files (x86)\SPEEDLINK\VIRTUIS Advanced Gaming Keyboard\hiddriver.dll
2012-07-23 16:10 - 2012-07-23 16:10 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acengine => ""="service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer trusted/restricted ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Datenträger ist nicht mit dem Internet verbunden.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^Users^Iceflex^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: Download Protect => C:\ProgramData\dlprotect.exe
MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: Steam => "D:\Programme\Steam\steam.exe" -silent
MSCONFIG\startupreg: WinampAgent => D:\Programme\Winamp\winampa.exe
__________________ |
|
27.07.2015, 14:27
| #4 |
| | Windows 7: Programme installieren sich selbständig Addition 2/2 Code:
ATTFilter ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{7C218909-18E2-49F2-ADC0-2C804BB63484}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{960E5132-1492-4212-8F81-258C2654F279}] => (Allow) LPort=2869
FirewallRules: [{159E74F4-DF84-4A43-86B3-A7B84341C0D2}] => (Allow) LPort=1900
FirewallRules: [{CC172E4D-8EB4-43F1-8836-65C8A5EDA968}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{E8B46B6D-52BE-42D5-8545-80E5E813094F}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [UDP Query User{CC4B8449-0320-4E65-82C6-0EB445763300}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [{D72459EC-9045-47DF-9DE0-A14683CCB375}] => (Allow) C:\Users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
FirewallRules: [{FF348004-0C26-44D2-B0DD-68BEBA429361}] => (Allow) C:\Users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
FirewallRules: [{68DE0439-FE1F-4CD1-AE5F-836B06517E6D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6724F604-8462-44B7-8C65-A23B8CC1DBA1}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [UDP Query User{8008F6FD-99C4-4AF5-96AF-723C949E85AA}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [{392DE5B8-9C41-48BE-86C5-2BDDFECADA73}] => (Allow) D:\Programme\Steam\Steam.exe
FirewallRules: [{2C8A4DCE-E6B4-4EA7-A0C5-AA42F66BCF3A}] => (Allow) D:\Programme\Steam\Steam.exe
FirewallRules: [{2A14DA1A-9C00-4D5C-8DBB-B608DFAD22CE}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{C2E21963-44E4-43B7-9797-3772B969BF67}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{AA426ED4-DC54-4EDD-946B-7B9B4C666074}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{4E62C430-B4DB-42A8-AA7F-7CC13D802905}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{EE7EC95E-47DA-4C58-B6B7-8E505672FBA2}] => (Allow) D:\Games\Diablo III\Diablo III.exe
FirewallRules: [{6FC14047-5CD0-45BC-AAFA-6B82FDB8DBBE}] => (Allow) D:\Games\Diablo III\Diablo III.exe
FirewallRules: [{30EDBE85-69AE-4BF2-A8A3-B32138A5A8F5}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{5BF5CDDF-B83A-4A5B-AB4E-4CFA781F72B5}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{CFA05280-E68F-4B2F-AC29-8CC9624204D3}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{3C9CC8A3-99BD-43F7-8391-B9D0737A42AC}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{AA093355-5BEA-4DEE-8791-1AFA5C1A2504}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{B050AEE5-1D2A-44F7-9F20-12B4C39345CC}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{DFA0477A-0B72-4D4D-8170-507638005E84}D:\games\diablo iii\diablo iii.exe] => (Allow) D:\games\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{B35B4744-0E3E-4C0C-854C-F80E32A9007C}D:\games\diablo iii\diablo iii.exe] => (Allow) D:\games\diablo iii\diablo iii.exe
FirewallRules: [{B27BA91A-E00D-4333-B26B-01D69FFD52F0}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{2DF64A25-C51A-43F4-87A5-E63CD6EB4950}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{83CD83B8-00CB-4675-97DB-E322B299F9BB}D:\programme\steam\steam.exe] => (Allow) D:\programme\steam\steam.exe
FirewallRules: [UDP Query User{2D39DCB8-26E4-4844-AE89-1D6D7B0EE337}D:\programme\steam\steam.exe] => (Allow) D:\programme\steam\steam.exe
FirewallRules: [{9BC8F855-DCFA-4953-A0E1-4614F39CC9A9}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{60F46C26-9AF3-4A0B-B572-694444BEDE63}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{02B73F4F-CBAE-48FB-AF2C-48AA16BB537A}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{5DF7318A-BD82-43EE-A25A-D6DA1FFA49FF}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{0169CD3F-E859-4611-B068-58D5258C6954}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{426F0DF7-AC64-4008-B547-BC0E2AD23B4D}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{52EC9BB7-7E81-4DCF-9BCC-74C1AAFE4C24}D:\games\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\games\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{FAD581D1-5C9A-42A5-8BDF-DF329E7C3872}D:\games\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\games\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{7DCA70A1-0745-474E-A23B-4A0BC02FE1D5}] => (Allow) D:\Programme\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
FirewallRules: [{F875F35C-94D2-4A99-B514-B55EA5F16144}] => (Allow) D:\Programme\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
FirewallRules: [TCP Query User{C8D9323D-4D7A-485A-88FB-B231972D0A3A}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{42A2F3F1-DD86-43D7-80E2-D1BE979FA2CA}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{9431B42A-AF79-4112-B325-2A227C336C49}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{0E65F8C4-E952-4600-928A-41DB5438BF2B}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{32EF2401-97CB-4083-B9E8-30E43DF7C3A7}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{784DD462-7F35-498D-BABF-9E403EEB4F57}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{47D61E3E-A5EF-40DF-B46F-483F23DB9FD7}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E31402AC-2724-4DD0-AD11-1228BDB304FE}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [TCP Query User{1C545EED-0589-44F6-992C-9B07E654476B}C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe
FirewallRules: [UDP Query User{76B31078-475A-485C-B14A-ACAC45DD9854}C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe
FirewallRules: [{3774E288-0BA8-4D62-AF09-28B8747B16B7}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{2DB7149C-710D-4FCF-BF0F-B404FDDEDD30}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{80E6D891-6199-48C2-91C2-4F60C10B30DE}D:\games\tera\tera-launcher.exe] => (Allow) D:\games\tera\tera-launcher.exe
FirewallRules: [UDP Query User{2687D0D3-7614-4DB0-B0AD-5DE61B597E58}D:\games\tera\tera-launcher.exe] => (Allow) D:\games\tera\tera-launcher.exe
FirewallRules: [TCP Query User{AECB1E48-59FA-4EC1-A96E-AFE74CCD80E8}D:\games\company of heroes 2\reliccoh2.exe] => (Allow) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [UDP Query User{AF18EB8F-8106-41EB-A60A-0207065D2CC1}D:\games\company of heroes 2\reliccoh2.exe] => (Allow) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [{B19616A9-AEB4-4C7A-BA26-B9858B6EB741}] => (Block) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [{522F01B9-DB55-447E-AD56-D49231E30B9A}] => (Block) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [TCP Query User{AE5FED95-0D82-4B20-845E-9FBF35AB6EDC}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{A66694A0-F5F5-44B8-BD8E-5C0D6119F3DD}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [{89CD6682-2A5E-4C3F-8179-83E1493D9400}] => (Block) D:\games\guild wars 2\gw2.exe
FirewallRules: [{59DC93EB-B686-4594-B55B-756976944FA7}] => (Block) D:\games\guild wars 2\gw2.exe
FirewallRules: [{0B7E5487-DD4E-4415-9361-3EB64B078CC4}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{55A12D1E-CC9A-4BF1-8352-14F29ECCB2A0}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{13CAE634-F4A5-4020-B202-8F6EAE81D708}D:\games\saints row iv commander in chief edition\saintsrowiv.exe] => (Allow) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [UDP Query User{0E77B274-4131-4D06-9623-B36597F48B4D}D:\games\saints row iv commander in chief edition\saintsrowiv.exe] => (Allow) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [{6FB7137A-E556-4550-844D-EA879A94DFAA}] => (Block) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [{617CBE17-472D-47D7-946A-01181790F84D}] => (Block) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [TCP Query User{75FDD915-56BF-4412-9BDE-D06A05813A14}D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe] => (Block) D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe
FirewallRules: [UDP Query User{9ACF20E7-DF0E-4009-AAFB-CDB7B0A830EB}D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe] => (Block) D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe
FirewallRules: [TCP Query User{BE920BBC-7230-42BB-9F2C-21B21A8D0881}D:\games\total war rome ii\rome2.exe] => (Allow) D:\games\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{571B4299-FA24-4D13-95EB-44BB73A8E607}D:\games\total war rome ii\rome2.exe] => (Allow) D:\games\total war rome ii\rome2.exe
FirewallRules: [{11773223-1891-460E-977E-F9445950DC6C}] => (Block) D:\games\total war rome ii\rome2.exe
FirewallRules: [{13C6714A-12A2-4148-B15F-47BB60491F2C}] => (Block) D:\games\total war rome ii\rome2.exe
FirewallRules: [{80C98A36-18D7-4987-96F8-1BB55D9B76FA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FA5319AD-5F75-484B-B4C0-385B043DEAD3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FEC5270B-5B1D-44AF-84FD-672201FEED5B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{988DBBC0-B0C8-484D-89F2-267C6D375805}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0A3CB501-C7BB-4D6E-8121-D01A7C85A82E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{B7DBEFA3-88A5-4F1A-8A29-84DF990769E4}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{1EE1A39A-D7B9-472B-A074-A8B6A4855E35}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{A73ED74D-D1DC-4D7F-9DD5-AEB8FA54EE25}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{7F65B65C-AF98-4B8F-A9CE-7DEDD77E191F}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{E10FB931-CAC3-4283-9D64-600142D6D15D}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{D9CED0A8-BE2C-4188-8FF8-166E3EC1AF00}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{A586D47A-86EF-4066-A5C9-FBE9E3114AB1}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [TCP Query User{80784E9E-4AAC-4D2F-BE03-09C3B4F2D667}C:\games\panzar\start.exe] => (Allow) C:\games\panzar\start.exe
FirewallRules: [UDP Query User{13AE704F-862D-48C7-9AF4-8ED9BAF5AD21}C:\games\panzar\start.exe] => (Allow) C:\games\panzar\start.exe
FirewallRules: [{54F091D8-C136-4721-9F20-F2A3B77CA93D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D61774DE-FEA3-4A78-A6A6-73296A7ABAEF}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{DCDCCB34-C3BE-46F0-8DF5-7B5147F4D6DB}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{80F2632E-3279-4010-9892-9E2163FB6292}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{CC251C0D-D0C8-4295-BE34-8901851F090C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{35E9F7C3-23FF-4D35-A5DB-4191E860AE35}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{3C5EB4EC-9F6D-4200-B2A5-49EDB5660E5B}D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [UDP Query User{30778392-A99F-4C76-9908-01616DCEDC22}D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [{BFFFF2EF-6201-40C7-86A2-9163C8814E2E}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{BB7D6DDA-4211-42F3-922D-EDB8AE9BC1C6}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{0034B05E-C07D-4043-8A2E-26066844199F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{87614611-96A1-40C5-B0B5-898F1A9B36A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{BA5E5374-A117-4A3E-82E3-4110129B9932}] => (Allow) D:\Programme\Ventrilo\Ventrilo.exe
FirewallRules: [{833FDE5B-2265-4F21-95F4-DA3A9ECA9FCB}] => (Allow) D:\Programme\Ventrilo\Ventrilo.exe
FirewallRules: [{4D220CBA-5C4E-4CFD-B20B-2422BC1152F9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8AE03B2C-E082-4A17-BA9B-9D95419C5DD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8D86B431-2954-487E-8BF0-4BC33D5FD92F}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{F69517C8-DD15-49A1-9531-406F2DB94AA6}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{96BB6E92-7B6A-4B57-B9FB-A2737DAD8AF5}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{584EF1B6-A5EA-41DD-A43D-1C3661181430}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{E46E6F58-23C2-4DAA-8FD8-1A1FF5747AF4}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{BED62674-8CD1-40E1-82CB-649E76EC73A4}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{9C843AC4-8E41-48A0-9A2F-9335E5FE9665}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{FECF723B-3CC9-4B44-8BB6-EA7310890163}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{C6307317-02CA-4051-85BB-C8CCEAAC3245}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{5AD7D23B-DFCE-43B4-8AAC-C81F3FBC20DC}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{E9DD2E90-E24C-4C27-BF48-2FF2B7EDA179}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{1B66293B-A491-418F-A21B-21CB3CFE1E1C}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{0FCC5BE6-33A1-40EA-8B2E-4A91DC6E000B}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{4277356F-86C8-4AB9-BD68-78974D08C975}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{25B40058-962C-454E-9E9F-D3D39338962E}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{C1D8FE7B-C679-4A8D-A4FD-C6A8D9824762}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{E0A0D535-2EF6-43E1-A679-26058FA83D5C}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{89A74087-75F2-4099-800F-4C811D99BFE9}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{72978E01-3407-4C04-B7F0-C20FAB962918}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{452B5339-7A5C-4981-898B-A839421F2E3F}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{BB378F02-D4FC-41FA-8EE7-45EA62549836}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{673A803E-8DAE-4D5B-B5E1-4258888F73E0}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8F941700-24D2-4C2F-849C-C8285559BB07}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{75CFA6B4-2909-43D8-BCCD-11FB700F9A6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{AB43AA4D-B007-4DF2-836E-AB5A05EFF5B7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{D10D2361-DC22-4C23-ABFF-A60089F51E51}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{CD5776FD-275E-45E3-98EA-582518AAD042}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{7209E370-D2CC-4282-B569-442C38BD6FCF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{023C5A71-7D3F-484E-8C4A-AE77571E309C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{92CA5F3C-1719-41E1-92D4-1A3ACB2ECFD5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{B8FDB32C-1C76-46D0-9ADA-47BE8FCFE55C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{63CA3D41-53C8-4ED3-9AD2-40E7EF32800B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{4B2706C7-2970-43C4-B9DC-4DC8036113A9}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed Freedom Cry\ACFC.exe
FirewallRules: [{5FB3646B-0F09-4B86-94F7-5F28DC8246DF}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed Freedom Cry\ACFC.exe
FirewallRules: [{E35D0704-01B1-427A-8632-4519B3C59F1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{4C40C279-4062-418B-9419-87F407FC4DD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [TCP Query User{E9069E25-7B4C-4CC6-84B7-ABB7AE00CF32}D:\games\infinitecrisis\infinitecrisis.exe] => (Block) D:\games\infinitecrisis\infinitecrisis.exe
FirewallRules: [UDP Query User{B6279582-C3B3-46C6-B64E-3DCD5E92019E}D:\games\infinitecrisis\infinitecrisis.exe] => (Block) D:\games\infinitecrisis\infinitecrisis.exe
FirewallRules: [{4934AE69-B543-4C2C-AD8F-E0A74D7C7709}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{A096D441-E25A-4BB2-8DAF-2B5AC90C5EFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{13C8F092-4DFA-4E76-AC89-41368CD9F735}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{0A78E167-C4C2-44CD-ABD9-1B196622C870}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{0752CC65-67AD-4E4E-A954-7FFBAE6CA3FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{F977805B-A674-453D-8A35-B1AF77648AA3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{9FE77B6A-628F-4584-B47E-CD22D7079358}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{4EBAF144-A0F9-43CC-84DD-C05600D7673F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [TCP Query User{89807CC7-0AA0-487B-B9E9-5EED3EB2EE9C}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{EE69DA34-E07F-462B-9C1F-1CA95C084DCE}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{28282522-3852-4239-982A-84B594BA05AE}C:\program files (x86)\world of warcraft beta\wowb-64.exe] => (Allow) C:\program files (x86)\world of warcraft beta\wowb-64.exe
FirewallRules: [UDP Query User{5E46FA5D-1A0A-443C-8562-DBF723473FD4}C:\program files (x86)\world of warcraft beta\wowb-64.exe] => (Allow) C:\program files (x86)\world of warcraft beta\wowb-64.exe
FirewallRules: [TCP Query User{FE24D42F-6588-4879-9B2E-05150CF96C7C}D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe] => (Allow) D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe
FirewallRules: [UDP Query User{30A1988F-5F0F-4E3C-9DA9-7B365A68A318}D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe] => (Allow) D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe
FirewallRules: [TCP Query User{A27DEAC5-5A63-459B-A29E-B58DA6C2A23E}D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe] => (Block) D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{D7B9DFDC-6CE0-4B00-9204-7639E7ACBC9C}D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe] => (Block) D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [TCP Query User{6B4CB130-E17C-45D2-8B0A-3A46CA52482B}D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{6364753A-88B8-4218-8B5E-4D4E15102462}D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{A9FF8B82-6BFE-4F54-8241-8E68546FC949}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{52B5B17B-DDA2-40ED-8AB9-647291E8954C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{EFFD8AB0-70BD-4EF5-99C6-C42A58969E15}] => (Allow) D:\Programme\Steam\SteamApps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{7E774857-4234-4CA7-BC9D-51BC80A2F493}] => (Allow) D:\Programme\Steam\SteamApps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{7EFBB0A7-778B-4842-B3E0-1CACC38E09A8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{EA511DE5-9065-4BF0-BCB7-6A25824F5E9F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{9387E698-CEC6-460A-8C7A-BFDF41AF7679}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{4EC8B7F1-F63C-4D85-BDA6-DE1F2BBFDA33}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{C2FA56D3-C59F-4091-A05F-92B55C872C7B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{BD9BD762-88CE-47DE-AD5F-9CFE4687174B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{9914233A-C46C-4094-8B79-591C5B297851}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{877656B4-CFFC-496F-96B8-DC399A69158F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{8EAC29F6-CEFC-483D-A96E-800A40292747}] => (Allow) D:\Programme\Steam\bin\steamwebhelper.exe
FirewallRules: [{92E19D48-100C-42D3-BABC-8BA006E80478}] => (Allow) D:\Programme\Steam\bin\steamwebhelper.exe
FirewallRules: [{7B092A7B-4FD4-433E-BF75-8E29A9FCF501}] => (Allow) D:\Programme\Steam\SteamApps\common\Risen 3\system\Risen3.exe
FirewallRules: [{D5DD1702-175E-4F95-9B28-F40DB55F5E4E}] => (Allow) D:\Programme\Steam\SteamApps\common\Risen 3\system\Risen3.exe
FirewallRules: [{82502F50-6B69-4405-AEDD-E27352B08A48}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{55B1C599-9FA1-40C6-A77C-896391820F88}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{ECE9D898-FC6A-474B-8D08-193699F899D6}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{32183ABB-839C-4980-B49D-AD6CF1A94181}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{C0B75813-6F35-413C-84B5-E0AA79DDB313}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{92C349A1-9289-4762-A46F-F4547964BEBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{6D3207E3-722E-47B4-AAFD-C3210677BBFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{95ACBB28-15BB-488C-BCCD-75D7F1B485D4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [TCP Query User{FCF14AD2-6D63-4BDE-A5F0-A02449C64C65}D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe
FirewallRules: [UDP Query User{E508B07A-2714-4EE4-A247-B8317E56BBDF}D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe
FirewallRules: [{C367B43D-CB03-4EAF-8036-B2233BDB8C3B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{32612881-8153-4AC4-A593-A05B09020818}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{376DE6B2-1468-4EE9-A036-7FA7B40802C7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{12B1F045-411D-4ACE-8D07-35D7FAC1C8A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{68EBD94C-0654-4B6A-9DB3-F97F00014DE8}] => (Allow) D:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [{3C79BF42-CC96-43E7-957E-26D439919135}] => (Allow) D:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{70934001-CADE-4A78-9640-FCFA507C87CE}D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe
FirewallRules: [UDP Query User{8E28B708-64AA-4C4A-94D8-6EC49471DA7E}D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe
FirewallRules: [TCP Query User{2BA85446-CF08-440F-BA1D-A5F5E8EA70E4}C:\programdata\battle.net\agent\agent.3346\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3346\agent.exe
FirewallRules: [UDP Query User{C8F2AB7F-9078-4E88-8592-26B9124C5BBB}C:\programdata\battle.net\agent\agent.3346\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3346\agent.exe
FirewallRules: [TCP Query User{4E6BBBE1-98EE-480C-BDAE-DF0F42424F82}D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe
FirewallRules: [UDP Query User{D6462078-DE11-4E91-92A0-66CD5FDFB165}D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe
FirewallRules: [{B1A10E86-C236-4503-8E79-7C0DCFF3849B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{A5F65499-9C92-4739-80E7-119124863788}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [TCP Query User{C9B61444-4F8E-4F19-AAC1-1859F0B1B4D9}D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{B9FFAA72-141C-4B5E-ABAA-078183E6B609}D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [TCP Query User{0AA6BCF9-0258-40D7-89C4-C5EF72294B6B}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{35CBBAF9-42C4-48FD-A284-F83EEC2C5DA6}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{CB91C958-D17A-4101-9FA1-B2448B3F218A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{ED923878-5BFF-45EE-9A28-00CE6008F441}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [TCP Query User{848F8094-7EBD-46A9-9198-36653B3DFBC4}C:\programdata\battle.net\agent\agent.3454\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3454\agent.exe
FirewallRules: [UDP Query User{4469467A-978F-4B57-8D42-7F9D2DF44245}C:\programdata\battle.net\agent\agent.3454\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3454\agent.exe
FirewallRules: [TCP Query User{9AF5351E-430F-4866-A2FF-6F5823C8B5B8}D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [UDP Query User{71663672-F9A9-4DB4-B14D-4629EE96578C}D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [{399A04EC-AB95-471F-912B-D1FC7DDD5335}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{C8ABCBF3-3D16-4976-B054-2434D7B6C7BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{9563D2FF-AB64-4863-BE3C-B91D346F96D2}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe
FirewallRules: [UDP Query User{0F0F9695-1CC7-4AFF-B34E-BD5B067CE23A}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe
FirewallRules: [{8940BDE4-450F-4368-8EF6-650C17FD98F4}] => (Allow) D:\Programme\Steam\SteamApps\common\Defiance\Patcher.exe
FirewallRules: [{88DB2CA5-8752-4B03-86D0-F4EA3079570A}] => (Allow) D:\Programme\Steam\SteamApps\common\Defiance\Patcher.exe
FirewallRules: [{3E83196F-F6F8-4373-B789-78B346B19EBA}] => (Allow) D:\Programme\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [{3C4B5CC7-97C1-471D-9E66-953EDC3215BC}] => (Allow) D:\Programme\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [TCP Query User{FA716A25-FA74-4F07-A040-10485F741834}D:\games\alien isolation\alien isolation ripley edition\ai.exe] => (Allow) D:\games\alien isolation\alien isolation ripley edition\ai.exe
FirewallRules: [UDP Query User{294234C0-B072-43B3-9248-623006DEA94A}D:\games\alien isolation\alien isolation ripley edition\ai.exe] => (Allow) D:\games\alien isolation\alien isolation ripley edition\ai.exe
FirewallRules: [{ABAC4AB1-CAC5-4D9D-8584-A9B8F94933C4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{10379773-8710-479D-A9A4-A76B3945F8C3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{D49FBD67-94CF-491C-A82F-190ABACF9CB5}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{97CCCC7E-F7CF-4FD8-ABD5-84D28888245F}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{0E7932D8-03AF-47BF-A14C-8F71931835B8}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{3F44548E-DEE6-4D3D-86A0-FAE7220A46EB}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{7EDF6E96-79C4-4956-A154-3C8DB7F8EE52}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{18B25543-B56D-498F-A4F3-92A91654AF16}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [TCP Query User{9226DB25-446B-4F7C-AF55-336C08446B82}D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [UDP Query User{D0DEE311-5AC9-43B5-BEB2-851240D3F5EA}D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [{769EF3D4-FB40-4DB9-AB24-54426CAC4F36}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Assassin's Creed Unity\ACU.exe
FirewallRules: [{E6D19EA0-09AE-4365-9061-F85CB2182321}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Assassin's Creed Unity\ACU.exe
FirewallRules: [TCP Query User{79B2B965-3700-431B-AFA1-588F0FEA02FA}D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8424C7BF-0197-4853-B052-566D5E6B694D}D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [{5CCC5932-A5B1-486C-AF03-F743067936D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{2B7F735F-7CBD-4ABC-843B-AFA733998691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{01888D6D-C388-466B-B079-74429E08D6DF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{BC33B102-3F0D-48D6-8644-E09EC0EE0954}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{CCC95AFA-0E75-452E-BDE4-5B50D810FE5E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{0852923C-3286-4F86-B6CF-B3A98118B578}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{4DF07618-7D52-43FD-A2AD-0444B5777BF5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{5286D0B1-08BB-430B-BC7D-FC6595403527}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [TCP Query User{F8F1E129-6924-40B1-8BEF-C6BE8B758542}D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{21758C85-EC0C-40AA-872C-6A697E5BCE7D}D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
FirewallRules: [{AF76393D-5C9F-4FC4-8D68-1BE437680D98}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{461AEE24-C3F4-469E-9D05-2204D5EB3032}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{C259225A-927C-4C24-99D3-9E74F850BD98}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{2893415E-F820-4AEE-9ECA-DEB423220278}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{55291CE5-0C09-49AD-B0F5-34BFEEAD41E7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{9C58A1C7-21E3-4864-9887-B41734D51428}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [TCP Query User{1F0B45CF-2166-4D33-ACBE-CFB76F72001F}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{3084848B-F244-4D2D-BB7F-BAFB58077C3B}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{B43C9E92-7438-4B51-A438-CC16673E9666}D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe] => (Allow) D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe
FirewallRules: [UDP Query User{DFB3F6E6-59A7-43F6-8CAA-A0B258A916B7}D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe] => (Allow) D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe
FirewallRules: [{40E99BF9-98C1-4375-AEDF-11011CEED375}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{62C708E0-4EFC-470D-AC90-2DC60216E050}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{2D9E63FA-B1FD-4491-A9C2-6981B873712C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{D51BD4E6-874A-45C1-8458-34E27F145913}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{999EE23D-AC81-4E6C-847D-53AE5553F05B}D:\games\grey goo\instanceserverg.exe] => (Allow) D:\games\grey goo\instanceserverg.exe
FirewallRules: [UDP Query User{198B606F-8CE0-489F-A403-AFDFCE73C826}D:\games\grey goo\instanceserverg.exe] => (Allow) D:\games\grey goo\instanceserverg.exe
FirewallRules: [TCP Query User{677AA6E5-CBF6-4B0C-B080-11D9BE3FF480}D:\games\grey goo\goog.exe] => (Allow) D:\games\grey goo\goog.exe
FirewallRules: [UDP Query User{85B40323-8075-4730-924D-E5D8FD57769E}D:\games\grey goo\goog.exe] => (Allow) D:\games\grey goo\goog.exe
FirewallRules: [{570A08C8-D65F-49EF-ABE0-368857DEA43D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CCB77DB6-C357-402C-894A-D335650CBF20}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{7F355AF0-8CB6-473A-82DD-D1C0B54EF394}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{3E5D2956-E460-4C74-915F-62AD35D38248}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4D5A71F7-07DE-482D-8360-FA4B0CF69143}] => (Allow) D:\Games\Schlacht um mittelerde\game.dat
FirewallRules: [{6F0B9A20-D064-493A-9E25-FA761BCBED8A}] => (Allow) D:\Games\Schlacht um mittelerde\game.dat
FirewallRules: [{E34ABC1E-5BBB-46B1-88A7-A8998CDDD403}] => (Allow) D:\Games\Aufstieg des Hexenkönigs\game.dat
FirewallRules: [{FE62245A-3479-4026-A99C-50CFA8681EF7}] => (Allow) D:\Games\Aufstieg des Hexenkönigs\game.dat
FirewallRules: [TCP Query User{10A2E5A0-F76F-429A-B7F9-41F8AF8C78D6}D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{A9C3B620-1CA6-4F47-8DB3-D7E4A7D10258}D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{43C71C1F-6B3F-4EC1-9ED2-FC1D3D719CB8}D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{EE4C241E-9364-47E3-94B8-07DAE3F9D7C8}D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{D09DFBAD-C541-4306-9DD2-807BCAAACA60}D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe] => (Allow) D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{A2C58582-52A4-41EB-BE0D-3D54461D4996}D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe] => (Allow) D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe
FirewallRules: [{9D1029F3-A0B0-474A-AB7C-29149E3FE657}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{F097F7AA-0812-4140-A355-B697ADEB7311}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AA5FCFE8-00C9-4A71-8D1C-DE3B91E41EA6}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{C973D952-3C9A-48BC-A9AA-53097A97B90B}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{F6FA9E01-C904-468A-868F-224FD246E993}] => (Allow) D:\Programme\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{E6922134-BF8E-4E07-ACC1-207A01C8A5B6}] => (Allow) D:\Programme\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{06048FD0-9038-45EA-BF8A-51B6686782EB}D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe] => (Allow) D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe
FirewallRules: [UDP Query User{FE376942-5816-491A-9B1E-EE5FDF6DB5C0}D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe] => (Allow) D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe
FirewallRules: [TCP Query User{431A77DC-2011-45AA-BA5B-AEE525692743}D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{E70258D7-5E3A-4A78-A64B-0DFB06E56F7F}D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{777838CA-F2C7-44B8-95BE-6C79CE4FA00E}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{68D8491C-5DF6-40AD-A8AD-BDDD31761940}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{B05E6880-9481-4E10-9C8A-34F163BBC46D}] => (Allow) D:\Programme\Steam\SteamApps\common\Infinite Crisis Steam\TurbineLauncher.exe
FirewallRules: [{BBA64FEE-EB83-46F7-BA17-CCE847A09773}] => (Allow) D:\Programme\Steam\SteamApps\common\Infinite Crisis Steam\TurbineLauncher.exe
FirewallRules: [{604D7C1B-F10E-44FB-BD98-01869A4CB72D}] => (Allow) D:\Games\WarThunder\launcher.exe
FirewallRules: [{D2A9BA92-B653-4735-823E-5BF840AE45A0}] => (Allow) D:\Games\WarThunder\launcher.exe
FirewallRules: [{38CFF63B-4C9F-4EAA-A23C-9D78CB975D55}] => (Allow) D:\Games\WarThunder\bpreport.exe
FirewallRules: [{C80C60EF-25A3-41BE-BD23-2A2F9B25653D}] => (Allow) D:\Games\WarThunder\bpreport.exe
FirewallRules: [TCP Query User{69C106A0-50EA-4FA0-BF6D-56FCB632E14E}D:\games\warthunder\aces.exe] => (Allow) D:\games\warthunder\aces.exe
FirewallRules: [UDP Query User{B6E206EE-9A82-4EBC-A915-448EE15C1172}D:\games\warthunder\aces.exe] => (Allow) D:\games\warthunder\aces.exe
FirewallRules: [{605933A6-0A5B-44E5-B3AB-6B106115025E}] => (Allow) D:\Programme\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{18865500-B2F8-4AB6-8E65-35C33BA09649}] => (Allow) D:\Programme\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{91D1CCED-230E-4F5D-BC80-B70A7D7CE623}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{20308733-F816-49FE-8B32-08829874FB31}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{46142CAF-E2FE-419B-8C03-A94C84330CD1}] => (Allow) D:\Programme\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{0935304E-98F9-44E2-98C4-60BA2ACAF669}] => (Allow) D:\Programme\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [TCP Query User{F3BA0C50-F157-4E66-BC8A-F550E4BF4E58}D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [UDP Query User{4A3E667F-D4A8-455C-864D-C80ED6B602F9}D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [{49A952E1-8302-4E00-8C62-8C9A527D2E69}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{93743C7A-2027-4F28-96D7-A5A44B243B5B}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{D53194DA-D91A-4AB9-AB43-B52E314260ED}] => (Allow) D:\Programme\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{A9122168-F299-4249-A35D-FAEA712EBFB9}] => (Allow) D:\Programme\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{D7A76FFD-B3D9-41E1-91CB-06737F91C37D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{F6EC90A8-DA41-4336-BFF2-DA00338CBEC6}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [TCP Query User{AF7210A1-CEBC-4195-9870-8DCC25800A28}C:\program files (x86)\depth\binaries\win32\depthgame.exe] => (Allow) C:\program files (x86)\depth\binaries\win32\depthgame.exe
FirewallRules: [UDP Query User{7580D1F0-78E1-49A4-93E1-AF128E9311B7}C:\program files (x86)\depth\binaries\win32\depthgame.exe] => (Allow) C:\program files (x86)\depth\binaries\win32\depthgame.exe
FirewallRules: [TCP Query User{0662C9FD-072F-401A-B3D6-9F9A3AD48921}D:\games\depth\binaries\win32\depthgame.exe] => (Block) D:\games\depth\binaries\win32\depthgame.exe
FirewallRules: [UDP Query User{E0B2FB36-4FC9-45CF-9FCF-D657BEEBCA5C}D:\games\depth\binaries\win32\depthgame.exe] => (Block) D:\games\depth\binaries\win32\depthgame.exe
FirewallRules: [TCP Query User{61F6F5E8-F17D-4418-AFA7-A41D439A469F}D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B8953245-17AB-4417-AEF8-2B35742370FB}D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{8FCA4938-DEBB-4298-9BB3-78E8123B0D1B}D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DB55040D-232F-46F4-9FBC-CAFB252A9BB5}D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [{CECBA006-64AB-4510-972A-2E108B229970}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F1A77287-22B5-4130-B20B-D50159DBE18C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1917C1F3-A247-4AB8-A2F4-7AA52CA56B85}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{03CF75D5-D4C9-4F86-9C5A-725274CA02C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{38C9135F-490E-41B0-A71E-08F8105DAC10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C0BC0D90-3BBE-4B41-9F15-7D53646D903F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{2CC18F38-A5F3-4A94-88AB-6908DC9207A2}D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{13E588A7-E4FB-4E49-BB19-3E1A9A47E0B2}D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{72D1E4F1-304B-46FE-B28E-9FDA8AD70832}D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8C4F22F5-FCE7-4D7C-9051-1054ED46BD34}D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [{92A2A8C0-2E0B-43CE-B75F-179D35897859}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{500B68CB-E87E-49F3-9F22-F93AEA7159B5}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{DA43ED07-E156-47DD-8BF7-A52D6081B28E}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe
FirewallRules: [{8371747D-3D43-41C9-B946-C3F6056C255F}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe
FirewallRules: [{3181DBCF-2354-476F-9266-9D13BBC27FEA}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameOldLoad.exe
FirewallRules: [{8038BC87-12F5-43E8-B442-2A413E88058F}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameOldLoad.exe
FirewallRules: [TCP Query User{C467FD1E-CD5F-46DF-AA1A-5627503CC96F}D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DA28D97C-D74E-4F0E-9CBA-7E586E53C2F4}D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{2C3E01D5-5D25-4303-B35F-59558CE8E44F}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{5F844F21-5AB4-43CE-B390-CD99D075561E}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{0782A3AE-0AD6-4405-8A08-446317123037}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{8EC7EEBA-24EC-41B6-9F9F-F12BCCF951B5}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{2CEA21F0-D802-4F91-AF41-CA8AF11D9F41}] => (Allow) D:\Games\GameforgeLive\gfl_client.exe
FirewallRules: [{6EEA226A-DA48-4640-8409-940BD78854E9}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\OMDU.exe
FirewallRules: [{47C90829-3D54-48F9-8F6B-19CD110A3743}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\Dashboard\Bin\SpitfireDashboard.exe
FirewallRules: [{6F2ED062-2CD3-49E3-98FC-008DEBF4FEFD}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\Binaries\Win64\SpitfireGame.exe
FirewallRules: [TCP Query User{384CF4E2-0BA9-45B4-9215-2A46947475D4}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D543E49C-9AD2-4A1A-9789-96090E49DDB9}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{2ED66E07-7201-4E75-B479-95697C7CADA8}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{853E3AC9-8932-4FD9-ADFF-FE50469877AC}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{7D39FD3A-3010-47DA-A647-F8D6B57F239F}D:\games\wofwarship\wowslauncher.exe] => (Allow) D:\games\wofwarship\wowslauncher.exe
FirewallRules: [UDP Query User{EEEE6617-158F-4482-BCBE-8C6D1CCABC0A}D:\games\wofwarship\wowslauncher.exe] => (Allow) D:\games\wofwarship\wowslauncher.exe
FirewallRules: [{44CB6D51-BAD9-427F-85BA-376D6F707621}] => (Allow) C:\Users\Iceflex\AppData\Roaming\IQIYI Video\LStyle\GpUpdate.exe
FirewallRules: [{2EDE46DD-D852-410A-A72E-A3E0A8B7787F}] => (Allow) C:\IQIYI Video\GeePlayer\GeePlayer.exe
FirewallRules: [{F1A4E75F-720C-4512-9DB6-F097FD784296}] => (Allow) C:\Users\Iceflex\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{3A8D6067-81C5-4C09-AD66-5A19D8876516}] => (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{C87D67B3-92D6-4E86-B86F-F18454C8AEFF}] => (Allow) C:\IQIYI Video\LStyle\QyWebPlayer.exe
FirewallRules: [{3C3264D6-EF0F-41D2-AAF7-0A11AA9B60DF}] => (Allow) C:\IQIYI Video\Common\QyKernel.exe
FirewallRules: [{7501ECB7-7E2E-4ED2-A2C9-5BF86F058405}] => (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
FirewallRules: [TCP Query User{454ADFCB-386E-4284-A228-9533F2D1E47D}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{18139B72-44C4-46E1-95D7-3F0FA5EFAE85}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{11D3B967-6D34-4951-AA0C-1269DDF4F796}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (07/27/2015 02:28:06 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (07/27/2015 02:26:00 PM) (Source: MsiInstaller) (EventID: 11316) (User: Iceflex-PC)
Description: Product: globalupdate Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.
Error: (07/27/2015 02:21:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DeskBar.exe, Version: 2.6.3.1710, Zeitstempel: 0x55b5f4df
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00c8361e
ID des fehlerhaften Prozesses: 0x217c
Startzeit der fehlerhaften Anwendung: 0xDeskBar.exe0
Pfad der fehlerhaften Anwendung: DeskBar.exe1
Pfad des fehlerhaften Moduls: DeskBar.exe2
Berichtskennung: DeskBar.exe3
Error: (07/27/2015 02:20:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: DeskBar.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at DeskBar.InstalledBrowser.SetDefaultBrowser(DeskBar.InstalledBrowser)
at DeskBar.InstalledBrowser.GetInstalledBrowsers(Boolean)
at DeskBar.AppConfiguration.Validate()
at DeskBar.App..ctor()
at DeskBar.App.Main(System.String[])
Error: (07/27/2015 02:18:00 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (07/27/2015 02:17:12 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error
Error: (07/27/2015 01:06:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DeskBar.exe, Version: 2.6.3.1710, Zeitstempel: 0x55b5f4df
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x009f361e
ID des fehlerhaften Prozesses: 0x21d4
Startzeit der fehlerhaften Anwendung: 0xDeskBar.exe0
Pfad der fehlerhaften Anwendung: DeskBar.exe1
Pfad des fehlerhaften Moduls: DeskBar.exe2
Berichtskennung: DeskBar.exe3
Error: (07/27/2015 01:06:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: DeskBar.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at DeskBar.InstalledBrowser.SetDefaultBrowser(DeskBar.InstalledBrowser)
at DeskBar.InstalledBrowser.GetInstalledBrowsers(Boolean)
at DeskBar.AppConfiguration.Validate()
at DeskBar.App..ctor()
at DeskBar.App.Main(System.String[])
Error: (07/27/2015 01:03:50 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (07/27/2015 01:03:04 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error
Systemfehler:
=============
Error: (07/27/2015 02:22:59 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (07/27/2015 02:22:58 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (07/27/2015 02:22:57 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (07/27/2015 02:21:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2015 02:20:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (07/27/2015 02:17:32 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist von folgendem Dienst abhängig: AntiVirService. Dieser Dienst ist eventuell nicht installiert.
Error: (07/27/2015 01:06:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2015 01:03:23 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist von folgendem Dienst abhängig: AntiVirService. Dieser Dienst ist eventuell nicht installiert.
Error: (07/27/2015 12:56:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2015 12:52:21 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist von folgendem Dienst abhängig: AntiVirService. Dieser Dienst ist eventuell nicht installiert.
Microsoft Office:
=========================
Error: (07/27/2015 02:28:06 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (07/27/2015 02:26:00 PM) (Source: MsiInstaller) (EventID: 11316) (User: Iceflex-PC)
Description: Product: globalupdate Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.
(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2015 02:21:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DeskBar.exe2.6.3.171055b5f4dfunknown0.0.0.000000000c000000500c8361e217c01d0c866601b316fC:\Users\Iceflex\AppData\Local\DeskBar\2.6.3.1710\DeskBar.exeunknownf0b9b066-3459-11e5-9b06-50465d073624
Error: (07/27/2015 02:20:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: DeskBar.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at DeskBar.InstalledBrowser.SetDefaultBrowser(DeskBar.InstalledBrowser)
at DeskBar.InstalledBrowser.GetInstalledBrowsers(Boolean)
at DeskBar.AppConfiguration.Validate()
at DeskBar.App..ctor()
at DeskBar.App.Main(System.String[])
Error: (07/27/2015 02:18:00 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 02:17:12 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description:
Error: (07/27/2015 01:06:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DeskBar.exe2.6.3.171055b5f4dfunknown0.0.0.000000000c0000005009f361e21d401d0c85c06d4f5cbC:\Users\Iceflex\AppData\Local\DeskBar\2.6.3.1710\DeskBar.exeunknown9577a626-344f-11e5-ab64-50465d073624
Error: (07/27/2015 01:06:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: DeskBar.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at DeskBar.InstalledBrowser.SetDefaultBrowser(DeskBar.InstalledBrowser)
at DeskBar.InstalledBrowser.GetInstalledBrowsers(Boolean)
at DeskBar.AppConfiguration.Validate()
at DeskBar.App..ctor()
at DeskBar.App.Main(System.String[])
Error: (07/27/2015 01:03:50 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 01:03:04 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description:
CodeIntegrity Fehler:
===================================
Date: 2015-07-27 12:34:03.470
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:34:03.392
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:33:29.334
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:30:42.085
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:28:58.846
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:28:47.697
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:27:32.840
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:26:43.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:26:39.847
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 44%
Total physical RAM: 8174.12 MB
Available physical RAM: 4528.32 MB
Total Virtual: 16346.44 MB
Available Virtual: 11833.04 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:200 GB) (Free:13.44 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:1663.01 GB) (Free:439.08 GB) NTFS
Drive f: (Dungeons 2) (CDROM) (Total:2.17 GB) (Free:0 GB) UDF
Drive g: (INTENSO) (Fixed) (Total:931.51 GB) (Free:443.26 GB) NTFS
Drive h: () (Removable) (Total:1.89 GB) (Free:1.89 GB) FAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: A9BBC8DA)
Partition 1: (Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1663 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 32ACA469)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 1.9 GB) (Disk ID: 3B0D02A5)
Partition 1: (Active) - (Size=1.9 GB) - (Type=06)
==================== Ende von log ============================
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 14:29
| #5 |
| | Windows 7: Programme installieren sich selbständig Gmer 1/3 Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-07-27 14:39:16
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-5 ST2000DM001-1CH164 rev.CC43 1863,02GB
Running: Gmer-19357.exe; Driver: C:\Users\Iceflex\AppData\Local\Temp\pwdiqfob.sys
---- User code sections - GMER 2.1 ----
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\ProgramData\1WinManPro1\ProtectWindowsManager.exe[1344] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\Explorer.EXE[664] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\Explorer.EXE[664] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-1-6.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001009d90f0
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-10.exe[1076] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001009d9340
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-6.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001008c90f0
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-10.exe[1772] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001008c9340
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001024090f0
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-10.exe[2108] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000102409340
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_5.1V27.07\9a7d60c7-d56a-4bcc-b8b5-af44669615e4-6.exe[2232] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-6.exe[2264] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001002590f0
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-10.exe[2324] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000100259340
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-6.exe[2776] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-1-6.exe[3188] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Cinema_Plus-1.2V27.07\43b0ce0d-ccef-4d18-b2c5-d1586102c003-1-6.exe[3224] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-6.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001004e90f0
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-10.exe[3432] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001004e9340
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\FastSearch\acengine.exe[3556] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Ge-Force\ecf2b722-2971-4154-b09c-da1b799ef11a-6.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\I - Cinema\1bd07443-3838-4818-ac33-02610eb04fda-1-6.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 0000000100a490f0
.text C:\Program Files (x86)\CinemaPlus_1.3dV27.07\8445e138-d85f-4a87-b610-2f63c5ecae6c-10.exe[4000] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000100a49340
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ...
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 14:30
| #6 |
| | Windows 7: Programme installieren sich selbständig Gmer 2/3 Code:
ATTFilter * 9
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe[4092] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624\snsd5499.tmp[4340] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\jnsyE63B.tmp[4436] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\ProtectService.exe[4592] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\MiuiTab\HPNotify.exe[4864] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Umbrella\Umbrella217.exe[4872] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\SysWOW64\WSOCK32.dll!recv + 82 00000000700317fa 2 bytes CALL 760711a9 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\SysWOW64\WSOCK32.dll!recvfrom + 88 0000000070031860 2 bytes CALL 760711a9 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 98 0000000070031942 2 bytes JMP 75767089 C:\Windows\syswow64\WS2_32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 109 000000007003194d 2 bytes JMP 7576cba6 C:\Windows\syswow64\WS2_32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\SysWOW64\PnkBstrA.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624\knsyC991.tmpfs[3820] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe[5268] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe[5268] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[5436] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[5436] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075a32ab1 5 bytes JMP 00000001003ef046
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 0000000102aa90f0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000102aa9340
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[3016] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[3016] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WordShark_1.10.0.20\Service\wssvc.exe[5828] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe[1188] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[6752] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\mbot_de_014010041\upmbot_de_014010041.exe[2592] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001010a90f0
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001010a9340
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\BubbleSound\3D BubbleSound.exe[8308] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\WebBar\2.0.5659.26749\wb.exe[8436] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\WebBar\2.0.5659.26749\wb.exe[8436] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001025f90f0
.text C:\Users\Iceflex\AppData\Roaming\InetStat\inetstat.exe[9112] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001025f9340
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
__________________ --> Windows 7: Programme installieren sich selbständig |
|
27.07.2015, 14:30
| #7 |
| | Windows 7: Programme installieren sich selbständig Gmer 3/3 Code:
ATTFilter .text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 0000000101fd90f0
.text C:\IQIYI Video\Common\QyKernel.exe[8196] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000101fd9340
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001004590f0
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000100459340
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2194\jsdrv.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[6104] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001007c90f0
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001007c9340
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\mbot_de_014010041\mbot_de_014010041.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001001890f0
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000100189340
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebHelper.exe[8768] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001009190f0
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000100919340
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\gmsd_de_005010041\gmsd_de_005010041.exe[4844] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 00000001004e90f0
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 00000001004e9340
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Iceflex\AppData\Local\SmartWeb\SmartWebApp.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3584] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[9764] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\WS2_32.dll!getaddrinfo 0000000075764296 5 bytes JMP 0000000105fa90f0
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\WS2_32.dll!GetAddrInfoW 0000000075764889 5 bytes JMP 0000000105fa9340
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe[10152] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe[10164] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\SYSTEM32\ntdll.dll!NtOpenFile 000000007790dee0 8 bytes JMP 00000001377b0298
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\SYSTEM32\ntdll.dll!NtCreateFile 000000007790e100 8 bytes JMP 00000001377b02f8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\SYSTEM32\ntdll.dll!NtSetValueKey 000000007790e1b0 8 bytes JMP 00000001377b0e98
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!FindResourceA 00000000777a4410 6 bytes JMP 00000001377b0ef8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegEnumKeyExW 00000000777a8e30 5 bytes JMP 00000001377b0bf8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegQueryInfoKeyA 00000000777a9ea0 7 bytes JMP 00000001377b0a18
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegSetValueExW 00000000777aa3e0 7 bytes JMP 00000001377b08f8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetModuleHandleExW + 8 00000000777aac28 6 bytes JMP 00000001377b05f8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegLoadMUIStringW 00000000777ac010 5 bytes JMP 00000001377b0e38
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegQueryInfoKeyW 00000000777ace60 7 bytes JMP 00000001377b0a78
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegEnumValueW 00000000777ad2f0 7 bytes JMP 00000001377b09b8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!LoadLibraryExA + 1 00000000777ad851 2 bytes [03, 2B]
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!LoadLibraryExA + 4 00000000777ad854 1 byte [C0]
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegEnumKeyExA 00000000777af700 6 bytes JMP 00000001377b0b98
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegOpenKeyExW 00000000777b3a00 9 bytes JMP 00000001377b0778
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegQueryValueExW 00000000777b3f00 5 bytes JMP 00000001377b0838
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegCloseKey 00000000777b40b0 5 bytes JMP 00000001377b0d18
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegOpenKeyExA 00000000777b41f0 9 bytes JMP 00000001377b0718
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegQueryValueExA 00000000777b4380 5 bytes JMP 00000001377b07d8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetModuleFileNameA + 8 00000000777b5948 6 bytes JMP 00000001377b0418
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!CreateThread + 80 00000000777b5a70 6 bytes JMP 00000001377b04d8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!FreeLibrary + 8 00000000777b5ac8 6 bytes JMP 00000001377b0658
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!FreeLibrary + 20 00000000777b5ad4 6 bytes JMP 00000001377b03b8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegGetValueW 00000000777b5eb0 5 bytes JMP 00000001377b0dd8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!LoadLibraryW 00000000777b6420 5 bytes JMP 00000001377b01d8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!LoadLibraryA 00000000777b6510 5 bytes JMP 00000001377b0238
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetModuleFileNameW + 8 00000000777b6ba8 6 bytes JMP 00000001377b0478
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!FindResourceW 00000000777b9000 6 bytes JMP 00000001377b0f58
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetCommandLineW + 8 00000000777bb8b8 6 bytes JMP 00000001377b0178
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetProcAddress + 8 00000000777c2078 6 bytes JMP 00000001377b06b8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetModuleHandleW + 8 00000000777c2118 6 bytes JMP 00000001377b0538
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegDeleteValueW 00000000777cffd0 5 bytes JMP 00000001377b0cb8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!GetModuleHandleExA + 1 00000000777ec491 4 bytes {JMP 0xffffffffbffc4108}
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegSaveKeyExW 0000000077837b10 7 bytes JMP 00000001377b0b38
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegSaveKeyExA 0000000077837ca0 7 bytes JMP 00000001377b0ad8
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegDeleteValueA 0000000077838600 5 bytes JMP 00000001377b0c58
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegSetValueExA 0000000077838850 7 bytes JMP 00000001377b0898
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegEnumValueA 0000000077838c60 7 bytes JMP 00000001377b0958
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\kernel32.dll!RegGetValueA 0000000077839730 5 bytes JMP 00000001377b0d78
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\WINHTTP.dll!WinHttpGetIEProxyConfigForCurrentUser 000007fef86aa56c 5 bytes JMP 000007ffbfaf0778
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\WS2_32.dll!GetAddrInfoW + 1 000007fefdb623c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[9980] C:\Windows\system32\WS2_32.dll!getaddrinfo 000007fefdb62720 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075cc1401 2 bytes JMP 7609b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075cc1419 2 bytes JMP 7609b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075cc1431 2 bytes JMP 76118f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075cc144a 2 bytes CALL 7607489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075cc14dd 2 bytes JMP 76118822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075cc14f5 2 bytes JMP 761189f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075cc150d 2 bytes JMP 76118718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075cc1525 2 bytes JMP 76118ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075cc153d 2 bytes JMP 7608fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075cc1555 2 bytes JMP 760968ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075cc156d 2 bytes JMP 76118fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075cc1585 2 bytes JMP 76118b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075cc159d 2 bytes JMP 761186dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075cc15b5 2 bytes JMP 7608fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075cc15cd 2 bytes JMP 7609b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075cc16b2 2 bytes JMP 76118ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\CinemaPlus-3.2cV21.07\a9b25328-9dc7-4d8a-94b1-f1a515b3ecfd-1-6.exe[11512] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075cc16bd 2 bytes JMP 76118671 C:\Windows\syswow64\kernel32.dll
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\services.exe [676:6840] 0000000002350240
Thread C:\Windows\system32\services.exe [676:6844] 0000000002350240
Thread C:\Windows\system32\services.exe [676:6848] 0000000002350240
Thread C:\Windows\system32\services.exe [676:6852] 0000000002350240
Thread C:\Windows\system32\services.exe [676:6856] 0000000002350240
Thread C:\Windows\system32\services.exe [676:6860] 0000000002350240
Thread C:\Windows\system32\svchost.exe [948:988] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [948:992] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [948:996] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [948:1000] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [948:1004] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [948:1008] 00000000015d0240
Thread C:\Windows\system32\svchost.exe [860:1392] 0000000001d60240
Thread C:\Windows\system32\svchost.exe [860:1396] 0000000001d60240
Thread C:\Windows\system32\svchost.exe [860:1400] 0000000001d60240
Thread C:\Windows\system32\svchost.exe [860:1404] 0000000001d60240
Thread C:\Windows\system32\svchost.exe [860:1408] 0000000001d60240
Thread C:\Windows\system32\svchost.exe [860:1412] 0000000001d60240
Thread C:\Windows\System32\spoolsv.exe [1536:1844] 0000000002090240
Thread C:\Windows\System32\spoolsv.exe [1536:1848] 0000000002090240
Thread C:\Windows\System32\spoolsv.exe [1536:1852] 0000000002090240
Thread C:\Windows\System32\spoolsv.exe [1536:1856] 0000000002090240
Thread C:\Windows\System32\spoolsv.exe [1536:1860] 0000000002090240
Thread C:\Windows\System32\spoolsv.exe [1536:1864] 0000000002090240
Thread C:\Windows\system32\svchost.exe [1588:1680] 00000000012e0240
Thread C:\Windows\system32\svchost.exe [1588:1684] 00000000012e0240
Thread C:\Windows\system32\svchost.exe [1588:1688] 00000000012e0240
Thread C:\Windows\system32\svchost.exe [1588:1692] 00000000012e0240
Thread C:\Windows\system32\svchost.exe [1588:1696] 00000000012e0240
Thread C:\Windows\system32\svchost.exe [1588:1700] 00000000012e0240
Thread C:\Windows\SysWOW64\rundll32.exe [1868:2864] 000000007ed391a0
Thread C:\Windows\SysWOW64\rundll32.exe [1868:8340] 000000007ed83c70
Thread C:\Windows\Explorer.EXE [664:13080] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:11704] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:13084] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:13068] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:13056] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:13060] 000000000ef40240
Thread C:\Windows\Explorer.EXE [664:13064] 000000000ef5f5d0
Thread C:\Windows\Explorer.EXE [664:12940] 000000000ef5f5d0
Thread C:\Windows\System32\svchost.exe [4088:4536] 00000000010b0240
Thread C:\Windows\System32\svchost.exe [4088:4540] 00000000010b0240
Thread C:\Windows\System32\svchost.exe [4088:4544] 00000000010b0240
Thread C:\Windows\System32\svchost.exe [4088:4548] 00000000010b0240
Thread C:\Windows\System32\svchost.exe [4088:4552] 00000000010b0240
Thread C:\Windows\System32\svchost.exe [4088:4556] 00000000010b0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:5468] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:5472] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:5476] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:6024] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:6088] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:6092] 0000000001cb0240
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:5432] 0000000001ccf5d0
Thread C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [3016:3012] 0000000001ccf5d0
Thread C:\Windows\system32\svchost.exe [7764:7876] 0000000000660240
Thread C:\Windows\system32\svchost.exe [7764:7880] 0000000000660240
Thread C:\Windows\system32\svchost.exe [7764:7884] 0000000000660240
Thread C:\Windows\system32\svchost.exe [7764:7888] 0000000000660240
Thread C:\Windows\system32\svchost.exe [7764:7892] 0000000000660240
Thread C:\Windows\system32\svchost.exe [7764:7896] 0000000000660240
Thread C:\Windows\System32\svchost.exe [3840:7564] 000007fedc9e9688
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12808] 000007fefb9d2bf8
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12816] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12820] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12824] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12828] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12832] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12836] 0000000000b30240
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12844] 0000000000b4f5d0
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [12580:12872] 0000000000b4f5d0
Thread C:\Windows\System32\svchost.exe [12740:12904] 0000000000590240
Thread C:\Windows\System32\svchost.exe [12740:12908] 0000000000590240
Thread C:\Windows\System32\svchost.exe [12740:12912] 0000000000590240
Thread C:\Windows\System32\svchost.exe [12740:12916] 0000000000590240
Thread C:\Windows\System32\svchost.exe [12740:12920] 0000000000590240
Thread C:\Windows\System32\svchost.exe [12740:12924] 0000000000590240
---- Processes - GMER 2.1 ----
Process C:\ProgramData\NavRight\NavRight.exe (*** suspicious ***) @ C:\ProgramData\NavRight\NavRight.exe [3080] (Install/NavRight)(2015-07-27 10:15:05) 000000013f270000
Process C:\Users\Iceflex\AppData\Roaming\FlipBoards\fbindexer.exe (*** suspicious ***) @ C:\Users\Iceflex\AppData\Roaming\FlipBoards\fbindexer.exe [4060] (fbindexer/fbindexer)(2015-07-27 10:22:59) 0000000001000000
Process C:\ProgramData\NavRight\NavRight.exe (*** suspicious ***) @ C:\ProgramData\NavRight\NavRight.exe [4884] (Install/NavRight)(2015-07-27 10:15:05) 000000013f270000
---- Registry - GMER 2.1 ----
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Iceflex\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1
---- EOF - GMER 2.1 ----
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 14:44
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Programme installieren sich selbständig Meine Fresse ist das System vollgerotzt mit Junkware   Ich gratuliere zum bisher schlimmsten zugemüllten System!  Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
27.07.2015, 16:24
| #9 |
| | Windows 7: Programme installieren sich selbständig so das was da steht alles deinstalliert 2 programme waren aber nicht in der liste: Web Bar 2.0.5659.26749 und BubbleSound fehlten. Hab das gefühl da sind aber noch einige programme die nicht da sien sollten.
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 19:44
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Programme installieren sich selbständig Ja, wir sind ja auch noch nicht fertig  Adware/Junkware/Toolbars entfernen 1. Schritt: Malwarebytes Downloade Dir bitte  Malwarebytes Anti-Malware
(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 2. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
3. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
4. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
27.07.2015, 21:15
| #11 |
| | Windows 7: Programme installieren sich selbständig Jaja okay sorry das ich das sagte =P So ähm Malwarebytes will keine Logs erstellen =/ Nachdem der Suchlauf durch ist Packt er die gefundenen Objekte in Quarantäne und kurz bevor alle drin waren ist er abgestürzt (Programm reagiert nicht) Habe 2 Durchläufe gemacht beim ersten hat er ca 1960 Objekte gefunden und beim 2 mal 88 und davon 73 in Quarantäne verschoben Hier aber die anderen Logs =D ADWCleaner Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 27/07/2015 um 21:48:09
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-09.2 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Iceflex - ICEFLEX-PC
# Gestarted von : C:\Users\Iceflex\Desktop\AdwCleaner_4.208.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : IHProtect Service
[#] Dienst Gelöscht : mailUpdate
[#] Dienst Gelöscht : Util Product Deals
[#] Dienst Gelöscht : Update Product Deals
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\IQIYI Video
Ordner Gelöscht : C:\ProgramData\MailUpdate
Ordner Gelöscht : C:\ProgramData\NavRight
Ordner Gelöscht : C:\ProgramData\6f73238c000024c7
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer
Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Program Files (x86)\ShopperPro
Ordner Gelöscht : C:\Program Files (x86)\YTDownloader
Ordner Gelöscht : C:\Program Files (x86)\Ge-Force
Ordner Gelöscht : C:\Program Files (x86)\miuitab
Ordner Gelöscht : C:\Program Files (x86)\Product Deals
Ordner Gelöscht : C:\Program Files (x86)\FastSearch
Ordner Gelöscht : C:\Program Files (x86)\gmsd_de_005010043
Ordner Gelöscht : C:\Program Files (x86)\MyFunCards
Ordner Gelöscht : C:\Users\Iceflex\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Program Files\WebBar
Ordner Gelöscht : C:\Program Files\BubbleSound
Ordner Gelöscht : C:\Users\Iceflex\AppData\Local\SmartWeb
Ordner Gelöscht : C:\Users\Iceflex\AppData\Local\WebBar
Ordner Gelöscht : C:\Users\Iceflex\AppData\Local\gmsd_de_005010043
Ordner Gelöscht : C:\Users\Iceflex\AppData\Local\F1EB78A0-1437999501-11D5-BA88-50465D073624
Ordner Gelöscht : C:\Users\Iceflex\AppData\LocalLow\SmartWeb
Ordner Gelöscht : C:\Users\Iceflex\AppData\Roaming\MailUpdate
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjoijdanhaiflhibkljeklcghcmmfffh_0.localstorage
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkfdlcdbajamklbneflfbcmfgddmpae_0.localstorage
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nociobghckdhokecfeajdpimjeapnopn_0.localstorage
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_adpeheiliennogfclcgmchdfdmafjegc_0.localstorage
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Public\Desktop\Facebook.lnk
Datei Gelöscht : C:\Users\Iceflex\Favorites\Startfenster.lnk
Datei Gelöscht : C:\Users\Iceflex\Favorites\Links\Startfenster.lnk
Datei Gelöscht : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Datei Gelöscht : C:\Program Files\Common Files\System\SysMenu.dll
Datei Gelöscht : C:\Program Files\Common Files\System\SysMenu64.dll
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\3EiWdjfG9MoN1P2oDMW9Cbrz
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\F4xUuhVkqd
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\hOEQrYeLUBFOPHEbeKwGKQSFaz
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\Pn8IAC2P21
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\sv9wtRNtTXOfX909Ndt4zIx
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\wM5dDPObXxKzVEXJUM
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Startfenster.lnk
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster.lnk
Datei Gelöscht : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_manaflask.com_0.localstorage
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_manaflask.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage
Datei Gelöscht : C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : Inst_Rep
Task Gelöscht : PostPoneInstall
Task Gelöscht : Run_Bobby_Browser
Task Gelöscht : ShopperPro
Task Gelöscht : ShopperProJSUpd
Task Gelöscht : Smp
Task Gelöscht : SMupdate1
Task Gelöscht : SPDriver
Task Gelöscht : WebBarLaunchTask
Task Gelöscht : WebBarUpdateTask
Task Gelöscht : YTDownloader
Task Gelöscht : YTDownloaderUpd
Task Gelöscht : Microsoft\Windows\Multimedia\SMupdate3
Task Gelöscht : Microsoft\Windows\Maintenance\SMupdate2
Task Gelöscht : 3EiWdjfG9MoN1P2oDMW9Cbrz
Task Gelöscht : F4xUuhVkqd
Task Gelöscht : hOEQrYeLUBFOPHEbeKwGKQSFaz
Task Gelöscht : Pn8IAC2P21
Task Gelöscht : sv9wtRNtTXOfX909Ndt4zIx
Task Gelöscht : wM5dDPObXxKzVEXJUM
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Iceflex\Desktop\Firefox .lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\Desktop\Iexplore .lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\Star Wars - The Old Republic.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\WarThunder.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Chrome App Launcher.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Star Wars - The Old Republic.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
Wert Gelöscht : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Product Deals
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Product Deals
Schlüssel Gelöscht : HKLM\SOFTWARE\2f5f5cb1-2049-4cdf-8f6b-1207a55f38a8
Schlüssel Gelöscht : HKLM\SOFTWARE\4f4434af-28b2-42c4-8de1-85b20556bc4c
Schlüssel Gelöscht : HKLM\SOFTWARE\5cb1c52f-2a60-4a4f-b023-21b2cdd44aa5
Schlüssel Gelöscht : HKLM\SOFTWARE\6a6e2348-d50f-4ccc-b17e-f550661d2772
Schlüssel Gelöscht : HKLM\SOFTWARE\6ef20df6-d8bb-4459-8a33-7deab85b8ae7
Schlüssel Gelöscht : HKLM\SOFTWARE\819646ad-d7cf-da04-c7b4-e428026417a4
Schlüssel Gelöscht : HKLM\SOFTWARE\b016d761-bbb6-411d-9104-683d554cf13c
Schlüssel Gelöscht : HKLM\SOFTWARE\bb49da9d-c9ab-4b77-ba89-f6f977495e39
Schlüssel Gelöscht : HKLM\SOFTWARE\be14bda7-e3b0-425d-9dc4-09a60ea547e9
Schlüssel Gelöscht : HKLM\SOFTWARE\c7361f1c-c230-420f-a00a-5bfc20e1473d
Schlüssel Gelöscht : HKLM\SOFTWARE\d4d19184-8386-49fb-8aa8-d88468c7b44a
Schlüssel Gelöscht : HKLM\SOFTWARE\e606c209-6465-4a7d-8195-e59bf188cffc
Schlüssel Gelöscht : HKLM\SOFTWARE\f42736f7-d19e-4262-96d7-52f30cc82bc2
Schlüssel Gelöscht : HKLM\SOFTWARE\ff7fb6f5-f119-4e26-809a-aebb94c744eb
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{085CB97F-6D0B-487D-B94C-E11A736C38CE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{307B3CDB-9EE3-4137-9D18-F9AD6537ECEB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D96C1D26-5CDF-4506-9244-57233C3984DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B6360BD3-5CD0-40D3-BD87-DAFF37889F50}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E1D75F62-CBBD-45C7-9D1D-6B5ECEC2E006}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DC4101EC-F2D3-4648-A1F6-B4EECC52443A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6BE0FB-8B18-4DFC-959F-233651CC4D7F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAC94FEE-45B4-4FD4-9EEA-D8978EC96C6E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{085CB97F-6D0B-487D-B94C-E11A736C38CE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F7C78C08-3CC7-416F-B827-7C1785ABBDA8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\IObit Apps
Schlüssel Gelöscht : HKCU\Software\Ge-Force
Schlüssel Gelöscht : HKCU\Software\Linkey
Schlüssel Gelöscht : HKCU\Software\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}
Schlüssel Gelöscht : HKCU\Software\Kromtech
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartWeb
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\IObit Apps
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Clara
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\IObit Apps
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchModule
Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBit
Schlüssel Gelöscht : HKLM\SOFTWARE\AIM Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\searchult
Schlüssel Gelöscht : HKLM\SOFTWARE\Br MediaPlayer
Schlüssel Gelöscht : HKU\.DEFAULT\Software\IM
Schlüssel Gelöscht : HKU\.DEFAULT\Software\ImInstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IQIYI Video
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D7D6742-5B49-4454-9E9B-748E731E741A}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavRight
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\ShopperPro
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\YTDownloader
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\SearchModule
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17909
-\\ Mozilla Firefox v
-\\ Google Chrome v32.0.1700.107
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.sm.de/?q={searchTerms}
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.oursurfing.com/web/?type=dspp&ts=1437992372&z=a172c6d037964548bcdd10cg7z1c2mbt8tcodc1m3o&from=amt&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN&q={searchTerms}
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.iminent.com/?appId=51730d5c-ecb2-4d32-bf09-620b40e81bd5&ref=toolbox&q={searchTerms}
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www-searching.com/search.aspx?s=F7Rztutdk0000,ccb0e664-5a17-4be7-a976-4b125b931c92,&q={searchTerms}
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Gelöscht [Extension] : dimfohdigjaffdaanhmbocfkpolglnjk
[C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Gelöscht [Homepage] : hxxp://www.istartsurf.com/?type=hp&ts=1438007805&z=553563b60c930f379189fc9g8z8c8b5ebe0m7m9wbb&from=face&uid=ST2000DM001-1CH164_W1E171HNXXXXW1E171HN
-\\ Chromium v
*************************
AdwCleaner[R0].txt - [51468 Bytes] - [25/01/2015 02:32:42]
AdwCleaner[R1].txt - [952 Bytes] - [25/01/2015 02:39:02]
AdwCleaner[R2].txt - [21310 Bytes] - [27/07/2015 21:29:16]
AdwCleaner[S0].txt - [48003 Bytes] - [25/01/2015 02:34:39]
AdwCleaner[S1].txt - [19945 Bytes] - [27/07/2015 21:48:09]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [20005 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Windows 7 Home Premium x64
Ran by Iceflex on 27.07.2015 at 22:01:36,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
Failed to delete: [Task] C:\Windows\system32\tasks\FlipBoards
Successfully deleted: [Task] C:\Windows\system32\tasks\BudgetWise
Successfully deleted: [Task] C:\Windows\system32\tasks\BudgetWise
Successfully deleted: [Task] C:\Windows\system32\tasks\HGFTONKTGNYRDTTL
Successfully deleted: [Task] C:\Windows\Tasks\BudgetWise.job
Successfully deleted: [Task] C:\Windows\Tasks\BudgetWise.job
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\apphide
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
Successfully deleted: [Registry Key] (Standard) REG_SZ Crossbrowse
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update ResultsAlpha
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util ResultsAlpha
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\wbsvc
~~~ Files
Successfully deleted: [File] C:\ProgramData\1374310767.bdinstall.bin
Successfully deleted: [File] C:\ProgramData\1376000700.bdinstall.bin
Successfully deleted: [File] C:\Users\Iceflex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\search.lnk
~~~ Folders
Successfully deleted: [Folder] C:\Program Files (x86)\IObit\Driver Booster
Successfully deleted: [Folder] C:\ProgramData\IObit\Driver Booster
Successfully deleted: [Folder] C:\Users\Iceflex\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\Users\Iceflex\Appdata\Local\installer
Successfully deleted: [Folder] C:\Users\Iceflex\AppData\Roaming\goldengate
Successfully deleted: [Folder] C:\Users\Iceflex\AppData\Roaming\IObit\Driver Booster
Successfully deleted: [Folder] C:\Users\Public\qiyi
Successfully deleted: [Folder] C:\ProgramData\12db864551ae4c578eb17db1a9f5d3cf
Successfully deleted: [Folder] C:\Users\Iceflex\Appdata\Local\32381
~~~ Chrome
[C:\Users\Iceflex\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Iceflex\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
papbadoldddalgcjcicnikcfenodpghp
[C:\Users\Iceflex\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Iceflex\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.07.2015 at 22:08:42,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
durchgeführt von Iceflex (Administrator) auf ICEFLEX-PC (27-07-2015 22:09:25)
Gestartet von C:\Users\Iceflex\Desktop
Geladene Profile: Iceflex (Verfügbare Profile: Iceflex & Mcx1-ICEFLEX-PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7205592 2014-02-02] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [SteelSeries World of Warcraft Cataclysm MMO Gaming Mouse] => D:\Programme\Steelseries\World of Warcraft Cataclysm MMO Gaming Mouse\WoWMHID2.exe [1993216 2011-08-18] (SteelSeries)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [254976 2015-04-16] (Razer Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Logitech Vid] => C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [EADM] => D:\Programme\Origin\Origin.exe [3632112 2015-07-27] (Electronic Arts)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2860080 2015-06-29] (Blizzard Entertainment)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Run: [MyComGames] => C:\Users\Iceflex\AppData\Local\MyComGames\MyComGames.exe [4071368 2015-07-23] ()
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-09-27]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2012-12-25] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ATTENTION
AutoConfigURL: [S-1-5-21-3034823679-1296368078-3842842608-1002] => hxxp://127.0.0.1:8088/ppsva.pac
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
SearchScopes: HKLM -> {AD662815-21CD-4949-AF69-CCD0C990AFF8} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM-x32 -> {AD662815-21CD-4949-AF69-CCD0C990AFF8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{78E4A09C-8DCF-4543-BA52-ACBB2AEC8397}: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll [2015-06-27] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll No File
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-14] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-27] ()
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> D:\Games\Star Trek\Arc\Plugins\npArcPluginFF.dll [2015-02-12] (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: @my.com/Games -> C:\Users\Iceflex\AppData\Local\MyComGames\NPMyComDetector.dll [2015-07-23] (My.com, Inc)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Iceflex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3034823679-1296368078-3842842608-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-12-31] ()
FF HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-01-31]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-07-17] <==== ATTENTION
Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ATTENTION
CHR Profile: C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-04]
CHR Extension: (Google Drive) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-04]
CHR Extension: (YouTube) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-04]
CHR Extension: (Google Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-04]
CHR Extension: (Java API Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm [2015-03-01]
CHR Extension: (World of Warcraft Search) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijloicdileadhbjdlccmbaihgjjhkmjl [2015-07-15]
CHR Extension: (Skype Click to Call) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-12-22]
CHR Extension: (Kein Name) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\liffcepgimcmcbmfdaidoldnmmfiielp [2015-07-27]
CHR Extension: (Kein Name) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-07-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-31]
CHR Extension: (Gmail) - C:\Users\Iceflex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-04]
CHR HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
StartMenuInternet: Google Chrome - chrome.exe
==================== Services (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-09-27] (Adobe Systems) [Datei ist nicht signiert]
S3 ArcService; D:\Games\Star Trek\Arc\ArcService.exe [88400 2015-02-12] (Perfect World Entertainment Inc)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-04-03] () [Datei ist nicht signiert]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-01] (EasyAntiCheat Ltd)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; D:\Programme\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
S2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [368128 2015-04-16] (Razer Inc.) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
==================== Drivers (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-02] (DT Soft Ltd)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] ()
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-10-31] (Atheros)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 qca_shb; C:\Windows\system32\drivers\qca_shb.sys [99328 2012-10-31] (Qualcomm Atheros Communications Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
S3 SSMO3v2Filter; C:\Windows\System32\drivers\MO3v2Driver.sys [23040 2010-11-22] (Sagatek Co. Ltd.)
S4 NvStUSB; \SystemRoot\system32\drivers\nvstusb.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 22:09 - 2015-07-27 22:09 - 00000000 ____D C:\Users\Iceflex\Desktop\Neuer Ordner
2015-07-27 22:08 - 2015-07-27 22:08 - 00003122 _____ C:\Users\Iceflex\Desktop\JRT.txt
2015-07-27 22:00 - 2015-07-27 21:56 - 00002009 _____ C:\Users\Iceflex\Desktop\AdwCleaner[S2].txt
2015-07-27 21:48 - 2015-07-27 21:48 - 00020158 _____ C:\Users\Iceflex\Desktop\AdwCleaner[S1].txt
2015-07-27 21:47 - 2015-07-27 21:47 - 00000056 _____ C:\Users\Iceflex\Desktop\mbam.txt
2015-07-27 21:02 - 2015-07-27 20:57 - 02248704 _____ C:\Users\Iceflex\Desktop\AdwCleaner_4.208.exe
2015-07-27 21:02 - 2015-07-27 20:57 - 01798176 _____ (Malwarebytes Corporation) C:\Users\Iceflex\Desktop\JRT.exe
2015-07-27 21:02 - 2015-07-27 20:55 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Iceflex\Desktop\mbam-setup-2.1.6.1022.exe
2015-07-27 21:00 - 2015-07-27 21:58 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-27 20:59 - 2015-07-27 21:00 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-27 20:59 - 2015-07-27 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-07-27 20:59 - 2015-07-27 21:00 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-07-27 20:59 - 2015-07-27 20:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-27 20:59 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-27 20:59 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-27 20:59 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-27 19:28 - 2015-07-27 19:28 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Razer_Inc
2015-07-27 19:28 - 2015-07-27 19:28 - 00000000 ____D C:\ProgramData\Razer
2015-07-27 19:28 - 2015-07-27 19:28 - 00000000 ____D C:\Program Files (x86)\Razer
2015-07-27 17:49 - 2015-07-27 17:49 - 00747096 _____ C:\Windows\Minidump\072715-59685-01.dmp
2015-07-27 16:41 - 2015-07-27 16:42 - 00000000 ____D C:\ProgramData\OWinManProO
2015-07-27 16:37 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\e9619cdb-743f-41f7-a673-b60054434b89
2015-07-27 16:10 - 2015-07-27 16:17 - 00001286 _____ C:\Users\Iceflex\Desktop\Revo Uninstaller.lnk
2015-07-27 16:10 - 2015-07-27 16:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Iceflex\Desktop\revosetup95.exe
2015-07-27 16:10 - 2015-07-27 16:10 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-07-27 14:39 - 2015-07-27 14:39 - 00265139 _____ C:\Users\Iceflex\Desktop\Gmer.txt
2015-07-27 14:26 - 2015-07-27 22:09 - 00019391 _____ C:\Users\Iceflex\Desktop\FRST.txt
2015-07-27 14:25 - 2015-07-27 14:25 - 00000556 _____ C:\Users\Iceflex\Desktop\defogger_disable.log
2015-07-27 14:23 - 2015-07-27 14:19 - 02146816 _____ (Farbar) C:\Users\Iceflex\Desktop\FRST64.exe
2015-07-27 14:23 - 2015-07-27 14:19 - 00380416 _____ C:\Users\Iceflex\Desktop\Gmer-19357.exe
2015-07-27 14:23 - 2015-07-27 14:19 - 00050477 _____ C:\Users\Iceflex\Desktop\Defogger.exe
2015-07-27 12:32 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\8aa94385-b663-4bd1-bb89-290f01d44487
2015-07-27 12:29 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\f2cc58b0-020d-4a02-b4df-2629288f236e
2015-07-27 12:27 - 2015-07-27 12:27 - 00000000 _____ C:\dummy.htm
2015-07-27 12:25 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\b69720a3-2063-4347-a42e-9d927e0d7349
2015-07-27 12:23 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\e478756a-91bb-4dba-a000-e28b5a7b844e
2015-07-27 12:22 - 2015-07-27 22:02 - 00000000 ____D C:\Windows\System32\Tasks\FlipBoards
2015-07-27 12:22 - 2015-07-27 15:15 - 00000000 ___HD C:\Users\Iceflex\AppData\Roaming\FlipBoards
2015-07-27 12:21 - 2015-07-27 17:58 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Opera Software
2015-07-27 12:21 - 2015-07-27 17:58 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Opera Software
2015-07-27 12:21 - 2015-07-27 12:21 - 00000000 ____D C:\Program Files (x86)\baidu
2015-07-27 12:19 - 2015-07-27 16:17 - 00000000 ____D C:\ProgramData\1WinManPro1
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 _____ C:\Windows\prleth.sys
2015-07-27 12:19 - 2015-07-27 12:19 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-27 12:18 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\a9e7144b-cc20-4f13-bba2-cc1df55c4de0
2015-07-27 12:18 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\1d0afd65-a048-4448-a105-720a98169387
2015-07-27 12:18 - 2015-07-27 12:18 - 00003092 _____ C:\Windows\System32\Tasks\sab3009
2015-07-27 12:18 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-27 12:17 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\I - Cinema
2015-07-27 12:17 - 2015-07-27 21:23 - 00000000 ____D C:\Program Files (x86)\F1EB78A0-1437992262-11D5-BA88-50465D073624
2015-07-27 12:17 - 2015-07-27 17:49 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-27 12:17 - 2015-07-27 12:17 - 00000000 ____D C:\Program Files (x86)\SearchProtect2_IMonetizer
2015-07-27 12:16 - 2015-07-27 21:48 - 00000835 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 21:48 - 00000805 _____ C:\Users\Iceflex\Desktop\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 21:48 - 00000144 _____ C:\Users\Iceflex\Desktop\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 21:48 - 00000144 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 16:17 - 00001314 _____ C:\Users\Iceflex\AppData\Local\Chrome .lnk
2015-07-27 12:16 - 2015-07-27 16:17 - 00000967 _____ C:\Users\Iceflex\AppData\Local\Iexplore .lnk
2015-07-27 12:16 - 2015-07-27 16:17 - 00000300 _____ C:\Users\Iceflex\AppData\Local\Firefox .lnk
2015-07-27 12:15 - 2015-07-27 21:58 - 00000328 _____ C:\Windows\Tasks\DVIASFY1.job
2015-07-27 12:15 - 2015-07-27 12:15 - 00002850 _____ C:\Windows\System32\Tasks\DVIASFY1
2015-07-27 12:13 - 2015-07-27 12:13 - 01000153 _____ C:\Users\Iceflex\Downloads\Cracked Honorbuddy Auth Serve Downloader__3687_i1566519080_il54498.exe.zip
2015-07-27 11:41 - 2015-07-27 11:41 - 01183539 _____ C:\Users\Iceflex\Downloads\Fischit3.4.rar
2015-07-27 11:38 - 2015-07-27 11:38 - 00120616 _____ C:\Users\Iceflex\Downloads\WRobot.zip
2015-07-25 21:11 - 2015-07-27 16:17 - 00000660 _____ C:\Users\Public\Desktop\World of Warships.lnk
2015-07-25 21:11 - 2015-07-25 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-07-25 21:08 - 2015-07-25 21:08 - 06949352 _____ (Wargaming.net ) C:\Users\Iceflex\Downloads\WoWS_internet_install_eu.exe
2015-07-23 02:58 - 2015-07-23 02:58 - 00000122 _____ C:\Users\Iceflex\Desktop\Skyforge My.com.url
2015-07-23 02:58 - 2015-07-23 02:58 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com
2015-07-23 00:20 - 2015-07-27 21:59 - 00000000 ____D C:\Users\Iceflex\AppData\Local\MyComGames
2015-07-23 00:20 - 2015-07-23 00:20 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2015-07-23 00:18 - 2015-07-23 00:18 - 04541936 _____ C:\Users\Iceflex\Downloads\SkyforgeLoader_de.exe
2015-07-21 12:26 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 12:26 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 12:26 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 12:26 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 12:26 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 12:26 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-15 10:32 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:32 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:32 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:32 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:32 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:32 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:32 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:32 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:32 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:32 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:32 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:32 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:32 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:32 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:32 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:32 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:32 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:32 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:32 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:32 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:32 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:32 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:32 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:32 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:32 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:32 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:32 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:32 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:32 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:32 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:32 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:32 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:32 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:32 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:32 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:32 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:32 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:32 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:32 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:32 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:32 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:32 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:32 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:32 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 10:31 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 10:31 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 10:31 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 10:31 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 10:31 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 10:31 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:31 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:31 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:31 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:31 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:31 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:31 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:31 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:31 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:31 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:31 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:31 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:31 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:31 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:31 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:31 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:31 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:31 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:31 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:31 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-15 10:31 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 10:31 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:31 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:25 - 2015-07-15 10:25 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Iceflex\Downloads\flashplayer18_ha_install.exe
2015-07-15 10:21 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 10:21 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 10:21 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 10:21 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 10:21 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:21 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:21 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:21 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:21 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:21 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:21 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:21 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:21 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:21 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:21 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:21 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:21 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:21 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:21 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:21 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:21 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:21 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:21 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:21 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:21 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:21 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:21 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:21 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:21 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:21 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:21 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:21 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:21 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:21 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:21 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 10:21 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 10:21 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 10:21 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 10:10 - 2015-07-15 10:10 - 00931408 _____ (Google Inc.) C:\Users\Iceflex\Downloads\ChromeSetup.exe
2015-07-06 11:49 - 2015-07-06 11:49 - 07052760 _____ (Wargaming.net ) C:\Users\Iceflex\Downloads\WoWS_internet_install_na.exe
2015-07-03 09:13 - 2015-07-03 15:04 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\MediaPurge
2015-07-03 09:11 - 2015-07-27 16:17 - 00001953 _____ C:\Users\Iceflex\Desktop\Mediapurge.lnk
2015-07-03 09:11 - 2015-07-03 09:11 - 04044725 _____ C:\Users\Iceflex\Downloads\Mediapurge_installer_5.61a.exe
2015-07-03 09:11 - 2015-07-03 09:11 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediapurge
2015-07-03 09:11 - 2015-07-03 09:11 - 00000000 ____D C:\Program Files (x86)\Mediapurge
2015-07-03 09:08 - 2015-07-03 09:08 - 00015088 _____ C:\Users\Iceflex\Downloads\MMFR1572wh01_-_UL-d6e4eqnpu27.dlc
2015-07-01 19:15 - 2015-07-01 19:15 - 00000000 ____D C:\Users\Iceflex\AppData\Local\UWebKit151
2015-07-01 18:25 - 2015-07-02 21:02 - 00000000 ____D C:\Users\Iceflex\Downloads\Gameforge Live
2015-07-01 18:25 - 2015-07-01 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-07-01 18:25 - 2015-07-01 18:25 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Gameforge4d
2015-07-01 18:22 - 2015-07-01 18:23 - 20223080 _____ (Gameforge ) C:\Users\Iceflex\Downloads\OMD_GameforgeLiveSetup (1).exe
2015-07-01 18:22 - 2015-07-01 18:22 - 20223080 _____ (Gameforge ) C:\Users\Iceflex\Downloads\OMD_GameforgeLiveSetup.exe
2015-07-01 17:23 - 2015-07-01 17:22 - 00238376 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2015-06-27 18:40 - 2015-07-09 22:40 - 17582768 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-06-27 17:32 - 2015-06-17 11:10 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-06-27 17:32 - 2015-06-17 11:10 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00408392 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-06-27 17:32 - 2015-06-17 11:10 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 22:09 - 2015-01-25 03:11 - 00000000 ____D C:\FRST
2015-07-27 22:03 - 2014-02-02 02:01 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\IObit
2015-07-27 22:03 - 2014-02-02 02:01 - 00000000 ____D C:\ProgramData\IObit
2015-07-27 22:03 - 2014-02-02 02:01 - 00000000 ____D C:\Program Files (x86)\IObit
2015-07-27 22:02 - 2009-07-14 06:45 - 00032080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 22:02 - 2009-07-14 06:45 - 00032080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 22:01 - 2013-03-18 18:30 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:00 - 2014-01-31 08:47 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-27 22:00 - 2013-10-06 13:52 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Battle.net
2015-07-27 22:00 - 2012-12-23 16:05 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Skype
2015-07-27 21:59 - 2012-12-25 01:22 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Deployment
2015-07-27 21:58 - 2014-02-02 02:00 - 00110981 _____ C:\Windows\setupact.log
2015-07-27 21:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 21:56 - 2015-01-25 02:32 - 00000000 ____D C:\AdwCleaner
2015-07-27 21:56 - 2012-12-22 22:31 - 01906577 _____ C:\Windows\WindowsUpdate.log
2015-07-27 21:51 - 2013-11-26 09:45 - 00001333 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 21:50 - 2014-02-04 16:56 - 00035114 _____ C:\Windows\PFRO.log
2015-07-27 21:48 - 2015-03-31 00:46 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2015-07-27 21:48 - 2014-08-07 19:06 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-27 21:48 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-27 21:40 - 2013-11-24 20:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-27 21:23 - 2012-12-14 15:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-27 19:51 - 2009-07-14 04:34 - 00000505 _____ C:\Windows\win.ini
2015-07-27 18:04 - 2012-12-21 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-27 17:49 - 2015-01-23 15:57 - 00000000 ____D C:\Windows\Minidump
2015-07-27 17:49 - 2015-01-23 15:56 - 927399472 _____ C:\Windows\MEMORY.DMP
2015-07-27 16:17 - 2015-05-11 12:23 - 00002243 _____ C:\Users\UpdatusUser\Desktop\Knuddels.lnk
2015-07-27 16:17 - 2015-05-11 12:23 - 00002243 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Knuddels.lnk
2015-07-27 16:17 - 2013-10-09 00:48 - 00002266 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 16:17 - 2013-10-09 00:48 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Microsoft Security Essentials.lnk
2015-07-27 16:17 - 2013-10-09 00:48 - 00001433 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 16:17 - 2013-10-09 00:48 - 00001427 _____ C:\Users\UpdatusUser\Desktop\Internet Explorer.lnk
2015-07-27 16:17 - 2013-10-09 00:48 - 00001399 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 16:17 - 2013-08-21 12:14 - 00000781 _____ C:\Users\Iceflex\Desktop\!!!Musik!!!.lnk
2015-07-27 16:17 - 2013-08-05 12:47 - 00002266 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 16:17 - 2013-08-05 12:47 - 00001903 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Microsoft Security Essentials.lnk
2015-07-27 16:17 - 2013-08-05 12:47 - 00001433 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 16:17 - 2013-08-05 12:47 - 00001427 _____ C:\Users\Mcx1-ICEFLEX-PC\Desktop\Internet Explorer.lnk
2015-07-27 16:17 - 2013-08-05 12:47 - 00001399 _____ C:\Users\Mcx1-ICEFLEX-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 16:17 - 2013-01-15 21:23 - 00000726 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2015-07-27 16:17 - 2012-12-22 22:32 - 00002266 _____ C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001903 _____ C:\Users\Default\Desktop\Microsoft Security Essentials.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001903 _____ C:\Users\Default User\Desktop\Microsoft Security Essentials.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001433 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001433 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001427 _____ C:\Users\Default\Desktop\Internet Explorer.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001427 _____ C:\Users\Default User\Desktop\Internet Explorer.lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001399 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 16:17 - 2012-12-21 15:43 - 00001399 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-27 16:17 - 2012-12-14 15:45 - 00002266 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 16:17 - 2012-12-14 15:45 - 00002266 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-07-27 15:24 - 2012-12-23 16:14 - 00000000 ___RD C:\Users\Iceflex\Desktop\Programme
2015-07-27 14:31 - 2015-01-20 04:35 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-07-27 14:26 - 2010-11-21 08:50 - 00699868 _____ C:\Windows\system32\perfh007.dat
2015-07-27 14:26 - 2010-11-21 08:50 - 00149750 _____ C:\Windows\system32\perfc007.dat
2015-07-27 14:26 - 2009-07-14 07:13 - 01622228 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 14:25 - 2015-01-25 03:10 - 00000356 _____ C:\Users\Iceflex\defogger_reenable
2015-07-27 12:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-27 12:52 - 2009-07-14 06:45 - 00289952 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 12:51 - 2013-11-24 20:37 - 00000000 ____D C:\Users\Iceflex\AppData\Local\Unity
2015-07-27 12:33 - 2012-12-23 16:07 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\TS3Client
2015-07-27 12:26 - 2012-12-22 22:32 - 00065520 _____ C:\Users\Iceflex\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-27 12:24 - 2014-01-31 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-27 12:22 - 2014-12-16 11:43 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieBrowserModeList
2015-07-27 12:22 - 2014-06-14 13:39 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieUserList
2015-07-27 12:22 - 2014-06-14 13:39 - 00000000 __SHD C:\Users\Iceflex\AppData\Local\EmieSiteList
2015-07-25 21:11 - 2013-10-29 07:03 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-07-25 14:41 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-20 15:08 - 2015-03-30 12:25 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\vlc
2015-07-19 11:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-17 10:55 - 2012-12-23 16:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-17 10:55 - 2012-12-23 16:05 - 00000000 ____D C:\ProgramData\Skype
2015-07-16 22:30 - 2014-08-20 12:26 - 00000000 ____D C:\Program Files (x86)\OBS
2015-07-16 22:30 - 2013-07-16 16:09 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\OBS
2015-07-16 11:00 - 2014-12-11 04:25 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-16 11:00 - 2014-05-07 00:41 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-16 11:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-16 00:30 - 2013-08-09 00:00 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 20:26 - 2015-02-15 14:04 - 00000000 ____D C:\Users\Iceflex\AppData\Local\JDownloader 2.0
2015-07-12 22:10 - 2015-03-31 21:18 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\dvdcss
2015-07-11 21:13 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-11 16:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-09 10:54 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-06 15:35 - 2013-08-05 18:16 - 06637568 ___SH C:\Users\Iceflex\Desktop\Thumbs.db
2015-07-03 08:43 - 2012-01-13 16:22 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 21:02 - 2015-06-01 17:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-01 19:17 - 2014-09-22 18:49 - 00000000 ____D C:\Users\Iceflex\Documents\My Games
2015-07-01 18:30 - 2012-12-22 22:42 - 00000000 ___RD C:\Users\Iceflex\Desktop\Games
2015-07-01 18:29 - 2014-03-16 01:48 - 00512850 _____ C:\Windows\DirectX.log
2015-07-01 17:13 - 2012-12-23 18:44 - 00000000 ____D C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-06-29 21:48 - 2013-10-06 13:52 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-06-27 18:40 - 2015-03-03 23:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-27 18:40 - 2012-04-16 10:33 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-27 18:40 - 2012-01-13 15:34 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-27 17:38 - 2015-05-19 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-27 17:38 - 2012-12-21 15:18 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-27 17:33 - 2015-05-19 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2014-09-27 01:24 - 2014-11-11 01:24 - 0000135 _____ () C:\Users\Iceflex\AppData\Roaming\WB.CFG
2015-07-27 12:16 - 2015-07-27 16:17 - 0001314 _____ () C:\Users\Iceflex\AppData\Local\Chrome .lnk
2014-10-23 19:24 - 2014-10-23 19:24 - 0000010 _____ () C:\Users\Iceflex\AppData\Local\DSI.DAT
2015-07-27 12:16 - 2015-07-27 16:17 - 0000300 _____ () C:\Users\Iceflex\AppData\Local\Firefox .lnk
2015-07-27 12:16 - 2015-07-27 16:17 - 0000967 _____ () C:\Users\Iceflex\AppData\Local\Iexplore .lnk
2014-09-27 00:36 - 2014-09-27 00:36 - 0003898 _____ () C:\Users\Iceflex\AppData\Local\recently-used.xbel
2012-12-22 22:32 - 2012-04-16 10:41 - 0000017 _____ () C:\Users\Iceflex\AppData\Local\resmon.resmoncfg
2014-02-02 02:04 - 2014-02-02 02:04 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\Iceflex\AppData\Local\Temp\69a7d2359d534e3423ed674187eded12.dll
C:\Users\Iceflex\AppData\Local\Temp\AutoRun.exe
C:\Users\Iceflex\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Iceflex\AppData\Local\Temp\avgnt.exe
C:\Users\Iceflex\AppData\Local\Temp\BRSVC_1034661_hlp.exe
C:\Users\Iceflex\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Iceflex\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Iceflex\AppData\Local\Temp\EAInstall.dll
C:\Users\Iceflex\AppData\Local\Temp\eauninstall.exe
C:\Users\Iceflex\AppData\Local\Temp\fsd5A04.exe
C:\Users\Iceflex\AppData\Local\Temp\fsd68FF.exe
C:\Users\Iceflex\AppData\Local\Temp\fsd6EFA.exe
C:\Users\Iceflex\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\Iceflex\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\Iceflex\AppData\Local\Temp\i4jdel0.exe
C:\Users\Iceflex\AppData\Local\Temp\IQIYIsetup_l_spl004@kb005.exe
C:\Users\Iceflex\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Iceflex\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Iceflex\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Iceflex\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\Iceflex\AppData\Local\Temp\nvStInst.exe
C:\Users\Iceflex\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\Iceflex\AppData\Local\Temp\proxy_vole654269872010476805.dll
C:\Users\Iceflex\AppData\Local\Temp\qqpcmgr_v10.10.16434.218_72830_Silence.exe
C:\Users\Iceflex\AppData\Local\Temp\Quarantine.exe
C:\Users\Iceflex\AppData\Local\Temp\sdf2DF5.exe
C:\Users\Iceflex\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Iceflex\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Iceflex\AppData\Local\Temp\setup3.exe
C:\Users\Iceflex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Iceflex\AppData\Local\Temp\sonarinst.exe
C:\Users\Iceflex\AppData\Local\Temp\sqlite-unknown-c0c87852-2b31-4011-8b9d-6023ea97ff65-sqlitejdbc.dll
C:\Users\Iceflex\AppData\Local\Temp\sqlite3.dll
C:\Users\Iceflex\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe
C:\Users\Iceflex\AppData\Local\Temp\uninst1.exe
C:\Users\Iceflex\AppData\Local\Temp\Uninstall.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\Iceflex\AppData\Local\Temp\Wildstar.exe
C:\Users\Iceflex\AppData\Local\Temp\_is6392.exe
C:\Users\Iceflex\AppData\Local\Temp\_isC2F1.exe
C:\Users\Iceflex\AppData\Local\Temp\{7B47E483-0A4E-4FF7-996F-EC17E5813A75}.exe
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert
testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION!
LastRegBack: 2015-07-23 01:38
==================== Ende von log ============================
Aber ich muss schon sagen er läuft nun schon besser ;D kann endlich wieder über den PC hier posten =D musste sonst alles per USB auf mein PC bringen und dort auch Downloaden
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 21:20
| #12 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Programme installieren sich selbständigZitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
27.07.2015, 21:25
| #13 |
| | Windows 7: Programme installieren sich selbständig hab ich schon ;D so doof bin ich nun auch nicht hehe xD Aber dort finde ich nur eins was 0 Ergebnisse liefert Ich poste es einfach mal Aber sonst ist da nur noch in der liste das Schutz-Log Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 27.07.2015 Suchlaufzeit: 21:01 Protokolldatei: mbam2.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.07.27.05 Rootkit-Datenbank: v2015.07.22.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Iceflex Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 485368 Abgelaufene Zeit: 18 Min., 20 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end)
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
27.07.2015, 21:26
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Programme installieren sich selbständig Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Untersuchen klicken.
__________________ Logfiles bitte immer in CODE-Tags posten Geändert von cosinus (27.07.2015 um 21:36 Uhr) |
|
27.07.2015, 21:41
| #15 |
| | Windows 7: Programme installieren sich selbständig Oh ja gar nicht bemerkt das es nicht dabei war. Malwarebytes hat mich nun so verwirrt hehe Hier noch die Addition [CODE]Zusätzliches FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:26-07-2015
durchgeführt von Iceflex an 2015-07-27 22:27:32
Gestartet von C:\Users\Iceflex\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3034823679-1296368078-3842842608-500 - Administrator - Disabled)
Gast (S-1-5-21-3034823679-1296368078-3842842608-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3034823679-1296368078-3842842608-1008 - Limited - Enabled)
Iceflex (S-1-5-21-3034823679-1296368078-3842842608-1002 - Administrator - Enabled) => C:\Users\Iceflex
Mcx1-ICEFLEX-PC (S-1-5-21-3034823679-1296368078-3842842608-1006 - Limited - Enabled) => C:\Users\Mcx1-ICEFLEX-PC
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Alien Isolation Ripley Edition MULTi2 1.0 (HKLM-x32\...\Alien Isolation Ripley Edition MULTi2 1.0) (Version: - )
Alien Isolation Ripley Edition Update 1 MULTi2 1.0 (HKLM-x32\...\Alien Isolation Ripley Edition Update 1 MULTi2 1.0) (Version: - )
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Assassin's Creed Freedom Cry (HKLM-x32\...\Steam App 277590) (Version: - Ubisoft Montreal)
Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version: - Ubisoft Montreal)
Assassins Creed IV Black Flag Digital Deluxe Edition MULTI-5 1.01 (HKLM-x32\...\Assassins Creed IV Black Flag Digital Deluxe Edition MULTI-5 1.01) (Version: - )
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Aufstieg des Hexenkönigs™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - )
Axxa's World of Warcraft Logo Creator v1.2 (HKLM-x32\...\Axxa's World of Warcraft Logo Creator v1.2) (Version: - )
Batman: Arkham Origins (HKLM-x32\...\Batman: Arkham Origins_is1) (Version: - Warner Bros. Interactive Entertainment)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.25648 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BioShock Infinite Burial at Sea Episode One DLC Plus Update v1.1.23.63123 1.0 (HKLM-x32\...\BioShock Infinite Burial at Sea Episode One DLC Plus Update v1.1.23.63123 1.0) (Version: - )
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
Curse Client (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 5.2.0.0348 - DT Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version: - Stunlock Studios)
Dead Rising 3 Apocalypse Edition MULTi2 1.0 (HKLM-x32\...\Dead Rising 3 Apocalypse Edition MULTi2 1.0) (Version: - )
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Defiance (HKLM-x32\...\Steam App 224600) (Version: - Trion Worlds, Inc.)
DefianceRuntimes (HKLM-x32\...\{79B1FF35-9EA8-48ED-98D6-19ABE004BE89}) (Version: 1.0.2 - Trion Worlds, Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 10 MULTi2 1.5.139.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 10 MULTi2 1.5.139.1020) (Version: - )
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.5.149.1020 - Electronic Arts Inc.)
Dragon Age Inquisition Digital Deluxe Edition Incl. Update 2 & Hotfix MULTi2 1.0 (HKLM-x32\...\Dragon Age Inquisition Digital Deluxe Edition Incl. Update 2 & Hotfix MULTi2 1.0) (Version: - )
Dragon Ball Xenoverse (HKLM-x32\...\{XXXXXXXX-XXXX-XXXX-XXXX-BLACKBOX0036}) (Version: 6.0 - Black Box)
Dungeons 2 (HKLM-x32\...\Dungeons 2_is1) (Version: - )
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.6.0.0 - Electronic Arts)
EF Duplicate MP3 Finder (HKLM\...\EF Duplicate MP3 Finder) (Version: - EFSoftware)
EPSON SX235 Series Printer Uninstall (HKLM\...\EPSON SX235 Series) (Version: - SEIKO EPSON Corporation)
EPU-4 Engine (HKLM-x32\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.03.03 - )
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
flipboards (HKLM-x32\...\flipboards) (Version: 3.6.9 - flipboards)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HOTSLogsUploader (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\fe710033985bcaab) (Version: 1.0.0.9 - HOTSLogsUploader)
Impulse (HKLM-x32\...\Impulse) (Version: - Stardock)
Impulse (x32 Version: 1.0 - Stardock Corporation) Hidden
Infinite Crisis™ (HKLM-x32\...\Steam App 345520) (Version: - Turbine, Inc.)
InfraRecorder (HKLM-x32\...\InfraRecorder) (Version: - Christian Kindahl)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
KCService.de Fernwartung (HKLM-x32\...\{25D56EF8-ED54-41F2-B3AB-C62F76A54E1E}) (Version: 1.0.0 - KCS Service GmbH)
Knuddels Desktop App (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Knuddels Desktop App ) (Version: "2014.12.13.0" - "Knuddels Desktop App")
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Logitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7248) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Lucius II (HKLM-x32\...\Lucius II_is1) (Version: - )
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Marvel Heroes Game (HKLM-x32\...\{ca6069b5-fc6b-4ce8-a03e-2304143706b7}_is1) (Version: 1.0 - Gazillion Entertainment)
Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.61 - Peter Lorenz)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Murdered Soul Suspect Multi2 1.0 (HKLM-x32\...\Murdered Soul Suspect Multi2 1.0) (Version: - )
My.com Game Center (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\MyComGames) (Version: 3.139 - My.com B.V.)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.30 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}) (Version: 3.41.9593 - Apache Software Foundation)
Orcs Must Die! Unchained (HKLM-x32\...\{8EBA33AF-48E0-4207-A4EE-96029415AD76}_is1) (Version: - Gameforge 4D GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version: - Piranha Bytes)
Ryse Son of Rome MULTi2 1.0 (HKLM-x32\...\Ryse Son of Rome MULTi2 1.0) (Version: - )
Ryse Son of Rome Update 2 [Hotfix] MULTi2 1.0 (HKLM-x32\...\Ryse Son of Rome Update 2 [Hotfix] MULTi2 1.0) (Version: - )
Saints Row Gat Out of Hell MULTi7 1.0 (HKLM-x32\...\Saints Row Gat Out of Hell MULTi7 1.0) (Version: - )
Saints Row Gat Out of Hell Update 1 MULTi7 1.0 (HKLM-x32\...\Saints Row Gat Out of Hell Update 1 MULTi7 1.0) (Version: - )
Saints Row IV Commander in Chief Edition 1.0 (HKLM-x32\...\Saints Row IV Commander in Chief Edition 1.0) (Version: - )
Sherlock Holmes Crimes and Punishments Version 1.0 (HKLM-x32\...\{DA951913-30E5-4182-8731-84C2163310B8}_is1) (Version: 1.0 - Focus Home Interactive)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
skyforge_mycom (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\skyforge_mycom) (Version: 1.28 - My.com B.V.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Sniper Elite 3(CREATED BY XEONKING©) (HKLM-x32\...\Sniper Elite 3_is1) (Version: 1.10 - )
South Park Der Stab der Wahrheit Incl. Ultimate Fellowship Pack MULTI-2 1.00 (HKLM-x32\...\South Park Der Stab der Wahrheit Incl. Ultimate Fellowship Pack MULTI-2 1.00) (Version: - )
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Startfenster (HKLM\...\Startfenster) (Version: - Startfenster)
State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
The Walking Dead - Survival Instinct version 5.1 (HKLM-x32\...\{5FF2B4BB-9D81-4312-B574-DE26A738C6C6}_is1) (Version: 5.1 - Black_Box)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.10.1 - Electronic Arts)
Tom Clancy's Splinter Cell Blacklist The 5th Freedom Edition 1.01 (HKLM-x32\...\Tom Clancy's Splinter Cell Blacklist The 5th Freedom Edition 1.01) (Version: - )
Tomb Raider Deutsch-Patch Plus Crack 1.0 (HKLM-x32\...\Tomb Raider Deutsch-Patch Plus Crack 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Tomb Raider Survival Edition DLC-Pack 1.0 (HKLM-x32\...\Tomb Raider Survival Edition DLC-Pack 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Tomb Raider Update v.1.01.748.0 Deutsche Version 1.0 (HKLM-x32\...\Tomb Raider Update v.1.01.748.0 Deutsche Version 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
Total War Attila German Edition 1.0 (HKLM-x32\...\Total War Attila German Edition 1.0) (Version: - )
Tukui Client (HKLM-x32\...\{BAD6EBBD-A6A9-41C9-898A-8C868A552E4C}) (Version: 2.4.6 - Tukui)
Unity Web Player (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft Logs Uploader (HKLM-x32\...\com.warcraft.logs) (Version: 1.4.3 - UNKNOWN)
Warcraft Logs Uploader (x32 Version: 1.4.3 - UNKNOWN) Hidden
Watch Dogs Digital Deluxe Edition Multi2 1.0 (HKLM-x32\...\Watch Dogs Digital Deluxe Edition Multi2 1.0) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wolfenstein The New Order German Edition [Full Uncut] Texturen FIX 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] Texturen FIX 1.0.0.1) (Version: - )
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
World of Warcraft(R): Cataclysm(TM) MMO Gaming Mouse (HKLM-x32\...\{B832F6BF-B53E-4A51-BD95-A1D5D956207C}) (Version: 1.01.0015 - SteelSeries)
World of Warships (HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
Zombie Army Trilogy MULTi2 1.0 (HKLM-x32\...\Zombie Army Trilogy MULTi2 1.0) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002_Classes\CLSID\{ba7fca4f-8a4f-420e-badc-91a3f19f12d6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3034823679-1296368078-3842842608-1002_Classes\CLSID\{bf6974fd-1f53-4d09-ac8b-c74dd11f1209}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
27-07-2015 18:04:42 Removed VIRTUIS Advanced Gaming Keyboard
27-07-2015 22:01:41 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0696C6B1-94D8-422D-A58A-E7B68033B326} - \{C93D6588-8F6F-4E38-97EE-E25414FD0021} No Task File <==== ATTENTION
Task: {12B4D98D-F8DB-42C0-9CEC-A0BEC3131C00} - \SMW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041 No Task File <==== ATTENTION
Task: {31379221-40AB-459B-8CFD-525552D11734} - \FGRun No Task File <==== ATTENTION
Task: {38404E0A-4B56-4D88-B4DF-6FA23A068784} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2012-01-03] (ASUSTek Computer Inc.)
Task: {3C236E99-3321-4933-9B75-DA5CC3F5BC61} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-27] (Adobe Systems Incorporated)
Task: {41B9B044-6544-496E-B4EC-6CB20B6F2376} - \SidebarExecute No Task File <==== ATTENTION
Task: {8257332F-A699-4A7D-828C-EF92F789F1CF} - \FlipBoards\fbindexer No Task File <==== ATTENTION
Task: {87F36859-B2AC-4ECA-B996-7A92F8CFCC22} - \{F0C12788-8288-429B-918B-53C1361CB8AF} No Task File <==== ATTENTION
Task: {88C87CD2-4624-47D7-827F-BDE7F44722F6} - \SPBIW_UpdateTask_Time_363138373033322d7837235a576c4a3241345041 No Task File <==== ATTENTION
Task: {892C3009-748A-4A13-AB8F-1285A011751D} - \{2A180A9D-F772-4034-B343-D18D63AC2F47} No Task File <==== ATTENTION
Task: {89D6B5EB-E4D5-42C2-A2A6-FDCEBDD472B9} - \{45B0CE09-F680-41A9-9F04-71071C857770} No Task File <==== ATTENTION
Task: {8D7276FF-79BD-42B2-97B8-2B668CDF0CEF} - \Java Update Scheduler No Task File <==== ATTENTION
Task: {9CAE2286-E820-426B-80C2-4AE6A14B0DD3} - \Adobe Acrobat Update Task No Task File <==== ATTENTION
Task: {A1238BEB-4285-4336-A7D0-64998A60855F} - \CreateChoiceProcessTask No Task File <==== ATTENTION
Task: {B5E2149D-07EF-438C-9AE1-F52FCBC2D54C} - \GoogleUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {B6D66B9E-DE01-416C-A1F2-6B38D540EFB6} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-ICEFLEX-PC => C:\Windows\ehome\McxTask.exe [2009-07-14] (Microsoft Corporation)
Task: {BD0DF92B-4C86-4BD1-B11C-701A451D690B} - \{F7913C0A-36B6-4D42-8489-1E6063136273} No Task File <==== ATTENTION
Task: {C45DAF3A-E8AF-4E12-9F5C-D716DD82D6EA} - \{2CAE1A63-F1DD-4FD8-B78E-CC7C2C325E0D} No Task File <==== ATTENTION
Task: {C7B96F50-D1D6-469C-948A-DE266B8E6919} - System32\Tasks\DVIASFY1 => C:\ProgramData\NavRight\NavRight.exe <==== ATTENTION
Task: {C7DA81E0-2F97-4B99-88FE-A679148A3834} - \Adobe-Online-Aktualisierungsprogramm No Task File <==== ATTENTION
Task: {D6A256E3-ADCA-4D4B-B546-2745D543DA30} - \FlipBoards\fbindexer_f No Task File <==== ATTENTION
Task: {DD3B713E-9535-4596-B7F0-29C5232C7F32} - System32\Tasks\sab3009 => C:\PROGRA~2\FASTSE~1\sab3009.exe
Task: {DDC1BB81-542E-4F7D-960B-35D64BE991E4} - \{CB1FBC56-A626-4BCD-BA00-E7528AE0DCAD} No Task File <==== ATTENTION
Task: {E340C381-B885-4246-B8F1-C85E4E707127} - \{5735B825-542D-4206-ABBB-3C8CAA900134} No Task File <==== ATTENTION
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DVIASFY1.job => C:\ProgramData\NavRight\NavRight.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-05-19 15:37 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-19 15:39 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer trusted/restricted ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3034823679-1296368078-3842842608-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Iceflex\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^Users^Iceflex^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: Download Protect => C:\ProgramData\dlprotect.exe
MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: Steam => "D:\Programme\Steam\steam.exe" -silent
MSCONFIG\startupreg: WinampAgent => D:\Programme\Winamp\winampa.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{7C218909-18E2-49F2-ADC0-2C804BB63484}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{960E5132-1492-4212-8F81-258C2654F279}] => (Allow) LPort=2869
FirewallRules: [{159E74F4-DF84-4A43-86B3-A7B84341C0D2}] => (Allow) LPort=1900
FirewallRules: [{CC172E4D-8EB4-43F1-8836-65C8A5EDA968}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{E8B46B6D-52BE-42D5-8545-80E5E813094F}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [UDP Query User{CC4B8449-0320-4E65-82C6-0EB445763300}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [{D72459EC-9045-47DF-9DE0-A14683CCB375}] => (Allow) C:\Users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
FirewallRules: [{FF348004-0C26-44D2-B0DD-68BEBA429361}] => (Allow) C:\Users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
FirewallRules: [{68DE0439-FE1F-4CD1-AE5F-836B06517E6D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6724F604-8462-44B7-8C65-A23B8CC1DBA1}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [UDP Query User{8008F6FD-99C4-4AF5-96AF-723C949E85AA}C:\program files (x86)\logitech\vid hd\vid.exe] => (Block) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [{392DE5B8-9C41-48BE-86C5-2BDDFECADA73}] => (Allow) D:\Programme\Steam\Steam.exe
FirewallRules: [{2C8A4DCE-E6B4-4EA7-A0C5-AA42F66BCF3A}] => (Allow) D:\Programme\Steam\Steam.exe
FirewallRules: [{2A14DA1A-9C00-4D5C-8DBB-B608DFAD22CE}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{C2E21963-44E4-43B7-9797-3772B969BF67}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{AA426ED4-DC54-4EDD-946B-7B9B4C666074}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{4E62C430-B4DB-42A8-AA7F-7CC13D802905}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{EE7EC95E-47DA-4C58-B6B7-8E505672FBA2}] => (Allow) D:\Games\Diablo III\Diablo III.exe
FirewallRules: [{6FC14047-5CD0-45BC-AAFA-6B82FDB8DBBE}] => (Allow) D:\Games\Diablo III\Diablo III.exe
FirewallRules: [{30EDBE85-69AE-4BF2-A8A3-B32138A5A8F5}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{5BF5CDDF-B83A-4A5B-AB4E-4CFA781F72B5}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{CFA05280-E68F-4B2F-AC29-8CC9624204D3}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{3C9CC8A3-99BD-43F7-8391-B9D0737A42AC}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{AA093355-5BEA-4DEE-8791-1AFA5C1A2504}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{B050AEE5-1D2A-44F7-9F20-12B4C39345CC}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{DFA0477A-0B72-4D4D-8170-507638005E84}D:\games\diablo iii\diablo iii.exe] => (Allow) D:\games\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{B35B4744-0E3E-4C0C-854C-F80E32A9007C}D:\games\diablo iii\diablo iii.exe] => (Allow) D:\games\diablo iii\diablo iii.exe
FirewallRules: [{B27BA91A-E00D-4333-B26B-01D69FFD52F0}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{2DF64A25-C51A-43F4-87A5-E63CD6EB4950}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{83CD83B8-00CB-4675-97DB-E322B299F9BB}D:\programme\steam\steam.exe] => (Allow) D:\programme\steam\steam.exe
FirewallRules: [UDP Query User{2D39DCB8-26E4-4844-AE89-1D6D7B0EE337}D:\programme\steam\steam.exe] => (Allow) D:\programme\steam\steam.exe
FirewallRules: [{9BC8F855-DCFA-4953-A0E1-4614F39CC9A9}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{60F46C26-9AF3-4A0B-B572-694444BEDE63}] => (Allow) D:\Programme\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{02B73F4F-CBAE-48FB-AF2C-48AA16BB537A}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{5DF7318A-BD82-43EE-A25A-D6DA1FFA49FF}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{0169CD3F-E859-4611-B068-58D5258C6954}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{426F0DF7-AC64-4008-B547-BC0E2AD23B4D}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{52EC9BB7-7E81-4DCF-9BCC-74C1AAFE4C24}D:\games\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\games\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{FAD581D1-5C9A-42A5-8BDF-DF329E7C3872}D:\games\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\games\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{7DCA70A1-0745-474E-A23B-4A0BC02FE1D5}] => (Allow) D:\Programme\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
FirewallRules: [{F875F35C-94D2-4A99-B514-B55EA5F16144}] => (Allow) D:\Programme\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
FirewallRules: [TCP Query User{C8D9323D-4D7A-485A-88FB-B231972D0A3A}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{42A2F3F1-DD86-43D7-80E2-D1BE979FA2CA}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{9431B42A-AF79-4112-B325-2A227C336C49}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{0E65F8C4-E952-4600-928A-41DB5438BF2B}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{32EF2401-97CB-4083-B9E8-30E43DF7C3A7}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{784DD462-7F35-498D-BABF-9E403EEB4F57}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{47D61E3E-A5EF-40DF-B46F-483F23DB9FD7}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E31402AC-2724-4DD0-AD11-1228BDB304FE}] => (Allow) D:\Programme\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [TCP Query User{1C545EED-0589-44F6-992C-9B07E654476B}C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe
FirewallRules: [UDP Query User{76B31078-475A-485C-B14A-ACAC45DD9854}C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes\unrealengine3\binaries\win32\marvelgame.exe
FirewallRules: [{3774E288-0BA8-4D62-AF09-28B8747B16B7}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{2DB7149C-710D-4FCF-BF0F-B404FDDEDD30}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{80E6D891-6199-48C2-91C2-4F60C10B30DE}D:\games\tera\tera-launcher.exe] => (Allow) D:\games\tera\tera-launcher.exe
FirewallRules: [UDP Query User{2687D0D3-7614-4DB0-B0AD-5DE61B597E58}D:\games\tera\tera-launcher.exe] => (Allow) D:\games\tera\tera-launcher.exe
FirewallRules: [TCP Query User{AECB1E48-59FA-4EC1-A96E-AFE74CCD80E8}D:\games\company of heroes 2\reliccoh2.exe] => (Allow) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [UDP Query User{AF18EB8F-8106-41EB-A60A-0207065D2CC1}D:\games\company of heroes 2\reliccoh2.exe] => (Allow) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [{B19616A9-AEB4-4C7A-BA26-B9858B6EB741}] => (Block) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [{522F01B9-DB55-447E-AD56-D49231E30B9A}] => (Block) D:\games\company of heroes 2\reliccoh2.exe
FirewallRules: [TCP Query User{AE5FED95-0D82-4B20-845E-9FBF35AB6EDC}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{A66694A0-F5F5-44B8-BD8E-5C0D6119F3DD}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [{89CD6682-2A5E-4C3F-8179-83E1493D9400}] => (Block) D:\games\guild wars 2\gw2.exe
FirewallRules: [{59DC93EB-B686-4594-B55B-756976944FA7}] => (Block) D:\games\guild wars 2\gw2.exe
FirewallRules: [{0B7E5487-DD4E-4415-9361-3EB64B078CC4}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{55A12D1E-CC9A-4BF1-8352-14F29ECCB2A0}] => (Allow) D:\Programme\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{13CAE634-F4A5-4020-B202-8F6EAE81D708}D:\games\saints row iv commander in chief edition\saintsrowiv.exe] => (Allow) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [UDP Query User{0E77B274-4131-4D06-9623-B36597F48B4D}D:\games\saints row iv commander in chief edition\saintsrowiv.exe] => (Allow) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [{6FB7137A-E556-4550-844D-EA879A94DFAA}] => (Block) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [{617CBE17-472D-47D7-946A-01181790F84D}] => (Block) D:\games\saints row iv commander in chief edition\saintsrowiv.exe
FirewallRules: [TCP Query User{75FDD915-56BF-4412-9BDE-D06A05813A14}D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe] => (Block) D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe
FirewallRules: [UDP Query User{9ACF20E7-DF0E-4009-AAFB-CDB7B0A830EB}D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe] => (Block) D:\games\tom clancy's splinter cell blacklist the 5th freedom edition\src\system\blacklist_game.exe
FirewallRules: [TCP Query User{BE920BBC-7230-42BB-9F2C-21B21A8D0881}D:\games\total war rome ii\rome2.exe] => (Allow) D:\games\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{571B4299-FA24-4D13-95EB-44BB73A8E607}D:\games\total war rome ii\rome2.exe] => (Allow) D:\games\total war rome ii\rome2.exe
FirewallRules: [{11773223-1891-460E-977E-F9445950DC6C}] => (Block) D:\games\total war rome ii\rome2.exe
FirewallRules: [{13C6714A-12A2-4148-B15F-47BB60491F2C}] => (Block) D:\games\total war rome ii\rome2.exe
FirewallRules: [{80C98A36-18D7-4987-96F8-1BB55D9B76FA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FA5319AD-5F75-484B-B4C0-385B043DEAD3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FEC5270B-5B1D-44AF-84FD-672201FEED5B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{988DBBC0-B0C8-484D-89F2-267C6D375805}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0A3CB501-C7BB-4D6E-8121-D01A7C85A82E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{B7DBEFA3-88A5-4F1A-8A29-84DF990769E4}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{1EE1A39A-D7B9-472B-A074-A8B6A4855E35}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{A73ED74D-D1DC-4D7F-9DD5-AEB8FA54EE25}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{7F65B65C-AF98-4B8F-A9CE-7DEDD77E191F}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{E10FB931-CAC3-4283-9D64-600142D6D15D}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{D9CED0A8-BE2C-4188-8FF8-166E3EC1AF00}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{A586D47A-86EF-4066-A5C9-FBE9E3114AB1}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [TCP Query User{80784E9E-4AAC-4D2F-BE03-09C3B4F2D667}C:\games\panzar\start.exe] => (Allow) C:\games\panzar\start.exe
FirewallRules: [UDP Query User{13AE704F-862D-48C7-9AF4-8ED9BAF5AD21}C:\games\panzar\start.exe] => (Allow) C:\games\panzar\start.exe
FirewallRules: [{54F091D8-C136-4721-9F20-F2A3B77CA93D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D61774DE-FEA3-4A78-A6A6-73296A7ABAEF}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{DCDCCB34-C3BE-46F0-8DF5-7B5147F4D6DB}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{80F2632E-3279-4010-9892-9E2163FB6292}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{CC251C0D-D0C8-4295-BE34-8901851F090C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{35E9F7C3-23FF-4D35-A5DB-4191E860AE35}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{3C5EB4EC-9F6D-4200-B2A5-49EDB5660E5B}D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [UDP Query User{30778392-A99F-4C76-9908-01616DCEDC22}D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) D:\games\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [{BFFFF2EF-6201-40C7-86A2-9163C8814E2E}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{BB7D6DDA-4211-42F3-922D-EDB8AE9BC1C6}] => (Allow) D:\Programme\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
FirewallRules: [{0034B05E-C07D-4043-8A2E-26066844199F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{87614611-96A1-40C5-B0B5-898F1A9B36A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{BA5E5374-A117-4A3E-82E3-4110129B9932}] => (Allow) D:\Programme\Ventrilo\Ventrilo.exe
FirewallRules: [{833FDE5B-2265-4F21-95F4-DA3A9ECA9FCB}] => (Allow) D:\Programme\Ventrilo\Ventrilo.exe
FirewallRules: [{4D220CBA-5C4E-4CFD-B20B-2422BC1152F9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8AE03B2C-E082-4A17-BA9B-9D95419C5DD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8D86B431-2954-487E-8BF0-4BC33D5FD92F}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{F69517C8-DD15-49A1-9531-406F2DB94AA6}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{96BB6E92-7B6A-4B57-B9FB-A2737DAD8AF5}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{584EF1B6-A5EA-41DD-A43D-1C3661181430}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{E46E6F58-23C2-4DAA-8FD8-1A1FF5747AF4}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{BED62674-8CD1-40E1-82CB-649E76EC73A4}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{9C843AC4-8E41-48A0-9A2F-9335E5FE9665}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{FECF723B-3CC9-4B44-8BB6-EA7310890163}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{C6307317-02CA-4051-85BB-C8CCEAAC3245}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{5AD7D23B-DFCE-43B4-8AAC-C81F3FBC20DC}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{E9DD2E90-E24C-4C27-BF48-2FF2B7EDA179}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{1B66293B-A491-418F-A21B-21CB3CFE1E1C}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{0FCC5BE6-33A1-40EA-8B2E-4A91DC6E000B}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{4277356F-86C8-4AB9-BD68-78974D08C975}] => (Allow) D:\Programme\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{25B40058-962C-454E-9E9F-D3D39338962E}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{C1D8FE7B-C679-4A8D-A4FD-C6A8D9824762}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{E0A0D535-2EF6-43E1-A679-26058FA83D5C}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{89A74087-75F2-4099-800F-4C811D99BFE9}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{72978E01-3407-4C04-B7F0-C20FAB962918}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{452B5339-7A5C-4981-898B-A839421F2E3F}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{BB378F02-D4FC-41FA-8EE7-45EA62549836}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{673A803E-8DAE-4D5B-B5E1-4258888F73E0}] => (Allow) D:\Programme\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8F941700-24D2-4C2F-849C-C8285559BB07}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{75CFA6B4-2909-43D8-BCCD-11FB700F9A6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{AB43AA4D-B007-4DF2-836E-AB5A05EFF5B7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{D10D2361-DC22-4C23-ABFF-A60089F51E51}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{CD5776FD-275E-45E3-98EA-582518AAD042}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{7209E370-D2CC-4282-B569-442C38BD6FCF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{023C5A71-7D3F-484E-8C4A-AE77571E309C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{92CA5F3C-1719-41E1-92D4-1A3ACB2ECFD5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{B8FDB32C-1C76-46D0-9ADA-47BE8FCFE55C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{63CA3D41-53C8-4ED3-9AD2-40E7EF32800B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{4B2706C7-2970-43C4-B9DC-4DC8036113A9}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed Freedom Cry\ACFC.exe
FirewallRules: [{5FB3646B-0F09-4B86-94F7-5F28DC8246DF}] => (Allow) D:\Programme\Steam\SteamApps\common\Assassin's Creed Freedom Cry\ACFC.exe
FirewallRules: [{E35D0704-01B1-427A-8632-4519B3C59F1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{4C40C279-4062-418B-9419-87F407FC4DD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [TCP Query User{E9069E25-7B4C-4CC6-84B7-ABB7AE00CF32}D:\games\infinitecrisis\infinitecrisis.exe] => (Block) D:\games\infinitecrisis\infinitecrisis.exe
FirewallRules: [UDP Query User{B6279582-C3B3-46C6-B64E-3DCD5E92019E}D:\games\infinitecrisis\infinitecrisis.exe] => (Block) D:\games\infinitecrisis\infinitecrisis.exe
FirewallRules: [{4934AE69-B543-4C2C-AD8F-E0A74D7C7709}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{A096D441-E25A-4BB2-8DAF-2B5AC90C5EFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{13C8F092-4DFA-4E76-AC89-41368CD9F735}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{0A78E167-C4C2-44CD-ABD9-1B196622C870}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{0752CC65-67AD-4E4E-A954-7FFBAE6CA3FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{F977805B-A674-453D-8A35-B1AF77648AA3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{9FE77B6A-628F-4584-B47E-CD22D7079358}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{4EBAF144-A0F9-43CC-84DD-C05600D7673F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [TCP Query User{89807CC7-0AA0-487B-B9E9-5EED3EB2EE9C}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{EE69DA34-E07F-462B-9C1F-1CA95C084DCE}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{28282522-3852-4239-982A-84B594BA05AE}C:\program files (x86)\world of warcraft beta\wowb-64.exe] => (Allow) C:\program files (x86)\world of warcraft beta\wowb-64.exe
FirewallRules: [UDP Query User{5E46FA5D-1A0A-443C-8562-DBF723473FD4}C:\program files (x86)\world of warcraft beta\wowb-64.exe] => (Allow) C:\program files (x86)\world of warcraft beta\wowb-64.exe
FirewallRules: [TCP Query User{FE24D42F-6588-4879-9B2E-05150CF96C7C}D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe] => (Allow) D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe
FirewallRules: [UDP Query User{30A1988F-5F0F-4E3C-9DA9-7B365A68A318}D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe] => (Allow) D:\games\murdered soul suspect\murdered soul suspect\binaries\win64\murdered.exe
FirewallRules: [TCP Query User{A27DEAC5-5A63-459B-A29E-B58DA6C2A23E}D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe] => (Block) D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{D7B9DFDC-6CE0-4B00-9204-7639E7ACBC9C}D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe] => (Block) D:\games\wolfenstein the new order\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [TCP Query User{6B4CB130-E17C-45D2-8B0A-3A46CA52482B}D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{6364753A-88B8-4218-8B5E-4D4E15102462}D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\games\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{A9FF8B82-6BFE-4F54-8241-8E68546FC949}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{52B5B17B-DDA2-40ED-8AB9-647291E8954C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{EFFD8AB0-70BD-4EF5-99C6-C42A58969E15}] => (Allow) D:\Programme\Steam\SteamApps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{7E774857-4234-4CA7-BC9D-51BC80A2F493}] => (Allow) D:\Programme\Steam\SteamApps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{7EFBB0A7-778B-4842-B3E0-1CACC38E09A8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{EA511DE5-9065-4BF0-BCB7-6A25824F5E9F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{9387E698-CEC6-460A-8C7A-BFDF41AF7679}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{4EC8B7F1-F63C-4D85-BDA6-DE1F2BBFDA33}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{C2FA56D3-C59F-4091-A05F-92B55C872C7B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{BD9BD762-88CE-47DE-AD5F-9CFE4687174B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{9914233A-C46C-4094-8B79-591C5B297851}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{877656B4-CFFC-496F-96B8-DC399A69158F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{8EAC29F6-CEFC-483D-A96E-800A40292747}] => (Allow) D:\Programme\Steam\bin\steamwebhelper.exe
FirewallRules: [{92E19D48-100C-42D3-BABC-8BA006E80478}] => (Allow) D:\Programme\Steam\bin\steamwebhelper.exe
FirewallRules: [{7B092A7B-4FD4-433E-BF75-8E29A9FCF501}] => (Allow) D:\Programme\Steam\SteamApps\common\Risen 3\system\Risen3.exe
FirewallRules: [{D5DD1702-175E-4F95-9B28-F40DB55F5E4E}] => (Allow) D:\Programme\Steam\SteamApps\common\Risen 3\system\Risen3.exe
FirewallRules: [{82502F50-6B69-4405-AEDD-E27352B08A48}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{55B1C599-9FA1-40C6-A77C-896391820F88}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{ECE9D898-FC6A-474B-8D08-193699F899D6}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{32183ABB-839C-4980-B49D-AD6CF1A94181}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{C0B75813-6F35-413C-84B5-E0AA79DDB313}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{92C349A1-9289-4762-A46F-F4547964BEBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{6D3207E3-722E-47B4-AAFD-C3210677BBFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{95ACBB28-15BB-488C-BCCD-75D7F1B485D4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [TCP Query User{FCF14AD2-6D63-4BDE-A5F0-A02449C64C65}D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe
FirewallRules: [UDP Query User{E508B07A-2714-4EE4-A247-B8317E56BBDF}D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base31948\heroesofthestorm.exe
FirewallRules: [{C367B43D-CB03-4EAF-8036-B2233BDB8C3B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{32612881-8153-4AC4-A593-A05B09020818}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{376DE6B2-1468-4EE9-A036-7FA7B40802C7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{12B1F045-411D-4ACE-8D07-35D7FAC1C8A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{68EBD94C-0654-4B6A-9DB3-F97F00014DE8}] => (Allow) D:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [{3C79BF42-CC96-43E7-957E-26D439919135}] => (Allow) D:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{70934001-CADE-4A78-9640-FCFA507C87CE}D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe
FirewallRules: [UDP Query User{8E28B708-64AA-4C4A-94D8-6EC49471DA7E}D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32120\heroesofthestorm.exe
FirewallRules: [TCP Query User{2BA85446-CF08-440F-BA1D-A5F5E8EA70E4}C:\programdata\battle.net\agent\agent.3346\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3346\agent.exe
FirewallRules: [UDP Query User{C8F2AB7F-9078-4E88-8592-26B9124C5BBB}C:\programdata\battle.net\agent\agent.3346\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3346\agent.exe
FirewallRules: [TCP Query User{4E6BBBE1-98EE-480C-BDAE-DF0F42424F82}D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe
FirewallRules: [UDP Query User{D6462078-DE11-4E91-92A0-66CD5FDFB165}D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32253\heroesofthestorm.exe
FirewallRules: [{B1A10E86-C236-4503-8E79-7C0DCFF3849B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{A5F65499-9C92-4739-80E7-119124863788}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [TCP Query User{C9B61444-4F8E-4F19-AAC1-1859F0B1B4D9}D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{B9FFAA72-141C-4B5E-ABAA-078183E6B609}D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [TCP Query User{0AA6BCF9-0258-40D7-89C4-C5EF72294B6B}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{35CBBAF9-42C4-48FD-A284-F83EEC2C5DA6}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{CB91C958-D17A-4101-9FA1-B2448B3F218A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{ED923878-5BFF-45EE-9A28-00CE6008F441}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [TCP Query User{848F8094-7EBD-46A9-9198-36653B3DFBC4}C:\programdata\battle.net\agent\agent.3454\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3454\agent.exe
FirewallRules: [UDP Query User{4469467A-978F-4B57-8D42-7F9D2DF44245}C:\programdata\battle.net\agent\agent.3454\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3454\agent.exe
FirewallRules: [TCP Query User{9AF5351E-430F-4866-A2FF-6F5823C8B5B8}D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [UDP Query User{71663672-F9A9-4DB4-B14D-4629EE96578C}D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [{399A04EC-AB95-471F-912B-D1FC7DDD5335}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{C8ABCBF3-3D16-4976-B054-2434D7B6C7BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{9563D2FF-AB64-4863-BE3C-B91D346F96D2}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe
FirewallRules: [UDP Query User{0F0F9695-1CC7-4AFF-B34E-BD5B067CE23A}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe
FirewallRules: [{8940BDE4-450F-4368-8EF6-650C17FD98F4}] => (Allow) D:\Programme\Steam\SteamApps\common\Defiance\Patcher.exe
FirewallRules: [{88DB2CA5-8752-4B03-86D0-F4EA3079570A}] => (Allow) D:\Programme\Steam\SteamApps\common\Defiance\Patcher.exe
FirewallRules: [{3E83196F-F6F8-4373-B789-78B346B19EBA}] => (Allow) D:\Programme\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [{3C4B5CC7-97C1-471D-9E66-953EDC3215BC}] => (Allow) D:\Programme\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [TCP Query User{FA716A25-FA74-4F07-A040-10485F741834}D:\games\alien isolation\alien isolation ripley edition\ai.exe] => (Allow) D:\games\alien isolation\alien isolation ripley edition\ai.exe
FirewallRules: [UDP Query User{294234C0-B072-43B3-9248-623006DEA94A}D:\games\alien isolation\alien isolation ripley edition\ai.exe] => (Allow) D:\games\alien isolation\alien isolation ripley edition\ai.exe
FirewallRules: [{ABAC4AB1-CAC5-4D9D-8584-A9B8F94933C4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{10379773-8710-479D-A9A4-A76B3945F8C3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{D49FBD67-94CF-491C-A82F-190ABACF9CB5}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{97CCCC7E-F7CF-4FD8-ABD5-84D28888245F}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{0E7932D8-03AF-47BF-A14C-8F71931835B8}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{3F44548E-DEE6-4D3D-86A0-FAE7220A46EB}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{7EDF6E96-79C4-4956-A154-3C8DB7F8EE52}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{18B25543-B56D-498F-A4F3-92A91654AF16}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [TCP Query User{9226DB25-446B-4F7C-AF55-336C08446B82}D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [UDP Query User{D0DEE311-5AC9-43B5-BEB2-851240D3F5EA}D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) D:\games\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [{769EF3D4-FB40-4DB9-AB24-54426CAC4F36}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Assassin's Creed Unity\ACU.exe
FirewallRules: [{E6D19EA0-09AE-4365-9061-F85CB2182321}] => (Allow) D:\Programme\Neuer Ordner\Ubisoft Game Launcher\games\Assassin's Creed Unity\ACU.exe
FirewallRules: [TCP Query User{79B2B965-3700-431B-AFA1-588F0FEA02FA}D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8424C7BF-0197-4853-B052-566D5E6B694D}D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [{5CCC5932-A5B1-486C-AF03-F743067936D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{2B7F735F-7CBD-4ABC-843B-AFA733998691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{01888D6D-C388-466B-B079-74429E08D6DF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{BC33B102-3F0D-48D6-8644-E09EC0EE0954}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{CCC95AFA-0E75-452E-BDE4-5B50D810FE5E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{0852923C-3286-4F86-B6CF-B3A98118B578}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{4DF07618-7D52-43FD-A2AD-0444B5777BF5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{5286D0B1-08BB-430B-BC7D-FC6595403527}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [TCP Query User{F8F1E129-6924-40B1-8BEF-C6BE8B758542}D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{21758C85-EC0C-40AA-872C-6A697E5BCE7D}D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
FirewallRules: [{AF76393D-5C9F-4FC4-8D68-1BE437680D98}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{461AEE24-C3F4-469E-9D05-2204D5EB3032}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{C259225A-927C-4C24-99D3-9E74F850BD98}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{2893415E-F820-4AEE-9ECA-DEB423220278}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{55291CE5-0C09-49AD-B0F5-34BFEEAD41E7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{9C58A1C7-21E3-4864-9887-B41734D51428}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [TCP Query User{1F0B45CF-2166-4D33-ACBE-CFB76F72001F}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{3084848B-F244-4D2D-BB7F-BAFB58077C3B}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{B43C9E92-7438-4B51-A438-CC16673E9666}D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe] => (Allow) D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe
FirewallRules: [UDP Query User{DFB3F6E6-59A7-43F6-8CAA-A0B258A916B7}D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe] => (Allow) D:\games\saints row gat out of hell\saintsrowgatoutofhell.exe
FirewallRules: [{40E99BF9-98C1-4375-AEDF-11011CEED375}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{62C708E0-4EFC-470D-AC90-2DC60216E050}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{2D9E63FA-B1FD-4491-A9C2-6981B873712C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{D51BD4E6-874A-45C1-8458-34E27F145913}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{999EE23D-AC81-4E6C-847D-53AE5553F05B}D:\games\grey goo\instanceserverg.exe] => (Allow) D:\games\grey goo\instanceserverg.exe
FirewallRules: [UDP Query User{198B606F-8CE0-489F-A403-AFDFCE73C826}D:\games\grey goo\instanceserverg.exe] => (Allow) D:\games\grey goo\instanceserverg.exe
FirewallRules: [TCP Query User{677AA6E5-CBF6-4B0C-B080-11D9BE3FF480}D:\games\grey goo\goog.exe] => (Allow) D:\games\grey goo\goog.exe
FirewallRules: [UDP Query User{85B40323-8075-4730-924D-E5D8FD57769E}D:\games\grey goo\goog.exe] => (Allow) D:\games\grey goo\goog.exe
FirewallRules: [{570A08C8-D65F-49EF-ABE0-368857DEA43D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CCB77DB6-C357-402C-894A-D335650CBF20}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{7F355AF0-8CB6-473A-82DD-D1C0B54EF394}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{3E5D2956-E460-4C74-915F-62AD35D38248}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4D5A71F7-07DE-482D-8360-FA4B0CF69143}] => (Allow) D:\Games\Schlacht um mittelerde\game.dat
FirewallRules: [{6F0B9A20-D064-493A-9E25-FA761BCBED8A}] => (Allow) D:\Games\Schlacht um mittelerde\game.dat
FirewallRules: [{E34ABC1E-5BBB-46B1-88A7-A8998CDDD403}] => (Allow) D:\Games\Aufstieg des Hexenkönigs\game.dat
FirewallRules: [{FE62245A-3479-4026-A99C-50CFA8681EF7}] => (Allow) D:\Games\Aufstieg des Hexenkönigs\game.dat
FirewallRules: [TCP Query User{10A2E5A0-F76F-429A-B7F9-41F8AF8C78D6}D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{A9C3B620-1CA6-4F47-8DB3-D7E4A7D10258}D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{43C71C1F-6B3F-4EC1-9ED2-FC1D3D719CB8}D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{EE4C241E-9364-47E3-94B8-07DAE3F9D7C8}D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{D09DFBAD-C541-4306-9DD2-807BCAAACA60}D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe] => (Allow) D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{A2C58582-52A4-41EB-BE0D-3D54461D4996}D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe] => (Allow) D:\games\star trek\star trek online_de\star trek online\live\gameclient.exe
FirewallRules: [{9D1029F3-A0B0-474A-AB7C-29149E3FE657}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{F097F7AA-0812-4140-A355-B697ADEB7311}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AA5FCFE8-00C9-4A71-8D1C-DE3B91E41EA6}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{C973D952-3C9A-48BC-A9AA-53097A97B90B}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{F6FA9E01-C904-468A-868F-224FD246E993}] => (Allow) D:\Programme\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{E6922134-BF8E-4E07-ACC1-207A01C8A5B6}] => (Allow) D:\Programme\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{06048FD0-9038-45EA-BF8A-51B6686782EB}D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe] => (Allow) D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe
FirewallRules: [UDP Query User{FE376942-5816-491A-9B1E-EE5FDF6DB5C0}D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe] => (Allow) D:\downloads jdownloader\x5134h657mm6r7r\7.days.to.die.alpha.x86.x64.v10.4.b10.hotfix.steam.edition.cracked-raf\7daystodie.exe
FirewallRules: [TCP Query User{431A77DC-2011-45AA-BA5B-AEE525692743}D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{E70258D7-5E3A-4A78-A64B-0DFB06E56F7F}D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{777838CA-F2C7-44B8-95BE-6C79CE4FA00E}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{68D8491C-5DF6-40AD-A8AD-BDDD31761940}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{B05E6880-9481-4E10-9C8A-34F163BBC46D}] => (Allow) D:\Programme\Steam\SteamApps\common\Infinite Crisis Steam\TurbineLauncher.exe
FirewallRules: [{BBA64FEE-EB83-46F7-BA17-CCE847A09773}] => (Allow) D:\Programme\Steam\SteamApps\common\Infinite Crisis Steam\TurbineLauncher.exe
FirewallRules: [{604D7C1B-F10E-44FB-BD98-01869A4CB72D}] => (Allow) D:\Games\WarThunder\launcher.exe
FirewallRules: [{D2A9BA92-B653-4735-823E-5BF840AE45A0}] => (Allow) D:\Games\WarThunder\launcher.exe
FirewallRules: [{38CFF63B-4C9F-4EAA-A23C-9D78CB975D55}] => (Allow) D:\Games\WarThunder\bpreport.exe
FirewallRules: [{C80C60EF-25A3-41BE-BD23-2A2F9B25653D}] => (Allow) D:\Games\WarThunder\bpreport.exe
FirewallRules: [TCP Query User{69C106A0-50EA-4FA0-BF6D-56FCB632E14E}D:\games\warthunder\aces.exe] => (Allow) D:\games\warthunder\aces.exe
FirewallRules: [UDP Query User{B6E206EE-9A82-4EBC-A915-448EE15C1172}D:\games\warthunder\aces.exe] => (Allow) D:\games\warthunder\aces.exe
FirewallRules: [{605933A6-0A5B-44E5-B3AB-6B106115025E}] => (Allow) D:\Programme\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{18865500-B2F8-4AB6-8E65-35C33BA09649}] => (Allow) D:\Programme\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{91D1CCED-230E-4F5D-BC80-B70A7D7CE623}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{20308733-F816-49FE-8B32-08829874FB31}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{46142CAF-E2FE-419B-8C03-A94C84330CD1}] => (Allow) D:\Programme\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{0935304E-98F9-44E2-98C4-60BA2ACAF669}] => (Allow) D:\Programme\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [TCP Query User{F3BA0C50-F157-4E66-BC8A-F550E4BF4E58}D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [UDP Query User{4A3E667F-D4A8-455C-864D-C80ED6B602F9}D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) D:\games\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [{49A952E1-8302-4E00-8C62-8C9A527D2E69}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{93743C7A-2027-4F28-96D7-A5A44B243B5B}] => (Allow) D:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{D53194DA-D91A-4AB9-AB43-B52E314260ED}] => (Allow) D:\Programme\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{A9122168-F299-4249-A35D-FAEA712EBFB9}] => (Allow) D:\Programme\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{D7A76FFD-B3D9-41E1-91CB-06737F91C37D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{F6EC90A8-DA41-4336-BFF2-DA00338CBEC6}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [TCP Query User{AF7210A1-CEBC-4195-9870-8DCC25800A28}C:\program files (x86)\depth\binaries\win32\depthgame.exe] => (Allow) C:\program files (x86)\depth\binaries\win32\depthgame.exe
FirewallRules: [UDP Query User{7580D1F0-78E1-49A4-93E1-AF128E9311B7}C:\program files (x86)\depth\binaries\win32\depthgame.exe] => (Allow) C:\program files (x86)\depth\binaries\win32\depthgame.exe
FirewallRules: [TCP Query User{0662C9FD-072F-401A-B3D6-9F9A3AD48921}D:\games\depth\binaries\win32\depthgame.exe] => (Block) D:\games\depth\binaries\win32\depthgame.exe
FirewallRules: [UDP Query User{E0B2FB36-4FC9-45CF-9FCF-D657BEEBCA5C}D:\games\depth\binaries\win32\depthgame.exe] => (Block) D:\games\depth\binaries\win32\depthgame.exe
FirewallRules: [TCP Query User{61F6F5E8-F17D-4418-AFA7-A41D439A469F}D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B8953245-17AB-4417-AEF8-2B35742370FB}D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{8FCA4938-DEBB-4298-9BB3-78E8123B0D1B}D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DB55040D-232F-46F4-9FBC-CAFB252A9BB5}D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [{CECBA006-64AB-4510-972A-2E108B229970}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F1A77287-22B5-4130-B20B-D50159DBE18C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1917C1F3-A247-4AB8-A2F4-7AA52CA56B85}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{03CF75D5-D4C9-4F86-9C5A-725274CA02C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{38C9135F-490E-41B0-A71E-08F8105DAC10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C0BC0D90-3BBE-4B41-9F15-7D53646D903F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{2CC18F38-A5F3-4A94-88AB-6908DC9207A2}D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{13E588A7-E4FB-4E49-BB19-3E1A9A47E0B2}D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{72D1E4F1-304B-46FE-B28E-9FDA8AD70832}D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8C4F22F5-FCE7-4D7C-9051-1054ED46BD34}D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [{92A2A8C0-2E0B-43CE-B75F-179D35897859}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{500B68CB-E87E-49F3-9F22-F93AEA7159B5}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{DA43ED07-E156-47DD-8BF7-A52D6081B28E}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe
FirewallRules: [{8371747D-3D43-41C9-B946-C3F6056C255F}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe
FirewallRules: [{3181DBCF-2354-476F-9266-9D13BBC27FEA}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameOldLoad.exe
FirewallRules: [{8038BC87-12F5-43E8-B442-2A413E88058F}] => (Allow) D:\Programme\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameOldLoad.exe
FirewallRules: [TCP Query User{C467FD1E-CD5F-46DF-AA1A-5627503CC96F}D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DA28D97C-D74E-4F0E-9CBA-7E586E53C2F4}D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{2C3E01D5-5D25-4303-B35F-59558CE8E44F}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{5F844F21-5AB4-43CE-B390-CD99D075561E}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{0782A3AE-0AD6-4405-8A08-446317123037}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{8EC7EEBA-24EC-41B6-9F9F-F12BCCF951B5}] => (Allow) D:\Programme\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{2CEA21F0-D802-4F91-AF41-CA8AF11D9F41}] => (Allow) D:\Games\GameforgeLive\gfl_client.exe
FirewallRules: [{6EEA226A-DA48-4640-8409-940BD78854E9}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\OMDU.exe
FirewallRules: [{47C90829-3D54-48F9-8F6B-19CD110A3743}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\Dashboard\Bin\SpitfireDashboard.exe
FirewallRules: [{6F2ED062-2CD3-49E3-98FC-008DEBF4FEFD}] => (Allow) D:\Games\GameforgeLive\Games\DEU_deu\Orcs Must Die! Unchained\Binaries\Win64\SpitfireGame.exe
FirewallRules: [TCP Query User{384CF4E2-0BA9-45B4-9215-2A46947475D4}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D543E49C-9AD2-4A1A-9789-96090E49DDB9}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{2ED66E07-7201-4E75-B479-95697C7CADA8}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{853E3AC9-8932-4FD9-ADFF-FE50469877AC}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{7D39FD3A-3010-47DA-A647-F8D6B57F239F}D:\games\wofwarship\wowslauncher.exe] => (Allow) D:\games\wofwarship\wowslauncher.exe
FirewallRules: [UDP Query User{EEEE6617-158F-4482-BCBE-8C6D1CCABC0A}D:\games\wofwarship\wowslauncher.exe] => (Allow) D:\games\wofwarship\wowslauncher.exe
FirewallRules: [{44CB6D51-BAD9-427F-85BA-376D6F707621}] => (Allow) C:\Users\Iceflex\AppData\Roaming\IQIYI Video\LStyle\GpUpdate.exe
FirewallRules: [{2EDE46DD-D852-410A-A72E-A3E0A8B7787F}] => (Allow) C:\IQIYI Video\GeePlayer\GeePlayer.exe
FirewallRules: [{F1A4E75F-720C-4512-9DB6-F097FD784296}] => (Allow) C:\Users\Iceflex\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{3A8D6067-81C5-4C09-AD66-5A19D8876516}] => (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{C87D67B3-92D6-4E86-B86F-F18454C8AEFF}] => (Allow) C:\IQIYI Video\LStyle\QyWebPlayer.exe
FirewallRules: [{3C3264D6-EF0F-41D2-AAF7-0A11AA9B60DF}] => (Allow) C:\IQIYI Video\Common\QyKernel.exe
FirewallRules: [{7501ECB7-7E2E-4ED2-A2C9-5BF86F058405}] => (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
FirewallRules: [TCP Query User{454ADFCB-386E-4284-A228-9533F2D1E47D}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{18139B72-44C4-46E1-95D7-3F0FA5EFAE85}C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\iceflex\appdata\local\mycomgames\mycomgames.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (07/27/2015 09:58:54 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (07/27/2015 09:58:00 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error
Error: (07/27/2015 09:51:34 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (3832) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.
Error: (07/27/2015 09:51:32 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (07/27/2015 09:50:34 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error
Error: (07/27/2015 09:46:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 2.3.55.0, Zeitstempel: 0x557a2a02
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00077f2a
ID des fehlerhaften Prozesses: 0x1f58
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (07/27/2015 09:24:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 2.3.55.0, Zeitstempel: 0x557a2a02
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00077f2a
ID des fehlerhaften Prozesses: 0xd88
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (07/27/2015 06:21:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nswB635.tmp, Version: 1.0.35.7, Zeitstempel: 0x4b1ae3c6
Name des fehlerhaften Moduls: urlmon.dll, Version: 11.0.9600.17924, Zeitstempel: 0x5595972e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0007d101
ID des fehlerhaften Prozesses: 0x978
Startzeit der fehlerhaften Anwendung: 0xnswB635.tmp0
Pfad der fehlerhaften Anwendung: nswB635.tmp1
Pfad des fehlerhaften Moduls: nswB635.tmp2
Berichtskennung: nswB635.tmp3
Error: (07/27/2015 05:50:10 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (07/27/2015 05:49:31 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error
Systemfehler:
=============
Error: (07/27/2015 10:04:56 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Modules Installer" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (07/27/2015 10:02:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/27/2015 10:02:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/27/2015 10:02:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/27/2015 10:02:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/27/2015 10:02:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/27/2015 10:02:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/27/2015 10:02:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/27/2015 10:02:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Service Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/27/2015 10:02:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Razer Wizard Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office:
=========================
Error: (07/27/2015 09:58:54 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 09:58:00 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description:
Error: (07/27/2015 09:51:34 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail3832WindowsMail0:
Error: (07/27/2015 09:51:32 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 09:50:34 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description:
Error: (07/27/2015 09:46:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe2.3.55.0557a2a02ntdll.dll6.1.7601.1886955636317c000000500077f2a1f5801d0c8a21b85ae74C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Windows\SysWOW64\ntdll.dll3ab0ecf2-3498-11e5-a1b7-50465d073624
Error: (07/27/2015 09:24:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe2.3.55.0557a2a02ntdll.dll6.1.7601.1886955636317c000000500077f2ad8801d0c89e90739789C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Windows\SysWOW64\ntdll.dll244402b5-3495-11e5-a1b7-50465d073624
Error: (07/27/2015 06:21:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: nswB635.tmp1.0.35.74b1ae3c6urlmon.dll11.0.9600.179245595972ec00000050007d10197801d0c88833d782a7C:\Users\Iceflex\AppData\Local\Temp\nswB635.tmpC:\Windows\syswow64\urlmon.dll82867562-347b-11e5-a1b7-50465d073624
Error: (07/27/2015 05:50:10 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 05:49:31 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description:
CodeIntegrity Fehler:
===================================
Date: 2015-07-27 12:34:03.470
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:34:03.392
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:33:29.334
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:30:42.085
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:28:58.846
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:28:47.697
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:27:32.840
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:26:43.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 12:26:39.847
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 32%
Total physical RAM: 8174.12 MB
Available physical RAM: 5530.17 MB
Total Virtual: 16346.44 MB
Available Virtual: 13613.43 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:200 GB) (Free:13.33 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:1663.01 GB) (Free:439.04 GB) NTFS
Drive g: (INTENSO) (Fixed) (Total:931.51 GB) (Free:443.26 GB) NTFS
Drive h: () (Removable) (Total:1.89 GB) (Free:1.56 GB) FAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: A9BBC8DA)
Partition 1: (Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1663 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 32ACA469)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 1.9 GB) (Disk ID: 3B0D02A5)
Partition 1: (Active) - (Size=1.9 GB) - (Type=06)
==================== Ende von log ============================
Äh ich habe grade die Addition Logs gepostet da stand dann auch drinnen Zusätzliches Untersuchungsergebnis nun sehe ich aber das Normale Log von Frst? Muss ich das verstehen? okay hat sich erledigt ich glaube ich bin total verwirrt grade xD Brauchst du nun noch irgendwas?
__________________ So viele Religionen und ich konventiere nur zu .pdf |
|
| Themen zu Windows 7: Programme installieren sich selbständig |
| acengine.dll, avg, avira, baidu, computer, downloader, flash player, google, home, homepage, langsam, launch, miuitab, mozilla, musik, prozesse, realtek, registry, rootkit, rundll, scan, security, services.exe, software, super, svchost.exe, system, trojaner, virus, windows, ytdownloader |
dann auf 
und dann auf 
. 
Linear-Darstellung
