|
Log-Analyse und Auswertung: Win 7 Sp1 64Bit. Ein Trojaner plagt mich.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
08.08.2015, 12:06 | #1 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Hallo zusammen, Seit einigen Tagen plagt wohl ein Trojaner meinen Rechner. Habe, nachdem sich dann automatisch AVG 2015 installiert hatte meinen Virenscanner (Avast 2015, konstenlose Version) mal eine vollständige Überprüfung machen lassen, leider ohne Ergebnis. Habe dann diesen manuell deinstalliert und AdwCleaner laufen lassen. Das Ergebnis war Folgendes: Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 08/08/2015 um 11:26:01 # Aktualisiert 09/07/2015 von Xplode # Datenbank : 2015-08-01.1 [Server] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64) # Benutzername : ******* - ******* # Gestarted von : C:\Users\*******\Downloads\adwcleaner_4.208.exe # Option : Suchlauf ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Geplante Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Daten Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local> ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17909 -\\ Mozilla Firefox v30.0 (de) -\\ Google Chrome v44.0.2403.130 -\\ Chromium v ************************* AdwCleaner[R0].txt - [845 Bytes] - [08/08/2015 11:26:01] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [903 Bytes] ########## Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 12:44 on 08/08/2015 (*****) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 durchgeführt von ***** (Administrator) auf ***** (08-08-2015 12:49:44) Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: *****) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Computec Media AG) C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe (Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe () C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe (Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe (Curse) C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe (Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (NCSOFT Corporation) C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe (Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor) HKLM\...\Run: [] => [X] HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.) HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112" HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.) AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] () Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08] ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22] ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Keine Datei Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & ' Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & ' Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] () FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud) FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06] CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14] CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation) R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.) R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 0136381358887401mcinstcleanup; C:\Windows\TEMP\013638~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] () R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] () R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation) R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software) U3 Winsock; kein ImagePath R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited) S3 PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0; \??\c:\program files\alienware\supportassist\pcdsrvc_x64.pkms [X] U3 pgtirpow; \??\C:\Users\CHRIST~1\AppData\Local\Temp\pgtirpow.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-08 12:47 - 2015-08-08 12:47 - 02169856 _____ (Farbar) C:\Users\*****\Downloads\FRST64 (1).exe 2015-08-08 12:46 - 2015-08-08 12:46 - 02169856 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe 2015-08-08 12:44 - 2015-08-08 12:44 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion 2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt 2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Downloads\n4ldsfo8.exe 2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Downloads\fo8kzmij.exe 2015-08-08 11:42 - 2015-08-08 12:49 - 00028358 _____ C:\Users\*****\Desktop\FRST.txt 2015-08-08 11:42 - 2015-08-08 12:49 - 00000000 ____D C:\FRST 2015-08-08 11:42 - 2015-08-08 12:02 - 00094850 _____ C:\Users\*****\Desktop\Addition.txt 2015-08-08 11:41 - 2015-08-08 12:44 - 02169856 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe 2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log 2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable 2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe 2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt 2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt 2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt 2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe 2015-08-08 01:09 - 2015-08-08 11:18 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-08 01:07 - 2015-08-08 01:08 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-2.1.8.1057.exe 2015-08-08 00:26 - 2015-08-08 00:26 - 00000306 __RSH C:\ProgramData\ntuser.pol 2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner 2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Program Files\{E9BD9858-0527-4940-9AC3-BFFCAD328F7B} 2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Program Files (x86)\{A25BAB8C-2F3B-4864-9FF0-542E5994EDE5} 2015-08-08 00:22 - 2015-08-08 00:23 - 00517448 _____ ( ) C:\Users\*****\Downloads\WarCraft_WindowsModifier.zip.exe 2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner 2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa 2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin 2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin 2015-08-05 04:00 - 2015-08-05 04:00 - 00000000 _____ C:\Windows\SysWOW64\sho7EEC.tmp 2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz 2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz, 2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz 2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz, 2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg 2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder 2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft 2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft 2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe 2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-08-04 23:34 - 2015-08-08 11:20 - 00000000 ____D C:\Users\*****\Tracing 2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG 2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de 2015-08-04 23:29 - 2015-08-08 11:17 - 00000386 _____ C:\Windows\Tasks\RNKCKUYTBN1.job 2015-08-04 23:29 - 2015-08-04 23:29 - 00002908 _____ C:\Windows\System32\Tasks\RNKCKUYTBN1 2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL 2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8 2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe 2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live 2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live 2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma 2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma 2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4 2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool 2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini 2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe 2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll 2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe 2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS 2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS 2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe 2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS 2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015 2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-27 03:45 - 2015-07-27 03:45 - 00000000 _____ C:\Windows\SysWOW64\shoDE3D.tmp 2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk 2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime 2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta 2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta 2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF 2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk 2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll 2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll 2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games 2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe 2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe 2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit 2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT 2015-07-10 06:09 - 2015-07-10 06:09 - 00000000 _____ C:\Windows\SysWOW64\shoBEEC.tmp ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-08 12:46 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-08 12:46 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-08 12:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-08 12:36 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify 2015-08-08 12:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job 2015-08-08 12:22 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files 2015-08-08 12:21 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment 2015-08-08 12:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-08 11:46 - 2012-01-20 14:08 - 01167793 _____ C:\Windows\WindowsUpdate.log 2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\***** 2015-08-08 11:22 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox 2015-08-08 11:21 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox 2015-08-08 11:21 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify 2015-08-08 11:19 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-08-08 11:17 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-08 11:17 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-08 11:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-08 11:17 - 2009-07-14 06:51 - 00177306 _____ C:\Windows\setupact.log 2015-08-08 11:16 - 2010-11-21 05:47 - 00443606 _____ C:\Windows\PFRO.log 2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2015-08-08 10:30 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net 2015-08-08 00:26 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk 2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk 2015-08-06 16:51 - 2015-03-31 14:10 - 00003504 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask 2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa 2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir 2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job 2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log 2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat 2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat 2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client 2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther 2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta 2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes 2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes 2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList 2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele 2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War 2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA 2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core 2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack 2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA 2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs 2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk 2015-07-16 19:35 - 2014-09-29 12:08 - 00000000 __SHD C:\AI_RecycleBin 2015-07-16 19:34 - 2014-06-28 17:28 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT 2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt 2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt 2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history 2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat 2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini Einige Dateien in TEMP: ==================== C:\Users\*****\AppData\Local\Temp\drm_dialogs.dll C:\Users\*****\AppData\Local\Temp\drm_dyndata_7330017.dll C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkctbxr.dll C:\Users\*****\AppData\Local\Temp\DseShExt-x64.dll C:\Users\*****\AppData\Local\Temp\DseShExt-x86.dll C:\Users\*****\AppData\Local\Temp\FileSystemView.dll C:\Users\*****\AppData\Local\Temp\GameuxInstallHelper.dll C:\Users\*****\AppData\Local\Temp\Gw2.exe C:\Users\*****\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-8u45-windows-au.exe C:\Users\*****\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\*****\AppData\Local\Temp\nvStereoApiI64.dll C:\Users\*****\AppData\Local\Temp\nvStInst.exe C:\Users\*****\AppData\Local\Temp\OfficeSetup.exe C:\Users\*****\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\*****\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\*****\AppData\Local\Temp\SkypeSetup.exe C:\Users\*****\AppData\Local\Temp\SpotifyUpgrader.exe C:\Users\*****\AppData\Local\Temp\swt-win32-3740.dll C:\Users\*****\AppData\Local\Temp\tmp7C6C.tmp.exe C:\Users\*****\AppData\Local\Temp\_is4596.exe C:\Users\*****\AppData\Local\Temp\_is494E.exe C:\Users\*****\AppData\Local\Temp\_is5EAC.exe C:\Users\*****\AppData\Local\Temp\_is620C.exe C:\Users\*****\AppData\Local\Temp\_is6DEE.exe C:\Users\*****\AppData\Local\Temp\_is8D69.exe C:\Users\*****\AppData\Local\Temp\_is9DBE.exe C:\Users\*****\AppData\Local\Temp\_isB3F2.exe C:\Users\*****\AppData\Local\Temp\_isEDF2.exe C:\Users\*****\AppData\Local\Temp\_isFA20.exe ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 08:13 ==================== Ende von log ============================ Das Programm GMER funktionierte beim Ausführen nicht. |
08.08.2015, 13:04 | #2 |
/// TB-Ausbilder | Win 7 Sp1 64Bit. Ein Trojaner plagt mich.Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags: So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Schritt 1 Deaktiviere bitte dein Antivirenprogramm, da es die Entfernung von DownloadProtect blockieren kann. Bitte downloade DownloadProtectCleaner und speichere die Datei auf dem Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
08.08.2015, 16:53 | #3 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Hallo Matthias,
__________________Zuerst einmal möchte ich Dir für Deine schnelle Hilfe danken. Bericht von Malware Anti-Malwarbytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 08.08.2015 Suchlaufzeit: 16:06 Protokolldatei: Zweiter Suchlauf MwB.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.08.01 Rootkit-Datenbank: v2015.08.06.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Christoph Buldt Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 434855 Abgelaufene Zeit: 26 Min., 51 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.5.5 (08.05.2015:1) OS: Windows 7 Home Premium x64 Ran by ***** on 08.08.2015 at 17:36:56,47 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Successfully deleted: [Service] 0136381358887401mcinstcleanup [Reboot required] ~~~ Tasks Successfully deleted: [Task] C:\Windows\system32\tasks\PCDEventLauncherTask Successfully deleted: [Task] C:\Windows\system32\tasks\PCDoctorBackgroundMonitorTask ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\Windows\SysWOW64\sho2940.tmp Successfully deleted: [File] C:\Windows\SysWOW64\sho3E75.tmp Successfully deleted: [File] C:\Windows\SysWOW64\sho5ACC.tmp Successfully deleted: [File] C:\Windows\SysWOW64\sho6832.tmp Successfully deleted: [File] C:\Windows\SysWOW64\sho7EEC.tmp Successfully deleted: [File] C:\Windows\SysWOW64\sho8F42.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoAA0A.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoAEA3.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoBEEC.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoC1A9.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoD01A.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoDE3D.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoE432.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoEEB5.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoF75C.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoFAA3.tmp ~~~ Folders Successfully deleted: [Folder] C:\ai_recyclebin Successfully deleted: [Folder] C:\ProgramData\google Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin Successfully deleted: [Folder] C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8 ~~~ Chrome [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 08.08.2015 at 17:41:20,66 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 durchgeführt von ***** (Administrator) auf ***** (08-08-2015 17:43:10) Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: *****) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor) HKLM\...\Run: [] => [X] HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.) HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112" HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.) AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] () Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08] ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22] ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Keine Datei Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & ' Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & ' Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] () FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud) FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06] CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14] CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation) S2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.) S2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.) S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert] S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) S2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] () R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] () R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation) R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software) U3 Winsock; kein ImagePath R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited) S3 PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0; \??\c:\program files\alienware\supportassist\pcdsrvc_x64.pkms [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-08 17:41 - 2015-08-08 17:41 - 00002602 _____ C:\Users\*****\Desktop\JRT.txt 2015-08-08 17:36 - 2015-08-08 17:36 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Desktop\JRT.exe 2015-08-08 17:31 - 2015-08-08 17:31 - 00001813 _____ C:\Users\*****\Desktop\MWAB.txt 2015-08-08 16:34 - 2015-08-08 16:34 - 00001225 _____ C:\Users\*****\Desktop\Zweiter Suchlauf MwB.txt 2015-08-08 15:56 - 2015-08-08 16:35 - 00226304 _____ C:\Users\*****\Desktop\DownloadProtectCleaner-reboot.exe 2015-08-08 15:54 - 2015-08-08 15:54 - 00326656 _____ C:\Users\*****\Desktop\DownloadProtectCleaner.exe 2015-08-08 13:04 - 2015-08-08 13:04 - 00023526 _____ C:\Users\*****\Desktop\Addition.zip 2015-08-08 12:44 - 2015-08-08 12:44 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion 2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt 2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Desktop\n4ldsfo8.exe 2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Desktop\fo8kzmij.exe 2015-08-08 11:42 - 2015-08-08 17:43 - 00024423 _____ C:\Users\*****\Desktop\FRST.txt 2015-08-08 11:42 - 2015-08-08 17:43 - 00000000 ____D C:\FRST 2015-08-08 11:42 - 2015-08-08 12:51 - 00094858 _____ C:\Users\*****\Desktop\Addition.txt 2015-08-08 11:41 - 2015-08-08 12:44 - 02169856 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe 2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log 2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable 2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe 2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt 2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt 2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt 2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe 2015-08-08 01:09 - 2015-08-08 16:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner 2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner 2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa 2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin 2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin 2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz 2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz, 2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz 2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz, 2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg 2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder 2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft 2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft 2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe 2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-08-04 23:34 - 2015-08-08 16:40 - 00000000 ____D C:\Users\*****\Tracing 2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG 2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de 2015-08-04 23:29 - 2015-08-08 16:38 - 00000386 _____ C:\Windows\Tasks\RNKCKUYTBN1.job 2015-08-04 23:29 - 2015-08-04 23:29 - 00002908 _____ C:\Windows\System32\Tasks\RNKCKUYTBN1 2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL 2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe 2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live 2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live 2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma 2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma 2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4 2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool 2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini 2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe 2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll 2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe 2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS 2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS 2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe 2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS 2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015 2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk 2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime 2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta 2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta 2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF 2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk 2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll 2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll 2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games 2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe 2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe 2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit 2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-08 17:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-08 17:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job 2015-08-08 17:10 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files 2015-08-08 17:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-08 16:48 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-08 16:48 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-08 16:43 - 2012-01-20 14:08 - 01226554 _____ C:\Windows\WindowsUpdate.log 2015-08-08 16:42 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox 2015-08-08 16:42 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify 2015-08-08 16:41 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox 2015-08-08 16:41 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment 2015-08-08 16:41 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify 2015-08-08 16:39 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-08-08 16:38 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-08 16:38 - 2009-07-14 06:51 - 00177810 _____ C:\Windows\setupact.log 2015-08-08 16:37 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-08 16:37 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-08 16:01 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-08-08 15:45 - 2010-11-21 05:47 - 00444226 _____ C:\Windows\PFRO.log 2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\***** 2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net 2015-08-08 00:26 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk 2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk 2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa 2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir 2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job 2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log 2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat 2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat 2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client 2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther 2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta 2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes 2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes 2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList 2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele 2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War 2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA 2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core 2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack 2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA 2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs 2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk 2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT 2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt 2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt 2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history 2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat 2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini Einige Dateien in TEMP: ==================== C:\Users\*****\AppData\Local\Temp\drm_dialogs.dll C:\Users\*****\AppData\Local\Temp\drm_dyndata_7330017.dll C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpc9wfed.dll C:\Users\*****\AppData\Local\Temp\DseShExt-x64.dll C:\Users\*****\AppData\Local\Temp\DseShExt-x86.dll C:\Users\*****\AppData\Local\Temp\FileSystemView.dll C:\Users\*****\AppData\Local\Temp\GameuxInstallHelper.dll C:\Users\*****\AppData\Local\Temp\Gw2.exe C:\Users\*****\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\*****\AppData\Local\Temp\jre-8u45-windows-au.exe C:\Users\*****\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\*****\AppData\Local\Temp\nvStereoApiI64.dll C:\Users\*****\AppData\Local\Temp\nvStInst.exe C:\Users\*****\AppData\Local\Temp\OfficeSetup.exe C:\Users\*****\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\*****\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\*****\AppData\Local\Temp\SkypeSetup.exe C:\Users\*****\AppData\Local\Temp\SpotifyUpgrader.exe C:\Users\*****\AppData\Local\Temp\swt-win32-3740.dll C:\Users\*****\AppData\Local\Temp\tmp7C6C.tmp.exe C:\Users\*****\AppData\Local\Temp\_is4596.exe C:\Users\*****\AppData\Local\Temp\_is494E.exe C:\Users\*****\AppData\Local\Temp\_is5EAC.exe C:\Users\*****\AppData\Local\Temp\_is620C.exe C:\Users\*****\AppData\Local\Temp\_is6DEE.exe C:\Users\*****\AppData\Local\Temp\_is8D69.exe C:\Users\*****\AppData\Local\Temp\_is9DBE.exe C:\Users\*****\AppData\Local\Temp\_isB3F2.exe C:\Users\*****\AppData\Local\Temp\_isEDF2.exe C:\Users\*****\AppData\Local\Temp\_isFA20.exe ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 08:13 ==================== Ende von log ============================ |
08.08.2015, 16:54 | #4 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Und hier das Attention.txt Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:08-08-2015 durchgeführt von ***** (2015-08-08 17:43:45) Gestartet von C:\Users\*****\Desktop Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2025296424-690445150-2269518065-500 - Administrator - Disabled) ASPNET (S-1-5-21-2025296424-690445150-2269518065-1334 - Limited - Enabled) ***** (S-1-5-21-2025296424-690445150-2269518065-1001 - Administrator - Enabled) => C:\Users\***** Gast (S-1-5-21-2025296424-690445150-2269518065-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2025296424-690445150-2269518065-1003 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader X (10.1.15) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.15 - Adobe Systems Incorporated) Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios) Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios) Age of Mythology: Extended Edition (HKLM-x32\...\Steam App 266840) (Version: - SkyBox Labs) Age of Wonders 2 (HKLM-x32\...\Steam App 61510) (Version: - Triumph Studios) Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version: - Triumph Studios) Aion (HKLM-x32\...\{B9291CA2-6FA5-44EA-8EE0-923EB32ADAAB}) (Version: 4.0.0.3 - NC Interactive, LLC) Akamai NetSession Interface (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Alienware Command Center (HKLM-x32\...\InstallShield_{131A7AD3-1078-4B08-95E6-B457D18C40DF}) (Version: 2.7.24.0 - Alienware Corp.) Alienware Command Center (Version: 2.7.24.0 - Alienware Corp.) Hidden Amazon Music (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC) Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Blasc3 (HKLM-x32\...\{59FD1BDF-FEC7-403E-97FC-FBE437154BD2}) (Version: 1.0.0 - Computec Media AG) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation) Cool Edit 96 (HKLM-x32\...\Cool Edit 96) (Version: - ) Cossacks II: Battle for Europe (HKLM-x32\...\Steam App 4890) (Version: - GSC Game World) Cossacks: Art of War (HKLM-x32\...\Steam App 4870) (Version: - GSC Game World) Cossacks: Back to War (HKLM-x32\...\Steam App 4850) (Version: - GSC Game World) Cossacks: European Wars (HKLM-x32\...\Steam App 4880) (Version: - GSC Game World) Curse Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dawn of Fantasy: Kingdom Wars (HKLM-x32\...\Steam App 227180) (Version: - Reverie World Studios) Dell Data Vault (Version: 4.3.4.0 - Dell Inc.) Hidden Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell) Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.0.47 - Dell) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) diclovit's mod pack 9.9.0 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.9.0 - diclovit) Disciples III: Renaissance (HKLM-x32\...\Steam App 33670) (Version: - Akella) Dropbox (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.) DUNGEONS - Steam Special Edition (HKLM-x32\...\Steam App 57650) (Version: - Realmforge Studios) Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly) FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GameRanger (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\GameRanger) (Version: - GameRanger Technologies) GameSpy Comrade (HKLM-x32\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy) gnuplot 4.6.3 (HKLM-x32\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 4.6.3 - gnuplot development team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.) Google Drive (HKLM-x32\...\{6EA8B94E-D869-4D96-88DF-5E1ECE1D6876}) (Version: 1.23.9648.8824 - Google, Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.) Grand Ages: Rome (HKLM-x32\...\Steam App 23450) (Version: - Haemimont Games) GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd) Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) Happy Cloud Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.) Imperium Romanum: Gold Edition (HKLM-x32\...\Steam App 23400) (Version: - Haemimont Games) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2462 - Intel Corporation) iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.) Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games) LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation) Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Americas (HKLM-x32\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Britannia (HKLM-x32\...\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Crusades (HKLM-x32\...\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Teutonic (HKLM-x32\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA) Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSI ODD Monitor (HKLM-x32\...\InstallShield_{B7D9BAAA-F068-4BF8-B929-462C3A8AB677}) (Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) MSI ODD Monitor (x32 Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) Hidden Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig) MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others) NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT) NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) NWZ-E450 WALKMAN Guide (HKLM-x32\...\{0A6C2811-AD29-473F-8086-F0B401276DEC}) (Version: 2.1.0.17210 - Sony Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.) QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6494 - Realtek Semiconductor Corp.) Rome: Total War - Alexander (HKLM-x32\...\Steam App 4770) (Version: - The Creative Assembly) Rome: Total War (HKLM-x32\...\Steam App 4760) (Version: - The Creative Assembly) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Shogun - Total War - Gold Edition (HKLM-x32\...\{8A03FE64-0C8B-4E8F-B488-F36BA40A8640}) (Version: 1.00.0000 - The Creative Assembly) Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games) Spotify (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB) Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios) Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version: - Petroglyph) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) STAR WARS® - Galactic Battlegrounds Saga (HKLM-x32\...\1421404646_is1) (Version: 2.0.0.2 - GOG.com) StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.0.23077 - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version: - FireFly Studios) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH) TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team) The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version: - Turbine, Inc.) Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version: - Creative Assembly) Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly) Tropico (HKLM-x32\...\Steam App 33520) (Version: - PopTop Software) Unity Web Player (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment) Warhammer Online: Age of Reckoning (HKLM-x32\...\Warhammer Online: Age of Reckoning) (Version: - Electronic Arts) Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version: - Relic Entertainment) WildStar (HKLM-x32\...\WildStar) (Version: - NCSOFT) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version: - Wargaming.net) World of Warships (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) XSplit Gamecaster (HKLM-x32\...\{D7BEC6E9-5E86-44FF-AA21-23DA71ED676B}) (Version: 2.4.1506.1243 - SplitmediaLabs) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{cbd31018-8e26-442c-b791-0d5a2dc52d3f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) ==================== Wiederherstellungspunkte ========================= 19-06-2015 19:37:03 Windows Update 23-06-2015 12:36:31 Windows Update 26-06-2015 16:59:35 Windows Update 30-06-2015 11:08:50 Windows Update 07-07-2015 14:45:41 Windows Update 08-07-2015 02:13:35 DirectX 9.0 wurde installiert 10-07-2015 16:15:57 Windows Update 14-07-2015 14:14:07 Windows Update 15-07-2015 05:57:23 Windows Update 15-07-2015 17:24:02 Windows Update 16-07-2015 19:32:26 Installed XSplit Gamecaster 19-07-2015 21:48:26 Entfernt Rome - Total War - Gold Edition 21-07-2015 15:31:51 Windows Update 22-07-2015 03:00:16 Windows Update 28-07-2015 10:05:34 Windows Update 29-07-2015 00:45:23 Windows Update 01-08-2015 17:37:44 Windows Update 04-08-2015 23:19:46 Windows Live Essentials 04-08-2015 23:22:07 DirectX wurde installiert 04-08-2015 23:23:13 DirectX wurde installiert 04-08-2015 23:24:28 DirectX wurde installiert 04-08-2015 23:26:47 WLSetup 04-08-2015 23:41:48 AVG PC TuneUp 2015 wird entfernt 04-08-2015 23:42:44 AVG PC TuneUp 2015 wird entfernt 04-08-2015 23:43:37 AVG PC TuneUp 2015 (de-DE) wird entfernt 04-08-2015 23:51:33 Windows Update 08-08-2015 00:50:40 AVG PC TuneUp 2015 wird entfernt 08-08-2015 00:53:07 AVG PC TuneUp 2015 (de-DE) wird entfernt 08-08-2015 00:53:55 Windows Update 08-08-2015 17:37:13 JRT Pre-Junkware Removal ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {03C20EC4-40F1-4736-B58B-841D9238FE78} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {0E897781-5457-4E56-AC1D-4958A8151EE7} - System32\Tasks\{FEFF5C65-B1CE-4B65-B02C-D0B2955F5EDB} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-90.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist" Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG Task: {30DC20C1-9AD5-46DC-914C-05F55D57FCEB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {36A75BD1-C1FC-43E5-B5D9-278175107813} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation) Task: {4069B3FC-2DA2-447A-9744-EFEA6A95E0F3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.) Task: {4465B507-AD8A-4E9A-B9B0-417D14EE6E6E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {65D30786-D67E-476F-A07B-31AE1240421E} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2015-04-26] (Apple Inc.) Task: {727C874E-08D9-48F5-AD14-2CF779759EF6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.) Task: {87A603EB-E64F-4596-B57E-20E465F8C720} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation) Task: {B3BCD2E7-F24D-4AC6-8AFC-17322662FBB2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {B8318A20-6BA9-4F3F-A8B8-E5FE073B0513} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated) Task: {C4EC3CD5-60E7-422C-8F52-5B2924ACD6A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.) Task: {D00721E5-2540-483F-8323-4AE71B53791C} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {D0CA070E-7436-46EF-9128-D0DDBD4451B5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation) Task: {D5D16122-8D52-49BA-A53F-060CF711B465} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-06-11] (Dell Inc.) Task: {F4BF3CD9-278D-4500-9875-1A825B8A5A9B} - System32\Tasks\{13FFD5A0-546B-4A2E-A0F2-8AC4715EF0B9} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-100-sp1.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist" (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2014-11-03 05:59 - 2014-10-16 18:54 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2014-03-21 17:20 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-08-08 10:32 - 2015-08-08 10:32 - 02960384 _____ () C:\Program Files\AVAST Software\Avast\defs\15080800\algo.dll 2012-01-20 22:54 - 2014-10-16 18:54 - 00013120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-08-08 00:26 - 2015-08-08 00:26 - 00012288 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll 2015-08-05 03:08 - 2015-07-31 08:19 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll 2015-08-05 03:08 - 2015-07-31 08:19 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll 2015-08-05 03:08 - 2015-07-31 08:19 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer trusted/restricted =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [TCP Query User{0251ACFB-8F10-4242-82D5-75D58E223008}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe FirewallRules: [UDP Query User{ADC9FDE2-F4EB-4C85-9582-A86AF231B1DB}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe FirewallRules: [{EE519961-DFE1-47CB-ABC2-400DC1206F93}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{0EBA76C8-A25F-4899-A025-7AB08C5BDB40}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{50935E8B-8DD1-455D-A9BB-A8D648BBF707}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{F638167A-5DC7-4D25-8AA7-2F1CC486DBB2}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{914446D5-53EB-4EDB-94D7-F23CAFAADA5B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe FirewallRules: [{C7EA0C2E-5216-4808-8AEA-1E0749EA260E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe FirewallRules: [{CB4993E2-1739-4AF0-B269-A182883F794E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe FirewallRules: [{F64284A3-396B-4F0D-9295-73FAF85A9549}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe FirewallRules: [TCP Query User{015752AF-CC12-4844-9107-5B23BB3FE8AB}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7C437135-EF71-4065-9981-FD87E5C8DEBA}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe FirewallRules: [{349F76F6-0E43-4A72-AAFC-247A6842E9E4}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [{CC92EC73-9332-4A30-B762-4780B8AC809D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [{BA0DC8FF-F484-48E1-B463-D91F2F1BA6CA}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{C79CA4D9-C1A4-4ED6-A73F-BB2339CD0261}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe FirewallRules: [TCP Query User{943A8B51-7349-45DC-9254-E0EFB47EB7DA}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe FirewallRules: [UDP Query User{E3577156-3EA3-4A26-946B-870F42C076A5}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe FirewallRules: [{8F64E7C7-F2B4-43AF-B4BE-FDDF2C613262}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe FirewallRules: [{4B9DA593-42B8-4232-BD37-70284244BBFC}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe FirewallRules: [TCP Query User{EFCD4C90-EA06-40FD-AD9A-2E50601401DD}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe FirewallRules: [UDP Query User{A7122FFD-F591-4013-9ECA-0FF851E65155}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe FirewallRules: [{309A7FC0-7F0D-4344-8484-814CEA4213A0}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{12F0F1B9-46B7-4DF1-8DCD-448D9EADA4EA}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe FirewallRules: [TCP Query User{8FFD5267-9A2B-48C2-8F06-BFC2AF806F29}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe FirewallRules: [UDP Query User{03F5CCBC-11D8-4E50-9810-1EC1CF981A39}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe FirewallRules: [{B9401DBC-3331-46B0-9CA3-77038CCD2C6E}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{DF284FCB-ED45-452B-BAC1-BEEC4A455B14}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{11D3468E-4DCB-4BD5-B3E8-7F1E27A948F5}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{A41BA3B0-96D6-40AB-9FCA-BCD1B2791EEF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{42A3892E-23BE-439B-9507-F7619A426826}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{4E23E1FB-C0D6-49E9-AAB1-27D72C79F843}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{C741D5EB-A2E2-4675-9E05-866F8BB21349}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{FBECEDCA-5409-45AC-B941-9424882B389B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe FirewallRules: [{43AED376-03F3-4844-8621-F24C53765706}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe FirewallRules: [{F8F95744-2953-4E94-BB46-3F5616602006}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe FirewallRules: [{4AE95902-BE71-4EC9-AB5D-98260BC2CFFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe FirewallRules: [TCP Query User{5FF02B8C-680A-4FE8-AC98-B3E0218FFB4C}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe FirewallRules: [UDP Query User{6C752DA4-F222-4E54-A846-4E10047EB128}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe FirewallRules: [{5D2B5538-9D14-41FE-A7D6-6152D5B14D31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe FirewallRules: [{B71B1F03-5326-4897-A528-8ED39B1A1C49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe FirewallRules: [{3CEF8494-3EF5-4D6F-95FE-2C2108688812}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{E02C4A51-8790-44F2-BFFB-32DC03E24486}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{24BF9231-06B3-4962-84DF-419C8030F114}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{A76F92AA-6071-4133-9D03-E692D3459DDA}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{E4C884D4-7FC4-4C78-8E06-DCD37188AF90}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{B4C1BA76-4008-4E6F-B4C5-E63C5A9A4962}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{7D7E9C8C-DEBD-4B86-A24F-00E54BDDA613}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C635E2E8-0684-4EAF-B6A3-712055BF595D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{BA861A84-22A8-4F0B-A836-07BC1BC84599}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt FirewallRules: [{24030535-9C04-4370-B3B8-2FFDD5419CC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt FirewallRules: [{EEB28177-078B-47A4-A1E9-32CB98A1B998}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf FirewallRules: [{C757B3B0-8F6F-4803-9A30-086BC588C713}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf FirewallRules: [{EC7636C5-27E0-44E4-AE2B-C951ABCBE837}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html FirewallRules: [{9C1BDABF-2443-4B1D-8D40-09EAC3498DC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html FirewallRules: [{3DC71454-4E25-4044-9C2F-2A36067BF271}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf FirewallRules: [{7ECB4059-9323-422C-A4E8-47AD5BEA7A63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf FirewallRules: [{45FF3A56-0CF5-4337-A78F-49E65B1DE721}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe FirewallRules: [{D79A69F9-026C-4197-AB97-16CA202E638C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe FirewallRules: [TCP Query User{80DA892B-37F0-4281-AD10-BB3F5E7E8381}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe FirewallRules: [UDP Query User{42E5E64D-7ED8-44E4-9DB1-085EF7B8B41E}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe FirewallRules: [{C13CEAD8-59FF-497D-9A4F-5E0370FFD512}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{4D1FC9AB-F8D1-4F7D-9673-0B2544313F51}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{54575BE3-5FC3-4F08-95E5-33AB82BC1E54}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{578D9506-D945-43B6-B9B2-203B50311BBA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B2ADAAD8-60DE-4BD9-8D4E-D797C5D00140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html FirewallRules: [{55F46406-342A-44B8-8C59-FCE17E82013D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html FirewallRules: [{BF4E595F-8E17-4043-9FB7-C3A94C12D244}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat FirewallRules: [{EE9D656A-5709-41A1-A241-9B83DD5C36CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat FirewallRules: [{7AEAD203-01C2-4850-AE70-6B08C5ABC495}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat FirewallRules: [{95AE7B89-390A-496F-B196-F0EBED984870}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat FirewallRules: [{084B75D9-AF72-4409-8C88-6DBBD3665E0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe FirewallRules: [{DDD30F9A-3050-4B07-B288-2CFC3D1FF1D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe FirewallRules: [{895C1FD9-A7C3-490D-BBFA-5840A6E956A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe FirewallRules: [{D155A490-7844-42C7-A178-1C09AA7FC231}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe FirewallRules: [{A6196099-492C-466F-ADCB-44469AF7B84F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe FirewallRules: [{6B24D139-7AC0-46FB-BBB7-62B4B444D691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe FirewallRules: [{68A02C29-E545-4F3F-B1B1-ECE94A0FC97A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm FirewallRules: [{4D8CCB77-F9AE-46F2-8A78-BF9B6850DF62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm FirewallRules: [TCP Query User{CB28A092-7F4B-4D49-AA5C-3981737BA3E4}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe FirewallRules: [UDP Query User{F0193006-DDBF-4469-98E5-165044C5D09A}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe FirewallRules: [TCP Query User{E9FDD513-4F3E-4852-BBEB-EB08DAD7F562}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe FirewallRules: [UDP Query User{EFDD6A7A-C4F8-44F5-A2B5-39A5B70A77F6}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe FirewallRules: [TCP Query User{DF5D6BD4-01C5-4576-841E-907E29BF701E}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe FirewallRules: [UDP Query User{70EBBC55-7CC3-49C5-BA00-A38A0EAB5E78}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe FirewallRules: [{DD4A98A4-3190-41EE-AB6B-AA87AA3FB2FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe FirewallRules: [{80704D14-32F9-4725-915D-5855A73903FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe FirewallRules: [{C4C50AF8-FDBD-4E7D-BF98-38B934C58F8A}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{8202CD3A-B7B2-4026-9017-87F7CDA99928}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [TCP Query User{C9BC03BB-898B-43EB-A357-2A7690041E96}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe FirewallRules: [UDP Query User{1662C0B1-6221-4F19-B7C5-571C2321F5E2}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe FirewallRules: [{2DDEC01C-6A21-42B8-A287-8F182BAEDF6D}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe FirewallRules: [{F829CDDC-B1FC-4955-B765-889D62F4D8AE}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe FirewallRules: [{AF1A7839-A8BB-4F69-B9E2-1540096716F6}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe FirewallRules: [{16F7A5B3-4B1C-4085-8971-BDA6A5C0EE44}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe FirewallRules: [{A87862CF-AD30-4A2B-A516-465016EFA16B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{D0B48795-5047-463A-9371-5F33DCEE8E63}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{BD4D1AC5-D483-4E5D-A14A-4DC840DAA775}] => (Allow) C:\Users\*****\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{624E29F4-9DA6-4F81-8DE4-95CE91C4A6A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe FirewallRules: [{26476F6A-D8DE-4A93-ADEF-B7F0FFFFA7DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe FirewallRules: [{0D3AF0A8-8801-4B78-842E-90B7BAD4D95C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [{96576DF3-5A5D-4783-BA82-A978082F390F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [{AB234224-89F6-49AC-984F-3E790888E7B0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe FirewallRules: [{88E49BE1-6DD3-4682-93B0-401DAFA5EF22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe FirewallRules: [{E7F1B4BD-BCA4-453C-9EC4-2374538A57AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe FirewallRules: [{6C1189A1-95D1-4122-8DE2-350D79E8DF6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe FirewallRules: [{2A11819A-4F18-4FA1-BBD7-D56CB04D8360}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{0A0BD680-BBDD-4964-A896-111EBD886B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{5B22CC13-BFFC-4D5F-BD71-F5063CCE892F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [{939CF113-423A-4321-9F36-3D3172E9AB13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [TCP Query User{D8A05BD9-4C60-4C76-A77A-872D3EC843E3}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{FAA01B96-B795-44BD-BDE0-BF6D45F95B77}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{F704AC56-3787-48A1-B60E-D4AAD4A4E386}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{83ACC9A2-0CB6-4157-9CC9-FBBEF6040CBF}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{CA31BFEE-0F8B-4024-8E23-47AF5C3D03C8}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{DC684C0E-C6CF-46FE-B2F1-3E611685C5FD}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{46055201-620C-4BCD-94CC-4099AB13B541}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [{E0B1E5DB-731E-4E07-AE2D-6A3EA6476A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [TCP Query User{0D9ED852-5DD9-4654-9D9E-9C1DD6DB4A69}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe FirewallRules: [UDP Query User{C68D42DD-55F8-4558-BEFF-08352016E6AB}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe FirewallRules: [TCP Query User{28DE63A4-CA9C-4313-81A7-7E30D89C41E8}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe FirewallRules: [UDP Query User{0929412C-38BA-45B1-9BA5-A6B072C1B3F5}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe FirewallRules: [TCP Query User{5F3DC4B3-E3B9-4EC5-98F1-655FD5587AF3}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe FirewallRules: [UDP Query User{55E61591-BF26-4593-8E9E-153D7AFFD62D}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe FirewallRules: [{66A92318-33CF-47FC-8A56-901C809EDAB9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{0B455E08-7215-4A7B-8F6E-76D4E9BBECF6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{5D4EAA31-BAA6-4C40-B9D7-3A3A57B61A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{DC23C8A2-4C71-49D7-9D8B-A3C39A438E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{32DD98BC-2B6C-4BD0-9F95-38A526213637}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{0DF7E29E-4627-4010-8E4E-795C62170D46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{95A75987-BF1E-4D2B-8F25-F18FF281A6D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe FirewallRules: [{F29C65E1-A615-404B-A72A-AFE401666C18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe FirewallRules: [TCP Query User{284CE0CC-41B4-4A9A-80BA-0AB19AB1C27F}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [UDP Query User{28CF3ACF-A0AE-433C-B758-0F5416684912}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [{3F8D1AA0-FDF1-463B-A672-FFC4A5F27A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe FirewallRules: [{F2EF8C94-6BB8-4B99-9A95-AEA7E27EA59F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe FirewallRules: [{7A66ABAB-C574-41A4-AFE3-95F43948DFBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe FirewallRules: [{763F94C6-4057-459E-958C-B8F38FCBAFA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe FirewallRules: [{72C41947-E771-4F58-9B66-3159CA4309C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE FirewallRules: [{5E709D9D-4769-4849-80E1-70D56CAFBB5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE FirewallRules: [{E5836997-BD8A-444C-A42F-146734D12D0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe FirewallRules: [{B03C5E02-C80C-45A8-8DD8-EAD69CD12468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe FirewallRules: [{5C05E1DC-FB5C-40C1-9250-F55E4D38F666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe FirewallRules: [{672FC1B7-C190-4EDD-81DD-9F31DD5CA392}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe FirewallRules: [{EDC9526A-FCD4-4A27-BDB0-02040DFE634A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe FirewallRules: [{A8002DC8-B4C3-4E67-BCF3-09B36DA4DF87}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe FirewallRules: [TCP Query User{4C1BCE32-CCB2-476C-AA49-5CE419A2B51F}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe FirewallRules: [UDP Query User{84A74773-E34A-4B2A-BA58-85E60E551BF2}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe FirewallRules: [{764C0B6E-EF20-444A-98C9-0475EED188E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe FirewallRules: [{E7183E39-39AD-49F2-88A2-AC6F33FB0836}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe FirewallRules: [{72FFA2F5-7067-4C40-8CC9-00F352A790C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe FirewallRules: [TCP Query User{092F9E08-81F4-4C78-813D-256F61EBC7D4}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe FirewallRules: [UDP Query User{DE830FD1-5A12-4461-84C7-83ACAAA7AF17}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe FirewallRules: [{7D08CB81-5A97-49D4-8786-0536F3468AF1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{DC025869-8125-442D-8C68-FA82F9CCDC4F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{81213F41-FDF4-4CD6-B16B-DF5BAC2C96BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe FirewallRules: [{05F72280-7DF9-4CCB-AC89-193F5F821AFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe FirewallRules: [{69CBA4F3-6075-4156-BEE1-3D90ECC59DC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe FirewallRules: [{160AADED-5837-49B2-9A80-1C9E41EB64BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe FirewallRules: [{CDEED061-B078-45CD-B523-59104B55E39E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{07120651-2E37-49A8-8E73-72124163EFF0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{C27D5DF9-ECBA-4F0C-99A4-F963D67283EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{44601D48-28E3-4A21-BDE3-24F1E2E41655}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{2EEF1A05-42E4-4F0A-9E91-C26F2987FDE1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{8A3F3961-8340-41AC-9276-CC735803FBC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{E0CE7F32-573B-4383-89E8-ADDA887EC05D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe FirewallRules: [{11B0EEBB-FEF8-44DD-91F2-1B76046921E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe FirewallRules: [{485B1DA4-3473-4337-8D14-904AE2349099}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe FirewallRules: [{F85F7861-3927-4786-A50E-8019C9BD45B1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe FirewallRules: [{4141D8F6-B1ED-4D33-968C-65E6728F044B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{37DA2E0A-0C1B-4E91-82C5-731DB056BEC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{FE194A7A-3F19-4A59-A46A-C04C6341FBE8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe FirewallRules: [{CBE25DEE-B29C-4747-91DE-7419F2E7E42E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe FirewallRules: [{A2465D6C-8849-43A2-9F59-2DC913C3D8EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{FE25420B-B1F5-4592-A17E-09033A636F85}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{45D1BA0B-0E2D-4A19-A9DE-A380EC6A9AEB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0067A891-CBED-4815-B2D9-F549AB73E8FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{EE12FAB7-66C9-459B-A67A-C2C320D9BFB9}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{F6A37288-865D-4031-B856-66EAAD29F8DA}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe FirewallRules: [{33528BD2-21DE-4B47-84AD-E30DBC14FA0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [{18B81AF8-8A09-4719-B0B8-01BBCBD2093B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [{1E5BC73E-05CA-47B9-AB6D-A58FB7E8681D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe FirewallRules: [{D6A4DCEF-3BF1-4A05-A0A8-2B7E97E02497}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe FirewallRules: [{DB163982-259D-4F73-8F0B-59D23C4ADA22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe FirewallRules: [{2D62B4C2-6E7E-434C-8565-9057ED30F8D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe FirewallRules: [{D0722FB1-E41D-47DE-8F3B-513DD58D60E9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe FirewallRules: [{2FA375AE-FAE3-4CA4-81A2-E27DD18DE170}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe FirewallRules: [{284FF3D0-9031-4127-9107-1AF1B0A59002}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe FirewallRules: [{64ED5AED-D8AB-4295-945C-AFEA943DAC2F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe FirewallRules: [{66349D78-172B-4492-A79E-498E53642382}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe FirewallRules: [{D01CCD26-5B59-419B-A26A-4403BCC035D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe FirewallRules: [{24AAF877-3C25-4916-B251-CDE779C0A033}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{91BCFF5B-FCEE-487A-B60A-5702EEC831C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{4AB85794-AA74-4EA4-A95F-B74716639EB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe FirewallRules: [{E35AB98E-72F3-4BE8-A92B-8ED6F73D7AF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe FirewallRules: [{6734A585-A9ED-4413-BEA3-29F303C7A35D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{FEF460D3-6D89-4629-8CA0-E2542A595F40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{76C85B40-77D6-40F1-8515-44424B0E7C8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe FirewallRules: [{B51ED9FB-02E5-421E-8C73-3B2E4E2E4ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe FirewallRules: [{DB6E781E-7A9D-4010-90F3-CBEDD5F2B05D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{6D4E4E4E-4D4A-4EF1-A6FA-2031EE12AF28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{B2F74E8D-6356-490A-870C-514D2E7A6A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe FirewallRules: [{14ECF0D5-8C32-4367-98F7-4C817402BDE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe FirewallRules: [{CEF4C40A-C4DE-4C7E-956D-1D26419CB58A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe FirewallRules: [{A2708FCA-432B-412E-B206-C0DFB1A27107}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe FirewallRules: [{296F9BE3-B10E-4989-8763-24026D4765C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe FirewallRules: [{48AAB6BE-6774-4B6C-A48B-9C433BB1150C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe FirewallRules: [{182B9192-EEF2-4988-9614-83F3C9127A20}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe FirewallRules: [{4EE6A53C-9516-405B-BCF9-7F3482853648}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe FirewallRules: [{7CCDE8F5-6BC8-4E63-A073-691929B28326}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [{EFA7A645-1C6F-4F99-8A87-9C9093875683}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [TCP Query User{973449FF-EEB6-4194-9041-97FCBBEEA4D3}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe FirewallRules: [UDP Query User{FB80D76E-234F-418B-AD57-6895A8FFC3B1}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe FirewallRules: [{17BD02AF-CB8C-4850-BC3B-C17988F08D0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe FirewallRules: [{0E96E7B9-500F-4BD6-BEA0-CD74B4AF6A74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe FirewallRules: [TCP Query User{222AF928-B487-4ABF-8DE2-39D9251C8BB9}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [UDP Query User{247B8F40-4C7E-4242-9107-08CEEBB2AC34}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [{12649B92-3DD0-471D-B876-E582037200D1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8A444CB3-9B24-4528-AE42-8E24E45A829A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{F0660EA7-1406-4995-9627-AF62F3516145}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{03FC81DF-28DC-44C7-A740-05F4F1A7E1C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{4E8965C4-48E0-4A14-8B91-3EFBA57CCBE8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{17911242-E19B-4BAE-B170-AC187A34D1B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{56D1A343-2EF6-4D75-8D54-F1E05B6E29DD}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [UDP Query User{49EB5140-8CA1-4036-80E3-D00A247AFC56}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [{69846FFB-ABF1-4324-B680-E3DC1ED53D5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe FirewallRules: [{9E428734-13B5-441E-91CE-E314FAD80674}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe FirewallRules: [{FEA5A4C6-C218-427B-8D13-0512D5B02606}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{B48C8E32-FAD6-448F-B17F-5F2758B91A96}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{3C6AF60C-FF76-4F3E-A289-810DD59F72BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe FirewallRules: [{AFE9E6DE-8C75-4F8D-A3C5-AA7ED41ACEFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe FirewallRules: [{DB4E9A26-FF74-4B87-ABA1-7327DB6C8409}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe FirewallRules: [{3935C411-E419-49EF-929C-9B76FCF4F265}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe FirewallRules: [{DDF6892C-FFAA-4250-BEEE-CCCEC26428BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe FirewallRules: [{28D732BF-87D0-438A-A609-5840825B1BBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe FirewallRules: [{EA5946D6-C7D7-484A-8B48-1F983701D10A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe FirewallRules: [{8D439FCC-7044-4AB8-9264-7894FFB8AC72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe FirewallRules: [TCP Query User{58A81076-8275-43E3-B870-B020E086A82F}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe FirewallRules: [UDP Query User{6FF15508-5BF8-4BD0-882D-CF3A2F9EFFD4}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe FirewallRules: [TCP Query User{87FFE026-5E60-47AE-A3BE-22EA19FFAF54}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [UDP Query User{91C55B66-6018-4EE8-B57D-62D1894BA95C}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [{969152DF-1CCF-411E-9BB8-DB5BD1738C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe FirewallRules: [{5C4EAEF4-6A83-4408-9A0B-B304231DF5B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe FirewallRules: [{26A666C8-AEC7-47BB-9ECC-6A029C76962E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe FirewallRules: [{73DEC31D-F4D4-4E0F-B05F-F6CA80BF3D27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe FirewallRules: [{B664A03F-1900-4311-8C91-A7BECC601B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe FirewallRules: [{580E11C3-A79B-42C7-AA06-272AC1FD3FD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe FirewallRules: [{1CE37571-84AF-4ABB-A8C0-0F49D43E7B06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{A65F6C16-20BE-4EF6-A47F-1BDC1CB877A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [TCP Query User{418D07BE-F299-45FD-A943-B229AC5CDFF7}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{B596FDD7-D7DF-4C4E-B4C0-FEF78AA31B56}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [{7FE1BCA9-6A41-464F-AB3F-3890D2BE994E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe FirewallRules: [{74FB7430-B31F-4491-81F2-AEDE20A30555}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe FirewallRules: [TCP Query User{2CF3AF33-F6DD-4B4E-A781-9E8AECA4B2DB}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe FirewallRules: [UDP Query User{F955A202-37F3-48F3-9963-3F577936D3D8}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe FirewallRules: [TCP Query User{C4E26481-2674-4E8D-888C-F4B97390FEC8}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [UDP Query User{0B8D3671-F421-4CDC-8F93-696568A6BF3A}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [{4A804C86-3D0E-41DE-A04B-2059EACF56AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe FirewallRules: [{9FDE1B25-0444-4B25-B783-01466B019093}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe FirewallRules: [{86FA98A5-C32A-4C18-B172-6FA5F7A3E6FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe FirewallRules: [{0F614910-EB72-40D7-8D1A-DB05AE45268B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe FirewallRules: [{2D909357-E1CC-4059-9BE2-F378B8FD27ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe FirewallRules: [{AF215EA1-D65E-4EEC-B881-54BB260931F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe FirewallRules: [{A314D191-236D-40ED-A97C-84B1382CD9D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [{FB41B73B-9FB7-40C0-A815-91B5844F0A86}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [{86E95A74-3C2D-4477-AA16-63B960533EBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{C62F2282-A632-4D45-A993-C605397278FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{4970D921-573D-41C4-A499-D902776D0A75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{5DA59697-126A-43BC-A76C-0FE5808F4CCD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{DD125661-074D-4809-9CF5-D27BC63247FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [{C7B96FA9-D8B3-4918-9FC5-8F0A026D9ABF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [TCP Query User{B0C11404-E047-4560-8C3E-2101487BFD17}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{5B614511-D2B5-42B2-8EFF-12DC63099362}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe FirewallRules: [{6FA08711-FA02-40F8-805A-A5BD4A8AD497}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [{E0735F4D-C016-4CEA-992A-5BFCA16FA16F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [TCP Query User{531CD087-1FD3-427F-AEEF-9BF33B602A34}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{DE727DD4-956D-4030-AD53-B120E8617707}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{015258E0-1C61-470D-ABD0-03EE61DCB927}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{4E8E48CF-080F-4BF7-829B-631C0722201C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [{3A8335AE-1D56-420A-9BDA-366BCA204C4D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe FirewallRules: [{40A574E9-9006-452E-9FCE-C35C7E812858}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe FirewallRules: [TCP Query User{7BFB73E4-059E-4EED-BCEC-962029B4051E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [UDP Query User{6DB8B4CD-B390-4FFD-9DEB-9FB8AC5F2269}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [{17D45D55-4125-48F6-AF03-BF7B3AC59F85}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{63368E35-39D1-46FA-BFA9-A5D306C7A786}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{FDB0D517-2621-49BA-8597-775AB1E8A634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe FirewallRules: [{A3697632-BF0A-4456-A039-157A637BE1DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe FirewallRules: [{231218A3-A868-490B-B030-86724B751BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe FirewallRules: [{30C2BA34-E739-474A-AC9B-93121BF7C8F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe FirewallRules: [TCP Query User{53B8DBD5-45C0-43D1-B13B-CB81DFC1B16A}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{8C707E14-4627-48DC-8728-B5A339D9ABA6}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [{43BDEF27-F8F0-4345-9C7D-C2BF58CBB437}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe FirewallRules: [{E38F3897-DD1B-4976-AE52-F8948D2BB03C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe FirewallRules: [{D205C38A-492F-4E56-8801-15058FCFC727}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe FirewallRules: [{EC3782A0-77B6-4B0A-84AA-E761E30432FE}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe FirewallRules: [TCP Query User{28011C1A-4696-4E42-965F-ECE7815D1622}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{0EB3380C-9299-40AB-8DDA-DCF9B6087A14}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{B7ECFE66-DF75-4475-B1DB-D567E76E0EA5}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{44719AD9-4ABF-4838-AA5F-77A657E4AAC1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [{E3E0B992-FD0D-44A1-9586-C4506C473FA2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [{A6FD4105-28B5-444D-9386-5DFDE2C14A88}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [{8A2CF538-1720-4AC5-9F70-C86C962079F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe FirewallRules: [{97CFB8D5-F8A3-4846-89CA-B467D49799E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe FirewallRules: [{F33EE6CA-7BE1-46BE-81C8-F4BD07142991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe FirewallRules: [{A989471E-8638-431E-BEA7-5E54F3082EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe FirewallRules: [{7C9D21DF-71D7-4C87-9C83-89933FB885C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe FirewallRules: [{235D4BEF-91AB-4A6E-8544-862644AC41B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe FirewallRules: [{FD7F8105-195E-4FA7-9D06-58BB46664F9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{C1E509A6-9625-4C8F-ADB5-7C010B4FE60B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{CBD45096-A07E-45AE-8636-E292FDAFABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{9AD02822-07CD-4D8E-A516-A8B8B0DC174C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{CDB75FA1-71E4-43C1-8089-F1863611FE36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe FirewallRules: [{28DD4323-0A6F-4FB6-A483-DD98025EC013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe FirewallRules: [{4D87DB15-E63B-48D5-BA12-B4BAAD0BFE9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe FirewallRules: [{B19ABA1C-9040-4FE8-876C-2D54E7429DFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe FirewallRules: [{44341CF7-ED26-4B09-BE7B-8446914DD25E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe FirewallRules: [{E823473E-E459-483A-9F1D-04771754E682}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe FirewallRules: [TCP Query User{41F66013-E76E-478D-B5AF-C717F6488426}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe FirewallRules: [UDP Query User{044E35C7-522D-4C58-B75A-70DED3A3FD2F}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe FirewallRules: [TCP Query User{92DAD1C6-8E81-4C18-90D4-9BF3A3B224D4}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe FirewallRules: [UDP Query User{8C200012-F04E-41F1-999E-28C84B1757B7}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe FirewallRules: [TCP Query User{89F2BBBC-3ADA-415C-8A60-75C998A85EA9}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [UDP Query User{4D9A295B-93BF-464C-8E14-DB2E4ECE2CCB}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [TCP Query User{E585902E-45FB-459E-9833-D51B3A0B97FA}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe FirewallRules: [UDP Query User{65B80045-A974-4840-A504-1716D37F8292}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe FirewallRules: [TCP Query User{283F0FDB-5D18-4F6C-A46B-A191A532FE1E}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{019383CE-32E6-4661-8CE8-6A6939D05215}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [{BD7D71B3-8412-4386-B4D7-4575D87D5493}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{814D5851-E61E-42F5-B6E5-D3C3A05F0D09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{4A6C6276-8A80-4477-BA8B-12FC552E90B9}] => (Allow) LPort=2869 FirewallRules: [{E1B4F73D-B362-4B08-9CB3-30C171E1C3CF}] => (Allow) LPort=1900 FirewallRules: [{71D1E2BF-B86A-4C9A-A9EC-7F3078EA4515}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{555FF4A6-13F9-4E46-8275-9BEA4F1B89FF}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe FirewallRules: [{526A9CE3-1D4E-4FCA-9EAF-919C328E0DDE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe FirewallRules: [{6C3427F9-7B29-4CAA-B40D-43C2814D5E12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/08/2015 04:38:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 03:59:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 03:48:46 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 12:56:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Name des fehlerhaften Moduls: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000011aa ID des fehlerhaften Prozesses: 0x1768 Startzeit der fehlerhaften Anwendung: 0xn4ldsfo8.exe0 Pfad der fehlerhaften Anwendung: n4ldsfo8.exe1 Pfad des fehlerhaften Moduls: n4ldsfo8.exe2 Berichtskennung: n4ldsfo8.exe3 Error: (08/08/2015 11:50:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Name des fehlerhaften Moduls: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000011aa ID des fehlerhaften Prozesses: 0x1be0 Startzeit der fehlerhaften Anwendung: 0xn4ldsfo8.exe0 Pfad der fehlerhaften Anwendung: n4ldsfo8.exe1 Pfad des fehlerhaften Moduls: n4ldsfo8.exe2 Berichtskennung: n4ldsfo8.exe3 Error: (08/08/2015 11:47:57 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: fo8kzmij.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Name des fehlerhaften Moduls: fo8kzmij.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000011aa ID des fehlerhaften Prozesses: 0x1a9c Startzeit der fehlerhaften Anwendung: 0xfo8kzmij.exe0 Pfad der fehlerhaften Anwendung: fo8kzmij.exe1 Pfad des fehlerhaften Moduls: fo8kzmij.exe2 Berichtskennung: fo8kzmij.exe3 Error: (08/08/2015 11:18:10 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 10:28:18 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 01:01:39 AM) (Source: ESENT) (EventID: 454) (User: ) Description: taskhost (1812) WebCacheLocal: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -1014 auf. Error: (08/08/2015 12:59:45 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Systemfehler: ============= Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Dell Data Vault" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts. Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts. Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Dell Data Vault Wizard" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Alienware Fusion Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/08/2015 05:37:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (08/08/2015 05:37:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Dell SupportAssist Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office: ========================= Error: (08/08/2015 04:38:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 03:59:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 03:48:46 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 12:56:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: n4ldsfo8.exe2.1.19357.052e7ea83n4ldsfo8.exe2.1.19357.052e7ea83c0000005000011aa176801d0d1c8d6bde70eC:\Users\*****\Desktop\n4ldsfo8.exeC:\Users\*****\Desktop\n4ldsfo8.exe1a3c4e97-3dbc-11e5-a3db-f04da2de4d5f Error: (08/08/2015 11:50:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: n4ldsfo8.exe2.1.19357.052e7ea83n4ldsfo8.exe2.1.19357.052e7ea83c0000005000011aa1be001d0d1bf9b1b7239C:\Users\*****\Downloads\n4ldsfo8.exeC:\Users\*****\Downloads\n4ldsfo8.exedee9336c-3db2-11e5-a3db-f04da2de4d5f Error: (08/08/2015 11:47:57 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: fo8kzmij.exe2.1.19357.052e7ea83fo8kzmij.exe2.1.19357.052e7ea83c0000005000011aa1a9c01d0d1bf47533a7cC:\Users\*****\Downloads\fo8kzmij.exeC:\Users\*****\Downloads\fo8kzmij.exe8c06a41c-3db2-11e5-a3db-f04da2de4d5f Error: (08/08/2015 11:18:10 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 10:28:18 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/08/2015 01:01:39 AM) (Source: ESENT) (EventID: 454) (User: ) Description: taskhost1812WebCacheLocal: -1014 Error: (08/08/2015 12:59:45 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity: =================================== Date: 2015-08-04 23:40:33.548 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:33.427 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:32.760 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:32.474 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Speicherinformationen =========================== Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz Percentage of memory in use: 29% Total physical RAM: 8086.79 MB Available physical RAM: 5712.14 MB Total Virtual: 16171.78 MB Available Virtual: 13762.27 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:930.74 GB) (Free:185.25 GB) NTFS Drive d: (ROMETWGOLD) (CDROM) (Total:3.58 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 606F7C4F) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=752 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS) ==================== Ende von log ============================ |
08.08.2015, 21:59 | #5 |
/// TB-Ausbilder | Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern. Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start CloseProcesses: AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden C:\ProgramData\SecurityUtility GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & ' Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & ' Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG RemoveProxy: CMD: ipconfig /flushdns CMD: netsh winsock reset EmptyTemp: end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade Dir bitte SecurityCheck und:
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
09.08.2015, 21:59 | #6 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. FRST-fix: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:08-08-2015 durchgeführt von ***** (2015-08-09 16:26:21) Run:2 Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: *****) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** start CloseProcesses: AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden C:\ProgramData\SecurityUtility GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & ' Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & ' Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG RemoveProxy: CMD: ipconfig /flushdns CMD: netsh winsock reset EmptyTemp: end ***************** Prozess erfolgreich geschlossen. "C:\ProgramData\SecurityUtility\SecurityUtility64.dll" => Wert Daten nicht gefunden. "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" => Wert Daten nicht gefunden. "C:\ProgramData\SecurityUtility" => Datei/Ordner nicht gefunden. "C:\Windows\system32\GroupPolicy\Machine" => Datei/Ordner nicht gefunden. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Wert nicht gefunden. HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Schlüssel nicht gefunden. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Wert nicht gefunden. HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Schlüssel nicht gefunden. Winsock: Catalog5 entry 000000000005\\LibraryPath was set successfully to %SystemRoot%\System32\mswsock.dll Winsock: Catalog entry 000000000011 => nicht gefunden. Winsock: Catalog5-x64 entry 000000000005\\LibraryPath was set successfully to %SystemRoot%\System32\mswsock.dll Winsock: Catalog entry 000000000011 => nicht gefunden. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{169D9857-DBC1-4668-805B-E07AE111DF57} => Schlüssel nicht gefunden. C:\Windows\System32\Tasks\RNKCKUYTBN1 nicht gefunden. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNKCKUYTBN1 => Schlüssel nicht gefunden. C:\Windows\Tasks\RNKCKUYTBN1.job nicht gefunden. ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt HKU\S-1-5-21-2025296424-690445150-2269518065-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt HKU\S-1-5-21-2025296424-690445150-2269518065-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt ========= Ende von RemoveProxy: ========= ========= ipconfig /flushdns ========= Windows-IP-Konfiguration Der DNS-Aufl�sungscache wurde geleert. ========= Ende von CMD: ========= ========= netsh winsock reset ========= Der Winsock-Katalog wurde zur�ckgesetzt. Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en. ========= Ende von CMD: ========= EmptyTemp: => 20.4 GB temporäre Dateien entfernt. Das System musste neu gestartet werden.. ==== Ende von Fixlog 16:27:38 ==== Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # end=init # utc_time=2015-08-09 02:39:54 # local_time=2015-08-09 04:39:54 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.1.7601 NT Service Pack 1 Update Init Update Download Update Finalize Updated modules version: 25196 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # end=updated # utc_time=2015-08-09 03:04:10 # local_time=2015-08-09 05:04:10 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.1.7601 NT Service Pack 1 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # engine=25196 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-08-09 03:50:35 # local_time=2015-08-09 05:50:35 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='avast! Internet Security' # compatibility_mode=779 16777213 85 74 4426135 203555925 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 86663 190765285 0 0 # scanned=155017 # found=0 # cleaned=0 # scan_time=2785 ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # end=init # utc_time=2015-08-09 03:51:37 # local_time=2015-08-09 05:51:37 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.1.7601 NT Service Pack 1 Update Init Update Download esets_scanner_update returned -1 esets_gle=53251 Update Finalize Updated modules version: 25196 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # end=updated # utc_time=2015-08-09 03:53:33 # local_time=2015-08-09 05:53:33 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.1.7601 NT Service Pack 1 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=2dbae0df863471419304198f02b3d5a4 # engine=25196 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-08-09 07:31:04 # local_time=2015-08-09 09:31:04 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='avast! Internet Security' # compatibility_mode=779 16777213 85 74 4439364 203569154 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 99892 190778514 0 0 # scanned=717051 # found=0 # cleaned=0 # scan_time=13050 Code:
ATTFilter Results of screen317's Security Check version 1.006 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 45 Java version 32-bit out of Date! Adobe Flash Player 18.0.0.209 Adobe Reader 10.1.15 Adobe Reader out of Date! Mozilla Firefox 30.0 Firefox out of Date! Google Chrome (44.0.2403.125) Google Chrome (44.0.2403.130) Google Chrome (wtsapi32.dll..) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast ng vbox\AvastVBoxSVC.exe AVAST Software Avast ng ngservice.exe AVAST Software Avast avastui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Hier das FRST logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015 durchgeführt von ***** (Administrator) auf CHRISTOPHBULDT (09-08-2015 22:52:27) Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: *****) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Computec Media AG) C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe (Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe () C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe (Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe (Curse) C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe (Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (NCSOFT Corporation) C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe (PC-Doctor, Inc.) C:\Program Files\Alienware\SupportAssist\imstrayicon.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor) HKLM\...\Run: [] => [X] HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.) HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] () HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112" HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] () Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08] ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22] ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Keine Datei Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] () FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks) FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud) FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06] CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14] CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation) R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.) R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] () R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] () R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation) R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software) R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-09 22:51 - 2015-08-09 22:51 - 00001133 _____ C:\Users\*****\Desktop\checkup.txt 2015-08-09 22:45 - 2015-08-09 22:45 - 00852684 _____ C:\Users\*****\Desktop\SecurityCheck.exe 2015-08-09 16:45 - 2015-08-09 16:45 - 00003504 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask 2015-08-09 16:36 - 2015-08-09 16:36 - 02870984 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_deu.exe 2015-08-09 16:30 - 2015-08-09 16:30 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-08-08 17:41 - 2015-08-08 17:48 - 00002552 _____ C:\Users\*****\Desktop\JRT.txt 2015-08-08 17:36 - 2015-08-08 17:36 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Desktop\JRT.exe 2015-08-08 17:31 - 2015-08-08 17:31 - 00001813 _____ C:\Users\*****\Desktop\MWAB.txt 2015-08-08 16:34 - 2015-08-08 16:34 - 00001225 _____ C:\Users\*****\Desktop\Zweiter Suchlauf MwB.txt 2015-08-08 15:56 - 2015-08-08 16:35 - 00226304 _____ C:\Users\*****\Desktop\DownloadProtectCleaner-reboot.exe 2015-08-08 15:54 - 2015-08-08 15:54 - 00326656 _____ C:\Users\*****\Desktop\DownloadProtectCleaner.exe 2015-08-08 13:04 - 2015-08-08 13:04 - 00023526 _____ C:\Users\*****\Desktop\Addition.zip 2015-08-08 12:44 - 2015-08-09 22:52 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion 2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt 2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Desktop\n4ldsfo8.exe 2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Desktop\fo8kzmij.exe 2015-08-08 11:42 - 2015-08-09 22:52 - 00026869 _____ C:\Users\*****\Desktop\FRST.txt 2015-08-08 11:42 - 2015-08-09 22:52 - 00000000 ____D C:\FRST 2015-08-08 11:42 - 2015-08-08 17:44 - 00093701 _____ C:\Users\*****\Desktop\Addition.txt 2015-08-08 11:41 - 2015-08-09 22:52 - 02171392 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe 2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log 2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable 2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe 2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt 2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt 2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt 2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe 2015-08-08 01:09 - 2015-08-09 16:30 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner 2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner 2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa 2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin 2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin 2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz 2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz, 2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz 2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz, 2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg 2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder 2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft 2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft 2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe 2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-08-04 23:34 - 2015-08-09 16:31 - 00000000 ____D C:\Users\*****\Tracing 2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG 2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de 2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL 2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe 2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live 2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live 2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma 2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma 2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4 2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium 2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool 2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini 2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe 2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll 2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll 2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe 2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS 2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS 2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe 2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software 2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS 2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015 2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk 2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime 2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta 2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta 2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF 2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk 2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll 2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll 2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games 2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe 2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe 2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit 2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-09 22:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-09 22:36 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment 2015-08-09 22:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job 2015-08-09 22:12 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-09 22:12 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-09 22:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-09 17:02 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files 2015-08-09 16:49 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify 2015-08-09 16:49 - 2012-01-20 14:08 - 01272210 _____ C:\Windows\WindowsUpdate.log 2015-08-09 16:47 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify 2015-08-09 16:32 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox 2015-08-09 16:32 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox 2015-08-09 16:31 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-08-09 16:30 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-09 16:29 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-09 16:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-09 16:29 - 2009-07-14 06:51 - 00178146 _____ C:\Windows\setupact.log 2015-08-09 16:28 - 2010-11-21 05:47 - 00447182 _____ C:\Windows\PFRO.log 2015-08-09 16:14 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-08-09 16:08 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\***** 2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net 2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk 2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk 2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa 2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll 2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe 2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa 2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak 2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo 2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales 2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir 2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job 2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log 2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat 2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat 2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client 2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther 2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta 2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes 2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod 2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes 2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList 2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList 2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele 2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War 2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA 2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core 2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack 2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA 2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs 2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk 2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT 2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt 2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt 2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history 2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat 2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini Einige Dateien in TEMP: ==================== C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgf3wd2.dll ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 08:13 ==================== Ende von log ============================ |
09.08.2015, 22:01 | #7 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Und hier das addition-logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-08-2015 durchgeführt von ***** (2015-08-09 22:52:57) Gestartet von C:\Users\*****\Desktop Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2025296424-690445150-2269518065-500 - Administrator - Disabled) ASPNET (S-1-5-21-2025296424-690445150-2269518065-1334 - Limited - Enabled) ***** (S-1-5-21-2025296424-690445150-2269518065-1001 - Administrator - Enabled) => C:\Users\***** Gast (S-1-5-21-2025296424-690445150-2269518065-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2025296424-690445150-2269518065-1003 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader X (10.1.15) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.15 - Adobe Systems Incorporated) Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios) Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios) Age of Mythology: Extended Edition (HKLM-x32\...\Steam App 266840) (Version: - SkyBox Labs) Age of Wonders 2 (HKLM-x32\...\Steam App 61510) (Version: - Triumph Studios) Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version: - Triumph Studios) Aion (HKLM-x32\...\{B9291CA2-6FA5-44EA-8EE0-923EB32ADAAB}) (Version: 4.0.0.3 - NC Interactive, LLC) Akamai NetSession Interface (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Alienware Command Center (HKLM-x32\...\InstallShield_{131A7AD3-1078-4B08-95E6-B457D18C40DF}) (Version: 2.7.24.0 - Alienware Corp.) Alienware Command Center (Version: 2.7.24.0 - Alienware Corp.) Hidden Amazon Music (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC) Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Blasc3 (HKLM-x32\...\{59FD1BDF-FEC7-403E-97FC-FBE437154BD2}) (Version: 1.0.0 - Computec Media AG) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation) Cool Edit 96 (HKLM-x32\...\Cool Edit 96) (Version: - ) Cossacks II: Battle for Europe (HKLM-x32\...\Steam App 4890) (Version: - GSC Game World) Cossacks: Art of War (HKLM-x32\...\Steam App 4870) (Version: - GSC Game World) Cossacks: Back to War (HKLM-x32\...\Steam App 4850) (Version: - GSC Game World) Cossacks: European Wars (HKLM-x32\...\Steam App 4880) (Version: - GSC Game World) Curse Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dawn of Fantasy: Kingdom Wars (HKLM-x32\...\Steam App 227180) (Version: - Reverie World Studios) Dell Data Vault (Version: 4.3.4.0 - Dell Inc.) Hidden Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell) Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.0.47 - Dell) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) diclovit's mod pack 9.9.0 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.9.0 - diclovit) Disciples III: Renaissance (HKLM-x32\...\Steam App 33670) (Version: - Akella) Dropbox (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.) DUNGEONS - Steam Special Edition (HKLM-x32\...\Steam App 57650) (Version: - Realmforge Studios) Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly) FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GameRanger (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\GameRanger) (Version: - GameRanger Technologies) GameSpy Comrade (HKLM-x32\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy) gnuplot 4.6.3 (HKLM-x32\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 4.6.3 - gnuplot development team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.) Google Drive (HKLM-x32\...\{6EA8B94E-D869-4D96-88DF-5E1ECE1D6876}) (Version: 1.23.9648.8824 - Google, Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.) Grand Ages: Rome (HKLM-x32\...\Steam App 23450) (Version: - Haemimont Games) GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd) Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) Happy Cloud Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.) Imperium Romanum: Gold Edition (HKLM-x32\...\Steam App 23400) (Version: - Haemimont Games) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2462 - Intel Corporation) iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.) Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games) LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation) Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Americas (HKLM-x32\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Britannia (HKLM-x32\...\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Crusades (HKLM-x32\...\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}) (Version: 1.03.000 - SEGA) Medieval II Total War : Kingdoms : Teutonic (HKLM-x32\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA) Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSI ODD Monitor (HKLM-x32\...\InstallShield_{B7D9BAAA-F068-4BF8-B929-462C3A8AB677}) (Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) MSI ODD Monitor (x32 Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) Hidden Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig) MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others) NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT) NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) NWZ-E450 WALKMAN Guide (HKLM-x32\...\{0A6C2811-AD29-473F-8086-F0B401276DEC}) (Version: 2.1.0.17210 - Sony Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.) QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6494 - Realtek Semiconductor Corp.) Rome: Total War - Alexander (HKLM-x32\...\Steam App 4770) (Version: - The Creative Assembly) Rome: Total War (HKLM-x32\...\Steam App 4760) (Version: - The Creative Assembly) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Shogun - Total War - Gold Edition (HKLM-x32\...\{8A03FE64-0C8B-4E8F-B488-F36BA40A8640}) (Version: 1.00.0000 - The Creative Assembly) Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games) Spotify (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB) Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios) Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version: - Petroglyph) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) STAR WARS® - Galactic Battlegrounds Saga (HKLM-x32\...\1421404646_is1) (Version: 2.0.0.2 - GOG.com) StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.0.23077 - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version: - FireFly Studios) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH) TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team) The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version: - Turbine, Inc.) Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version: - Creative Assembly) Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly) Tropico (HKLM-x32\...\Steam App 33520) (Version: - PopTop Software) Unity Web Player (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment) Warhammer Online: Age of Reckoning (HKLM-x32\...\Warhammer Online: Age of Reckoning) (Version: - Electronic Arts) Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version: - Relic Entertainment) WildStar (HKLM-x32\...\WildStar) (Version: - NCSOFT) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version: - Wargaming.net) World of Warships (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) XSplit Gamecaster (HKLM-x32\...\{D7BEC6E9-5E86-44FF-AA21-23DA71ED676B}) (Version: 2.4.1506.1243 - SplitmediaLabs) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{cbd31018-8e26-442c-b791-0d5a2dc52d3f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.) ==================== Wiederherstellungspunkte ========================= 19-06-2015 19:37:03 Windows Update 23-06-2015 12:36:31 Windows Update 26-06-2015 16:59:35 Windows Update 30-06-2015 11:08:50 Windows Update 07-07-2015 14:45:41 Windows Update 08-07-2015 02:13:35 DirectX 9.0 wurde installiert 10-07-2015 16:15:57 Windows Update 14-07-2015 14:14:07 Windows Update 15-07-2015 05:57:23 Windows Update 15-07-2015 17:24:02 Windows Update 16-07-2015 19:32:26 Installed XSplit Gamecaster 19-07-2015 21:48:26 Entfernt Rome - Total War - Gold Edition 21-07-2015 15:31:51 Windows Update 22-07-2015 03:00:16 Windows Update 28-07-2015 10:05:34 Windows Update 29-07-2015 00:45:23 Windows Update 01-08-2015 17:37:44 Windows Update 04-08-2015 23:19:46 Windows Live Essentials 04-08-2015 23:22:07 DirectX wurde installiert 04-08-2015 23:23:13 DirectX wurde installiert 04-08-2015 23:24:28 DirectX wurde installiert 04-08-2015 23:26:47 WLSetup 04-08-2015 23:41:48 AVG PC TuneUp 2015 wird entfernt 04-08-2015 23:42:44 AVG PC TuneUp 2015 wird entfernt 04-08-2015 23:43:37 AVG PC TuneUp 2015 (de-DE) wird entfernt 04-08-2015 23:51:33 Windows Update 08-08-2015 00:50:40 AVG PC TuneUp 2015 wird entfernt 08-08-2015 00:53:07 AVG PC TuneUp 2015 (de-DE) wird entfernt 08-08-2015 00:53:55 Windows Update 08-08-2015 17:37:13 JRT Pre-Junkware Removal ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {03C20EC4-40F1-4736-B58B-841D9238FE78} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {0E897781-5457-4E56-AC1D-4958A8151EE7} - System32\Tasks\{FEFF5C65-B1CE-4B65-B02C-D0B2955F5EDB} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-90.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist" Task: {30DC20C1-9AD5-46DC-914C-05F55D57FCEB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {36A75BD1-C1FC-43E5-B5D9-278175107813} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation) Task: {4069B3FC-2DA2-447A-9744-EFEA6A95E0F3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.) Task: {4465B507-AD8A-4E9A-B9B0-417D14EE6E6E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {65D30786-D67E-476F-A07B-31AE1240421E} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2015-04-26] (Apple Inc.) Task: {727C874E-08D9-48F5-AD14-2CF779759EF6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.) Task: {87A603EB-E64F-4596-B57E-20E465F8C720} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation) Task: {B3BCD2E7-F24D-4AC6-8AFC-17322662FBB2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {B8318A20-6BA9-4F3F-A8B8-E5FE073B0513} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated) Task: {C181E0D5-A935-4D88-B2C7-7D097C317E46} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Alienware\SupportAssist\sessionchecker.exe [2015-05-25] (PC-Doctor, Inc.) Task: {C4EC3CD5-60E7-422C-8F52-5B2924ACD6A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.) Task: {D00721E5-2540-483F-8323-4AE71B53791C} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {D0CA070E-7436-46EF-9128-D0DDBD4451B5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation) Task: {D5D16122-8D52-49BA-A53F-060CF711B465} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-06-11] (Dell Inc.) Task: {F4BF3CD9-278D-4500-9875-1A825B8A5A9B} - System32\Tasks\{13FFD5A0-546B-4A2E-A0F2-8AC4715EF0B9} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-100-sp1.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist" (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2014-11-03 05:59 - 2014-10-16 18:54 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2012-01-20 14:06 - 2014-10-16 16:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-03-21 17:20 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2012-01-20 22:53 - 2011-07-26 20:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-11-23 04:29 - 2014-11-19 02:55 - 06277952 _____ () C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe 2015-06-16 15:29 - 2015-06-16 15:29 - 00016384 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.WowDb.dll 2015-06-16 15:29 - 2015-06-16 15:29 - 00035840 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.Advertising.dll 2015-06-16 15:29 - 2015-06-16 15:29 - 00099840 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.CMOD2.dll 2015-03-31 14:09 - 2015-05-20 03:28 - 00107256 _____ () C:\Program Files\Alienware\SupportAssist\libCSharpCommonCS.dll 2015-03-31 14:09 - 2015-05-20 03:28 - 00553720 _____ () C:\Program Files\Alienware\SupportAssist\libAsapiCSharp.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-08-09 16:09 - 2015-08-09 16:09 - 02960384 _____ () C:\Program Files\AVAST Software\Avast\defs\15080900\algo.dll 2012-01-20 22:54 - 2014-10-16 18:54 - 00013120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2015-08-09 16:32 - 2015-08-09 16:32 - 00071168 _____ () c:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgf3wd2.dll 2015-03-04 23:45 - 2015-07-17 02:31 - 00012800 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll 2015-03-04 23:45 - 2015-07-17 02:31 - 00779776 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-07-31 16:51 - 2015-07-17 02:31 - 00056320 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-03-04 23:45 - 2015-07-17 02:31 - 00012288 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll 2015-04-22 22:32 - 2015-04-22 22:32 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-08-08 00:26 - 2015-08-08 00:26 - 00012288 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll 2015-08-05 03:08 - 2015-07-31 08:19 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll 2015-08-05 03:08 - 2015-07-31 08:19 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2025296424-690445150-2269518065-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist deaktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [TCP Query User{0251ACFB-8F10-4242-82D5-75D58E223008}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe FirewallRules: [UDP Query User{ADC9FDE2-F4EB-4C85-9582-A86AF231B1DB}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe FirewallRules: [{EE519961-DFE1-47CB-ABC2-400DC1206F93}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{0EBA76C8-A25F-4899-A025-7AB08C5BDB40}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{50935E8B-8DD1-455D-A9BB-A8D648BBF707}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{F638167A-5DC7-4D25-8AA7-2F1CC486DBB2}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe FirewallRules: [{914446D5-53EB-4EDB-94D7-F23CAFAADA5B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe FirewallRules: [{C7EA0C2E-5216-4808-8AEA-1E0749EA260E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe FirewallRules: [{CB4993E2-1739-4AF0-B269-A182883F794E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe FirewallRules: [{F64284A3-396B-4F0D-9295-73FAF85A9549}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe FirewallRules: [TCP Query User{015752AF-CC12-4844-9107-5B23BB3FE8AB}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7C437135-EF71-4065-9981-FD87E5C8DEBA}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe FirewallRules: [{349F76F6-0E43-4A72-AAFC-247A6842E9E4}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [{CC92EC73-9332-4A30-B762-4780B8AC809D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [{BA0DC8FF-F484-48E1-B463-D91F2F1BA6CA}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{C79CA4D9-C1A4-4ED6-A73F-BB2339CD0261}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe FirewallRules: [TCP Query User{943A8B51-7349-45DC-9254-E0EFB47EB7DA}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe FirewallRules: [UDP Query User{E3577156-3EA3-4A26-946B-870F42C076A5}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe FirewallRules: [{8F64E7C7-F2B4-43AF-B4BE-FDDF2C613262}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe FirewallRules: [{4B9DA593-42B8-4232-BD37-70284244BBFC}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe FirewallRules: [TCP Query User{EFCD4C90-EA06-40FD-AD9A-2E50601401DD}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe FirewallRules: [UDP Query User{A7122FFD-F591-4013-9ECA-0FF851E65155}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe FirewallRules: [{309A7FC0-7F0D-4344-8484-814CEA4213A0}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{12F0F1B9-46B7-4DF1-8DCD-448D9EADA4EA}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe FirewallRules: [TCP Query User{8FFD5267-9A2B-48C2-8F06-BFC2AF806F29}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe FirewallRules: [UDP Query User{03F5CCBC-11D8-4E50-9810-1EC1CF981A39}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe FirewallRules: [{B9401DBC-3331-46B0-9CA3-77038CCD2C6E}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{DF284FCB-ED45-452B-BAC1-BEEC4A455B14}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{11D3468E-4DCB-4BD5-B3E8-7F1E27A948F5}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{A41BA3B0-96D6-40AB-9FCA-BCD1B2791EEF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{42A3892E-23BE-439B-9507-F7619A426826}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{4E23E1FB-C0D6-49E9-AAB1-27D72C79F843}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{C741D5EB-A2E2-4675-9E05-866F8BB21349}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{FBECEDCA-5409-45AC-B941-9424882B389B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe FirewallRules: [{43AED376-03F3-4844-8621-F24C53765706}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe FirewallRules: [{F8F95744-2953-4E94-BB46-3F5616602006}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe FirewallRules: [{4AE95902-BE71-4EC9-AB5D-98260BC2CFFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe FirewallRules: [TCP Query User{5FF02B8C-680A-4FE8-AC98-B3E0218FFB4C}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe FirewallRules: [UDP Query User{6C752DA4-F222-4E54-A846-4E10047EB128}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe FirewallRules: [{5D2B5538-9D14-41FE-A7D6-6152D5B14D31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe FirewallRules: [{B71B1F03-5326-4897-A528-8ED39B1A1C49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe FirewallRules: [{3CEF8494-3EF5-4D6F-95FE-2C2108688812}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{E02C4A51-8790-44F2-BFFB-32DC03E24486}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{24BF9231-06B3-4962-84DF-419C8030F114}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{A76F92AA-6071-4133-9D03-E692D3459DDA}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{E4C884D4-7FC4-4C78-8E06-DCD37188AF90}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{B4C1BA76-4008-4E6F-B4C5-E63C5A9A4962}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{7D7E9C8C-DEBD-4B86-A24F-00E54BDDA613}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C635E2E8-0684-4EAF-B6A3-712055BF595D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{BA861A84-22A8-4F0B-A836-07BC1BC84599}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt FirewallRules: [{24030535-9C04-4370-B3B8-2FFDD5419CC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt FirewallRules: [{EEB28177-078B-47A4-A1E9-32CB98A1B998}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf FirewallRules: [{C757B3B0-8F6F-4803-9A30-086BC588C713}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf FirewallRules: [{EC7636C5-27E0-44E4-AE2B-C951ABCBE837}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html FirewallRules: [{9C1BDABF-2443-4B1D-8D40-09EAC3498DC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html FirewallRules: [{3DC71454-4E25-4044-9C2F-2A36067BF271}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf FirewallRules: [{7ECB4059-9323-422C-A4E8-47AD5BEA7A63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf FirewallRules: [{45FF3A56-0CF5-4337-A78F-49E65B1DE721}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe FirewallRules: [{D79A69F9-026C-4197-AB97-16CA202E638C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe FirewallRules: [TCP Query User{80DA892B-37F0-4281-AD10-BB3F5E7E8381}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe FirewallRules: [UDP Query User{42E5E64D-7ED8-44E4-9DB1-085EF7B8B41E}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe FirewallRules: [{C13CEAD8-59FF-497D-9A4F-5E0370FFD512}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{4D1FC9AB-F8D1-4F7D-9673-0B2544313F51}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{54575BE3-5FC3-4F08-95E5-33AB82BC1E54}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{578D9506-D945-43B6-B9B2-203B50311BBA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B2ADAAD8-60DE-4BD9-8D4E-D797C5D00140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html FirewallRules: [{55F46406-342A-44B8-8C59-FCE17E82013D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html FirewallRules: [{BF4E595F-8E17-4043-9FB7-C3A94C12D244}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat FirewallRules: [{EE9D656A-5709-41A1-A241-9B83DD5C36CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat FirewallRules: [{7AEAD203-01C2-4850-AE70-6B08C5ABC495}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat FirewallRules: [{95AE7B89-390A-496F-B196-F0EBED984870}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat FirewallRules: [{084B75D9-AF72-4409-8C88-6DBBD3665E0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe FirewallRules: [{DDD30F9A-3050-4B07-B288-2CFC3D1FF1D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe FirewallRules: [{895C1FD9-A7C3-490D-BBFA-5840A6E956A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe FirewallRules: [{D155A490-7844-42C7-A178-1C09AA7FC231}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe FirewallRules: [{A6196099-492C-466F-ADCB-44469AF7B84F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe FirewallRules: [{6B24D139-7AC0-46FB-BBB7-62B4B444D691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe FirewallRules: [{68A02C29-E545-4F3F-B1B1-ECE94A0FC97A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm FirewallRules: [{4D8CCB77-F9AE-46F2-8A78-BF9B6850DF62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm FirewallRules: [TCP Query User{CB28A092-7F4B-4D49-AA5C-3981737BA3E4}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe FirewallRules: [UDP Query User{F0193006-DDBF-4469-98E5-165044C5D09A}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe FirewallRules: [TCP Query User{E9FDD513-4F3E-4852-BBEB-EB08DAD7F562}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe FirewallRules: [UDP Query User{EFDD6A7A-C4F8-44F5-A2B5-39A5B70A77F6}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe FirewallRules: [TCP Query User{DF5D6BD4-01C5-4576-841E-907E29BF701E}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe FirewallRules: [UDP Query User{70EBBC55-7CC3-49C5-BA00-A38A0EAB5E78}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe FirewallRules: [{DD4A98A4-3190-41EE-AB6B-AA87AA3FB2FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe FirewallRules: [{80704D14-32F9-4725-915D-5855A73903FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe FirewallRules: [{C4C50AF8-FDBD-4E7D-BF98-38B934C58F8A}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{8202CD3A-B7B2-4026-9017-87F7CDA99928}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [TCP Query User{C9BC03BB-898B-43EB-A357-2A7690041E96}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe FirewallRules: [UDP Query User{1662C0B1-6221-4F19-B7C5-571C2321F5E2}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe FirewallRules: [{2DDEC01C-6A21-42B8-A287-8F182BAEDF6D}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe FirewallRules: [{F829CDDC-B1FC-4955-B765-889D62F4D8AE}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe FirewallRules: [{AF1A7839-A8BB-4F69-B9E2-1540096716F6}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe FirewallRules: [{16F7A5B3-4B1C-4085-8971-BDA6A5C0EE44}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe FirewallRules: [{A87862CF-AD30-4A2B-A516-465016EFA16B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{D0B48795-5047-463A-9371-5F33DCEE8E63}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{BD4D1AC5-D483-4E5D-A14A-4DC840DAA775}] => (Allow) C:\Users\*****\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{624E29F4-9DA6-4F81-8DE4-95CE91C4A6A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe FirewallRules: [{26476F6A-D8DE-4A93-ADEF-B7F0FFFFA7DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe FirewallRules: [{0D3AF0A8-8801-4B78-842E-90B7BAD4D95C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [{96576DF3-5A5D-4783-BA82-A978082F390F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [{AB234224-89F6-49AC-984F-3E790888E7B0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe FirewallRules: [{88E49BE1-6DD3-4682-93B0-401DAFA5EF22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe FirewallRules: [{E7F1B4BD-BCA4-453C-9EC4-2374538A57AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe FirewallRules: [{6C1189A1-95D1-4122-8DE2-350D79E8DF6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe FirewallRules: [{2A11819A-4F18-4FA1-BBD7-D56CB04D8360}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{0A0BD680-BBDD-4964-A896-111EBD886B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{5B22CC13-BFFC-4D5F-BD71-F5063CCE892F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [{939CF113-423A-4321-9F36-3D3172E9AB13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [TCP Query User{D8A05BD9-4C60-4C76-A77A-872D3EC843E3}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{FAA01B96-B795-44BD-BDE0-BF6D45F95B77}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{F704AC56-3787-48A1-B60E-D4AAD4A4E386}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{83ACC9A2-0CB6-4157-9CC9-FBBEF6040CBF}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{CA31BFEE-0F8B-4024-8E23-47AF5C3D03C8}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{DC684C0E-C6CF-46FE-B2F1-3E611685C5FD}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{46055201-620C-4BCD-94CC-4099AB13B541}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [{E0B1E5DB-731E-4E07-AE2D-6A3EA6476A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [TCP Query User{0D9ED852-5DD9-4654-9D9E-9C1DD6DB4A69}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe FirewallRules: [UDP Query User{C68D42DD-55F8-4558-BEFF-08352016E6AB}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe FirewallRules: [TCP Query User{28DE63A4-CA9C-4313-81A7-7E30D89C41E8}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe FirewallRules: [UDP Query User{0929412C-38BA-45B1-9BA5-A6B072C1B3F5}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe FirewallRules: [TCP Query User{5F3DC4B3-E3B9-4EC5-98F1-655FD5587AF3}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe FirewallRules: [UDP Query User{55E61591-BF26-4593-8E9E-153D7AFFD62D}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe FirewallRules: [{66A92318-33CF-47FC-8A56-901C809EDAB9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{0B455E08-7215-4A7B-8F6E-76D4E9BBECF6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{5D4EAA31-BAA6-4C40-B9D7-3A3A57B61A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{DC23C8A2-4C71-49D7-9D8B-A3C39A438E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{32DD98BC-2B6C-4BD0-9F95-38A526213637}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{0DF7E29E-4627-4010-8E4E-795C62170D46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{95A75987-BF1E-4D2B-8F25-F18FF281A6D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe FirewallRules: [{F29C65E1-A615-404B-A72A-AFE401666C18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe FirewallRules: [TCP Query User{284CE0CC-41B4-4A9A-80BA-0AB19AB1C27F}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [UDP Query User{28CF3ACF-A0AE-433C-B758-0F5416684912}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [{3F8D1AA0-FDF1-463B-A672-FFC4A5F27A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe FirewallRules: [{F2EF8C94-6BB8-4B99-9A95-AEA7E27EA59F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe FirewallRules: [{7A66ABAB-C574-41A4-AFE3-95F43948DFBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe FirewallRules: [{763F94C6-4057-459E-958C-B8F38FCBAFA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe FirewallRules: [{72C41947-E771-4F58-9B66-3159CA4309C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE FirewallRules: [{5E709D9D-4769-4849-80E1-70D56CAFBB5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE FirewallRules: [{E5836997-BD8A-444C-A42F-146734D12D0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe FirewallRules: [{B03C5E02-C80C-45A8-8DD8-EAD69CD12468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe FirewallRules: [{5C05E1DC-FB5C-40C1-9250-F55E4D38F666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe FirewallRules: [{672FC1B7-C190-4EDD-81DD-9F31DD5CA392}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe FirewallRules: [{EDC9526A-FCD4-4A27-BDB0-02040DFE634A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe FirewallRules: [{A8002DC8-B4C3-4E67-BCF3-09B36DA4DF87}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe FirewallRules: [TCP Query User{4C1BCE32-CCB2-476C-AA49-5CE419A2B51F}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe FirewallRules: [UDP Query User{84A74773-E34A-4B2A-BA58-85E60E551BF2}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe FirewallRules: [{764C0B6E-EF20-444A-98C9-0475EED188E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe FirewallRules: [{E7183E39-39AD-49F2-88A2-AC6F33FB0836}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe FirewallRules: [{72FFA2F5-7067-4C40-8CC9-00F352A790C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe FirewallRules: [TCP Query User{092F9E08-81F4-4C78-813D-256F61EBC7D4}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe FirewallRules: [UDP Query User{DE830FD1-5A12-4461-84C7-83ACAAA7AF17}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe FirewallRules: [{7D08CB81-5A97-49D4-8786-0536F3468AF1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{DC025869-8125-442D-8C68-FA82F9CCDC4F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{81213F41-FDF4-4CD6-B16B-DF5BAC2C96BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe FirewallRules: [{05F72280-7DF9-4CCB-AC89-193F5F821AFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe FirewallRules: [{69CBA4F3-6075-4156-BEE1-3D90ECC59DC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe FirewallRules: [{160AADED-5837-49B2-9A80-1C9E41EB64BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe FirewallRules: [{CDEED061-B078-45CD-B523-59104B55E39E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{07120651-2E37-49A8-8E73-72124163EFF0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{C27D5DF9-ECBA-4F0C-99A4-F963D67283EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{44601D48-28E3-4A21-BDE3-24F1E2E41655}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{2EEF1A05-42E4-4F0A-9E91-C26F2987FDE1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{8A3F3961-8340-41AC-9276-CC735803FBC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{E0CE7F32-573B-4383-89E8-ADDA887EC05D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe FirewallRules: [{11B0EEBB-FEF8-44DD-91F2-1B76046921E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe FirewallRules: [{485B1DA4-3473-4337-8D14-904AE2349099}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe FirewallRules: [{F85F7861-3927-4786-A50E-8019C9BD45B1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe FirewallRules: [{4141D8F6-B1ED-4D33-968C-65E6728F044B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{37DA2E0A-0C1B-4E91-82C5-731DB056BEC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{FE194A7A-3F19-4A59-A46A-C04C6341FBE8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe FirewallRules: [{CBE25DEE-B29C-4747-91DE-7419F2E7E42E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe FirewallRules: [{A2465D6C-8849-43A2-9F59-2DC913C3D8EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{FE25420B-B1F5-4592-A17E-09033A636F85}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{45D1BA0B-0E2D-4A19-A9DE-A380EC6A9AEB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0067A891-CBED-4815-B2D9-F549AB73E8FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{EE12FAB7-66C9-459B-A67A-C2C320D9BFB9}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{F6A37288-865D-4031-B856-66EAAD29F8DA}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe FirewallRules: [{33528BD2-21DE-4B47-84AD-E30DBC14FA0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [{18B81AF8-8A09-4719-B0B8-01BBCBD2093B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [{1E5BC73E-05CA-47B9-AB6D-A58FB7E8681D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe FirewallRules: [{D6A4DCEF-3BF1-4A05-A0A8-2B7E97E02497}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe FirewallRules: [{DB163982-259D-4F73-8F0B-59D23C4ADA22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe FirewallRules: [{2D62B4C2-6E7E-434C-8565-9057ED30F8D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe FirewallRules: [{D0722FB1-E41D-47DE-8F3B-513DD58D60E9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe FirewallRules: [{2FA375AE-FAE3-4CA4-81A2-E27DD18DE170}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe FirewallRules: [{284FF3D0-9031-4127-9107-1AF1B0A59002}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe FirewallRules: [{64ED5AED-D8AB-4295-945C-AFEA943DAC2F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe FirewallRules: [{66349D78-172B-4492-A79E-498E53642382}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe FirewallRules: [{D01CCD26-5B59-419B-A26A-4403BCC035D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe FirewallRules: [{24AAF877-3C25-4916-B251-CDE779C0A033}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{91BCFF5B-FCEE-487A-B60A-5702EEC831C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{4AB85794-AA74-4EA4-A95F-B74716639EB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe FirewallRules: [{E35AB98E-72F3-4BE8-A92B-8ED6F73D7AF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe FirewallRules: [{6734A585-A9ED-4413-BEA3-29F303C7A35D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{FEF460D3-6D89-4629-8CA0-E2542A595F40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{76C85B40-77D6-40F1-8515-44424B0E7C8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe FirewallRules: [{B51ED9FB-02E5-421E-8C73-3B2E4E2E4ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe FirewallRules: [{DB6E781E-7A9D-4010-90F3-CBEDD5F2B05D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{6D4E4E4E-4D4A-4EF1-A6FA-2031EE12AF28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{B2F74E8D-6356-490A-870C-514D2E7A6A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe FirewallRules: [{14ECF0D5-8C32-4367-98F7-4C817402BDE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe FirewallRules: [{CEF4C40A-C4DE-4C7E-956D-1D26419CB58A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe FirewallRules: [{A2708FCA-432B-412E-B206-C0DFB1A27107}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe FirewallRules: [{296F9BE3-B10E-4989-8763-24026D4765C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe FirewallRules: [{48AAB6BE-6774-4B6C-A48B-9C433BB1150C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe FirewallRules: [{182B9192-EEF2-4988-9614-83F3C9127A20}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe FirewallRules: [{4EE6A53C-9516-405B-BCF9-7F3482853648}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe FirewallRules: [{7CCDE8F5-6BC8-4E63-A073-691929B28326}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [{EFA7A645-1C6F-4F99-8A87-9C9093875683}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [TCP Query User{973449FF-EEB6-4194-9041-97FCBBEEA4D3}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe FirewallRules: [UDP Query User{FB80D76E-234F-418B-AD57-6895A8FFC3B1}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe FirewallRules: [{17BD02AF-CB8C-4850-BC3B-C17988F08D0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe FirewallRules: [{0E96E7B9-500F-4BD6-BEA0-CD74B4AF6A74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe FirewallRules: [TCP Query User{222AF928-B487-4ABF-8DE2-39D9251C8BB9}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [UDP Query User{247B8F40-4C7E-4242-9107-08CEEBB2AC34}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [{12649B92-3DD0-471D-B876-E582037200D1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8A444CB3-9B24-4528-AE42-8E24E45A829A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{F0660EA7-1406-4995-9627-AF62F3516145}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{03FC81DF-28DC-44C7-A740-05F4F1A7E1C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{4E8965C4-48E0-4A14-8B91-3EFBA57CCBE8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{17911242-E19B-4BAE-B170-AC187A34D1B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{56D1A343-2EF6-4D75-8D54-F1E05B6E29DD}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [UDP Query User{49EB5140-8CA1-4036-80E3-D00A247AFC56}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [{69846FFB-ABF1-4324-B680-E3DC1ED53D5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe FirewallRules: [{9E428734-13B5-441E-91CE-E314FAD80674}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe FirewallRules: [{FEA5A4C6-C218-427B-8D13-0512D5B02606}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{B48C8E32-FAD6-448F-B17F-5F2758B91A96}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{3C6AF60C-FF76-4F3E-A289-810DD59F72BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe FirewallRules: [{AFE9E6DE-8C75-4F8D-A3C5-AA7ED41ACEFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe FirewallRules: [{DB4E9A26-FF74-4B87-ABA1-7327DB6C8409}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe FirewallRules: [{3935C411-E419-49EF-929C-9B76FCF4F265}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe FirewallRules: [{DDF6892C-FFAA-4250-BEEE-CCCEC26428BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe FirewallRules: [{28D732BF-87D0-438A-A609-5840825B1BBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe FirewallRules: [{EA5946D6-C7D7-484A-8B48-1F983701D10A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe FirewallRules: [{8D439FCC-7044-4AB8-9264-7894FFB8AC72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe FirewallRules: [TCP Query User{58A81076-8275-43E3-B870-B020E086A82F}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe FirewallRules: [UDP Query User{6FF15508-5BF8-4BD0-882D-CF3A2F9EFFD4}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe FirewallRules: [TCP Query User{87FFE026-5E60-47AE-A3BE-22EA19FFAF54}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [UDP Query User{91C55B66-6018-4EE8-B57D-62D1894BA95C}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [{969152DF-1CCF-411E-9BB8-DB5BD1738C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe FirewallRules: [{5C4EAEF4-6A83-4408-9A0B-B304231DF5B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe FirewallRules: [{26A666C8-AEC7-47BB-9ECC-6A029C76962E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe FirewallRules: [{73DEC31D-F4D4-4E0F-B05F-F6CA80BF3D27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe FirewallRules: [{B664A03F-1900-4311-8C91-A7BECC601B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe FirewallRules: [{580E11C3-A79B-42C7-AA06-272AC1FD3FD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe FirewallRules: [{1CE37571-84AF-4ABB-A8C0-0F49D43E7B06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{A65F6C16-20BE-4EF6-A47F-1BDC1CB877A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [TCP Query User{418D07BE-F299-45FD-A943-B229AC5CDFF7}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{B596FDD7-D7DF-4C4E-B4C0-FEF78AA31B56}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [{7FE1BCA9-6A41-464F-AB3F-3890D2BE994E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe FirewallRules: [{74FB7430-B31F-4491-81F2-AEDE20A30555}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe FirewallRules: [TCP Query User{2CF3AF33-F6DD-4B4E-A781-9E8AECA4B2DB}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe FirewallRules: [UDP Query User{F955A202-37F3-48F3-9963-3F577936D3D8}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe FirewallRules: [TCP Query User{C4E26481-2674-4E8D-888C-F4B97390FEC8}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [UDP Query User{0B8D3671-F421-4CDC-8F93-696568A6BF3A}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [{4A804C86-3D0E-41DE-A04B-2059EACF56AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe FirewallRules: [{9FDE1B25-0444-4B25-B783-01466B019093}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe FirewallRules: [{86FA98A5-C32A-4C18-B172-6FA5F7A3E6FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe FirewallRules: [{0F614910-EB72-40D7-8D1A-DB05AE45268B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe FirewallRules: [{2D909357-E1CC-4059-9BE2-F378B8FD27ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe FirewallRules: [{AF215EA1-D65E-4EEC-B881-54BB260931F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe FirewallRules: [{A314D191-236D-40ED-A97C-84B1382CD9D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [{FB41B73B-9FB7-40C0-A815-91B5844F0A86}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [{86E95A74-3C2D-4477-AA16-63B960533EBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{C62F2282-A632-4D45-A993-C605397278FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{4970D921-573D-41C4-A499-D902776D0A75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{5DA59697-126A-43BC-A76C-0FE5808F4CCD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{DD125661-074D-4809-9CF5-D27BC63247FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [{C7B96FA9-D8B3-4918-9FC5-8F0A026D9ABF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [TCP Query User{B0C11404-E047-4560-8C3E-2101487BFD17}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{5B614511-D2B5-42B2-8EFF-12DC63099362}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe FirewallRules: [{6FA08711-FA02-40F8-805A-A5BD4A8AD497}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [{E0735F4D-C016-4CEA-992A-5BFCA16FA16F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [TCP Query User{531CD087-1FD3-427F-AEEF-9BF33B602A34}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{DE727DD4-956D-4030-AD53-B120E8617707}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{015258E0-1C61-470D-ABD0-03EE61DCB927}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{4E8E48CF-080F-4BF7-829B-631C0722201C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [{3A8335AE-1D56-420A-9BDA-366BCA204C4D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe FirewallRules: [{40A574E9-9006-452E-9FCE-C35C7E812858}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe FirewallRules: [TCP Query User{7BFB73E4-059E-4EED-BCEC-962029B4051E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [UDP Query User{6DB8B4CD-B390-4FFD-9DEB-9FB8AC5F2269}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [{17D45D55-4125-48F6-AF03-BF7B3AC59F85}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{63368E35-39D1-46FA-BFA9-A5D306C7A786}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{FDB0D517-2621-49BA-8597-775AB1E8A634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe FirewallRules: [{A3697632-BF0A-4456-A039-157A637BE1DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe FirewallRules: [{231218A3-A868-490B-B030-86724B751BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe FirewallRules: [{30C2BA34-E739-474A-AC9B-93121BF7C8F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe FirewallRules: [TCP Query User{53B8DBD5-45C0-43D1-B13B-CB81DFC1B16A}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{8C707E14-4627-48DC-8728-B5A339D9ABA6}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [{43BDEF27-F8F0-4345-9C7D-C2BF58CBB437}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe FirewallRules: [{E38F3897-DD1B-4976-AE52-F8948D2BB03C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe FirewallRules: [{D205C38A-492F-4E56-8801-15058FCFC727}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe FirewallRules: [{EC3782A0-77B6-4B0A-84AA-E761E30432FE}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe FirewallRules: [TCP Query User{28011C1A-4696-4E42-965F-ECE7815D1622}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{0EB3380C-9299-40AB-8DDA-DCF9B6087A14}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{B7ECFE66-DF75-4475-B1DB-D567E76E0EA5}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{44719AD9-4ABF-4838-AA5F-77A657E4AAC1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [{E3E0B992-FD0D-44A1-9586-C4506C473FA2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [{A6FD4105-28B5-444D-9386-5DFDE2C14A88}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [{8A2CF538-1720-4AC5-9F70-C86C962079F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe FirewallRules: [{97CFB8D5-F8A3-4846-89CA-B467D49799E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe FirewallRules: [{F33EE6CA-7BE1-46BE-81C8-F4BD07142991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe FirewallRules: [{A989471E-8638-431E-BEA7-5E54F3082EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe FirewallRules: [{7C9D21DF-71D7-4C87-9C83-89933FB885C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe FirewallRules: [{235D4BEF-91AB-4A6E-8544-862644AC41B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe FirewallRules: [{FD7F8105-195E-4FA7-9D06-58BB46664F9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{C1E509A6-9625-4C8F-ADB5-7C010B4FE60B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{CBD45096-A07E-45AE-8636-E292FDAFABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{9AD02822-07CD-4D8E-A516-A8B8B0DC174C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{CDB75FA1-71E4-43C1-8089-F1863611FE36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe FirewallRules: [{28DD4323-0A6F-4FB6-A483-DD98025EC013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe FirewallRules: [{4D87DB15-E63B-48D5-BA12-B4BAAD0BFE9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe FirewallRules: [{B19ABA1C-9040-4FE8-876C-2D54E7429DFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe FirewallRules: [{44341CF7-ED26-4B09-BE7B-8446914DD25E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe FirewallRules: [{E823473E-E459-483A-9F1D-04771754E682}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe FirewallRules: [TCP Query User{41F66013-E76E-478D-B5AF-C717F6488426}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe FirewallRules: [UDP Query User{044E35C7-522D-4C58-B75A-70DED3A3FD2F}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe FirewallRules: [TCP Query User{92DAD1C6-8E81-4C18-90D4-9BF3A3B224D4}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe FirewallRules: [UDP Query User{8C200012-F04E-41F1-999E-28C84B1757B7}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe FirewallRules: [TCP Query User{89F2BBBC-3ADA-415C-8A60-75C998A85EA9}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [UDP Query User{4D9A295B-93BF-464C-8E14-DB2E4ECE2CCB}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [TCP Query User{E585902E-45FB-459E-9833-D51B3A0B97FA}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe FirewallRules: [UDP Query User{65B80045-A974-4840-A504-1716D37F8292}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe FirewallRules: [TCP Query User{283F0FDB-5D18-4F6C-A46B-A191A532FE1E}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{019383CE-32E6-4661-8CE8-6A6939D05215}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [{BD7D71B3-8412-4386-B4D7-4575D87D5493}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{814D5851-E61E-42F5-B6E5-D3C3A05F0D09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{4A6C6276-8A80-4477-BA8B-12FC552E90B9}] => (Allow) LPort=2869 FirewallRules: [{E1B4F73D-B362-4B08-9CB3-30C171E1C3CF}] => (Allow) LPort=1900 FirewallRules: [{71D1E2BF-B86A-4C9A-A9EC-7F3078EA4515}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{555FF4A6-13F9-4E46-8275-9BEA4F1B89FF}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe FirewallRules: [{526A9CE3-1D4E-4FCA-9EAF-919C328E0DDE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe FirewallRules: [{6C3427F9-7B29-4CAA-B40D-43C2814D5E12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/09/2015 10:41:07 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 10:07:32 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 05:50:53 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 04:39:46 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 04:36:34 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (08/09/2015 04:36:29 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Systemfehler: ============= Error: (08/09/2015 10:09:16 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (08/09/2015 05:53:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (08/09/2015 05:53:30 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/09/2015 05:53:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (08/09/2015 05:53:29 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/09/2015 05:53:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (08/09/2015 05:53:29 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/09/2015 05:53:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (08/09/2015 05:53:28 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/09/2015 05:53:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Microsoft Office: ========================= Error: (08/09/2015 10:41:07 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (08/09/2015 10:07:32 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestc:\users\*****\desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 05:50:53 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 04:39:46 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 04:36:34 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe Error: (08/09/2015 04:36:29 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Downloads\esetsmartinstaller_deu.exe CodeIntegrity: =================================== Date: 2015-08-04 23:40:33.548 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:33.427 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:32.760 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2015-08-04 23:40:32.474 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Speicherinformationen =========================== Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz Prozentuale Nutzung des RAM: 39% Installierter physikalischer RAM: 8086.79 MB Verfügbarer physikalischer RAM: 4877.97 MB Summe virtueller Speicher: 16171.78 MB Verfügbarer virtueller Speicher: 12635.61 MB ==================== Laufwerke ================================ Drive c: (OS) (Fixed) (Total:930.74 GB) (Free:205.39 GB) NTFS Drive d: (ROMETWGOLD) (CDROM) (Total:3.58 GB) (Free:0 GB) UDF ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 606F7C4F) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=752 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS) ==================== Ende von log ============================ So. Jetzt sollten alle logfiles da sein, die ich dir hochladen sollte. |
09.08.2015, 22:02 | #8 | ||||||||
/// TB-Ausbilder | Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde: Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen. Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank: Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional: Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Ghostery Erkennt und blockiert Tracker, Web Bugs, Pixel und Beacons und weitere Scripte, die das Surfverhalten ausspähen/beobachten. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen. Lade Software von einem sauberen Portal wie . Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
09.08.2015, 22:48 | #9 |
| Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Hallo Matthias, ich möchte mich für deine schnelle und professionelle Hilfe bedanken. Die Software, die wir zum Bereinigen meines Rechners benutzt haben ist nach Anleitung entfernt worden und ansonsten fallen mir derzeit keine Probleme auf. Falls ich wieder einmal Hilfe benötigen sollte, werde ich mich mit Freuden wieder an das Trojaner-Board.de wenden Liebe Grüße Christoph |
09.08.2015, 22:48 | #10 |
/// TB-Ausbilder | Win 7 Sp1 64Bit. Ein Trojaner plagt mich. Ich bin froh, dass wir helfen konnten In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
Themen zu Win 7 Sp1 64Bit. Ein Trojaner plagt mich. |
akamai, antivirus, avg, bonjour, browser, chromium, computer, defender, dnsapi.dll, firefox, flash player, google, home, internet, internet explorer, monitor, mozilla, prozesse, realtek, registry, rundll, scan, server, software, svchost.exe, trojaner, windows |