|
Log-Analyse und Auswertung: TR/Agent Virus Minecraft.exe ist befallenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
19.09.2015, 19:17 | #1 |
| TR/Agent Virus Minecraft.exe ist befallen Guten Aben ich habe das gleiche Problem wie AdmiralE und brauche unbedingt Hilfe bei dem TR/Agent Virus der Mincraft.exe befällt kann mir wer helfen? P.S. Ich habe bereits den 1. Scan mit FRST durchgeführt ^^ |
19.09.2015, 19:26 | #2 |
/// the machine /// TB-Ausbilder | TR/Agent Virus Minecraft.exe ist befallen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
19.09.2015, 19:30 | #3 |
| FRST-Code:FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015 durchgeführt von SimonsZocken (Administrator) auf SIMONSZOCKEN-PC (19-09-2015 20:08:03) Gestartet von C:\Users\SimonsZocken\Desktop Geladene Profile: SimonsZocken (Verfügbare Profile: SimonsZocken) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\vVX1000.exe (Spotify Ltd) C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (TeamSpeak Systems GmbH) C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe () C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7540440 2014-02-11] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-04] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762224 2009-06-30] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [mbot_de_325] => [X] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG) Winlogon\Notify\GoToAssist Express Customer: C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_winlogonx64.dll (Citrix Online, a division of Citrix Systems, Inc.) HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify Web Helper] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-13] (Spotify Ltd) HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-13] (Spotify Ltd) HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.) CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [NameServer] 8.8.4.4,8.8.8.8 Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKU\S-1-5-21-1749110370-1768304781-627677907-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms} HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://youtube.com/ HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms} HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkL5cdg9xO6SWRLdE_HOw,,&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} BHO: MediaPlayersvideos 1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos 1.1\MediaPlayersvideos 1.1-bho64.dll Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation) BHO-x32: MediaPlayersvideos 1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos 1.1\MediaPlayersvideos 1.1-bho.dll Keine Datei BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation) Toolbar: HKLM - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - Keine Datei Toolbar: HKLM-x32 - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - Keine Datei Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP FireFox: ======== FF ProfilePath: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141 FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: istartsurf FF SelectedSearchEngine: istartsurf FF Homepage: hxxp://www.istartsurf.com/?type=hppp FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] () FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] () FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-11-15] () FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @citrixonline.com/appdetectorplugin -> C:\Users\SimonsZocken\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-08-14] (Citrix Online) FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation) FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation) FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\SimonsZocken\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-16] (Unity Technologies ApS) FF user.js: detected! => C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\user.js [2015-08-13] FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-images.xml [2014-10-01] FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-maps.xml [2014-10-01] FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\istartsurf.xml [2015-09-19] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml [2014-11-28] FF Extension: Default SearchProtected - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\defsearchp@gmail.com.xpi [2015-08-01] FF Extension: Adblock Plus - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-03] FF HKLM-x32\...\Firefox\Extensions: [{d9a96531-b093-4d07-9e4c-9704a365c441}] - C:\Program Files (x86)\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441} FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\extensions\faststartff@gmail.com Chrome: ======= CHR dev: Chrome dev build erkannt! <======= ACHTUNG CHR Profile: C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avira Browserschutz) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-09-20] CHR Extension: (Deezify) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbhaapafmlmgodhicgpngihalhepll [2014-11-28] CHR Extension: (mihcahmgecmbnbcchbopgniflfhgnkff) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-02] CHR Extension: (ofiahdodpoomdjoegkmibpmgejobfpcn) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofiahdodpoomdjoegkmibpmgejobfpcn [2014-12-02] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.delta-homes.com/?type=sc&ts=1429789534&from=ient04230&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-24] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-27] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-04] (EasyAntiCheat Ltd) S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373824 2015-05-17] (WildTangent) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-04] (NVIDIA Corporation) S2 GoToAssist Remote Support Customer; C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_service.exe [610888 2014-08-14] (Citrix Online, a division of Citrix Systems, Inc.) R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-07] (Hi-Rez Studios) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-04] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-04] (NVIDIA Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X] S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X] S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X] S2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [X] R3 WinHttpAutoProxySvc; winhttp.dll [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-08-13] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-08-13] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-08-13] (Avira Operations GmbH & Co. KG) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-28] (Intel Corporation) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-02] () R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-04] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation) S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 MSICDSetup; \??\E:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X] S1 wpnfd_1_10_0_2; system32\drivers\wpnfd_1_10_0_2.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-19 20:08 - 2015-09-19 20:08 - 00023723 _____ C:\Users\SimonsZocken\Desktop\FRST.txt 2015-09-19 20:07 - 2015-09-19 20:08 - 00000000 ____D C:\FRST 2015-09-19 20:07 - 2015-09-19 20:07 - 02191360 _____ (Farbar) C:\Users\SimonsZocken\Desktop\FRST64.exe 2015-09-19 19:51 - 2015-09-19 19:57 - 00000961 _____ C:\Users\Public\Desktop\Minecraft.lnk 2015-09-19 19:50 - 2015-09-19 19:50 - 02314240 _____ C:\Users\SimonsZocken\Desktop\MinecraftInstaller.msi 2015-09-17 19:30 - 2015-09-17 19:52 - 00097994 ____R C:\Users\SimonsZocken\Desktop\isaac-ng.CT 2015-09-16 15:12 - 2015-09-16 15:12 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\SKIDROW 2015-09-14 00:32 - 2015-09-14 00:33 - 00000000 ____D C:\Users\SimonsZocken\Documents\Ein neuer Anfang 2015-09-11 11:40 - 2015-09-11 11:40 - 00000222 _____ C:\Users\SimonsZocken\Desktop\Toribash.url 2015-09-11 02:05 - 2015-09-11 02:05 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Construct2 2015-09-11 02:04 - 2015-09-11 02:04 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Construct 2.lnk 2015-09-11 02:04 - 2015-09-11 02:04 - 00000843 _____ C:\Users\Public\Desktop\Construct 2.lnk 2015-09-11 02:04 - 2015-09-11 02:04 - 00000000 ____D C:\Program Files\Construct 2 2015-09-10 17:57 - 2015-09-10 17:57 - 00209029 _____ C:\Users\SimonsZocken\Downloads\MyCommand.jar 2015-09-09 12:17 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-09-09 12:17 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-09-09 12:17 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-09-09 12:16 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-09-09 12:16 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-09-09 12:16 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-09-09 12:16 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-09-09 12:16 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-09-09 12:16 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-09-09 12:16 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-09-09 12:16 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-09-09 12:16 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-09-09 12:16 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-09-09 12:16 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-09-09 12:16 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-09-09 12:16 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-09-09 12:16 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-09-09 12:16 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-09-09 12:16 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-09-09 12:16 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-09-09 12:16 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-09-09 12:16 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-09-09 12:16 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-09-09 12:16 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-09-09 12:16 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-09-09 12:16 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-09-09 12:16 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-09-09 12:16 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-09-09 12:16 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-09-09 12:16 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-09-09 12:16 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-09-09 12:16 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-09-09 12:16 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-09-09 12:16 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-09-09 12:16 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-09-09 12:16 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-09-09 12:16 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-09-09 12:16 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-09-09 12:16 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-09-09 12:16 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-09-09 12:16 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-09-09 12:16 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-09-09 12:16 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-09-09 12:16 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-09-09 12:16 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-09-09 12:16 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-09-09 12:16 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-09-09 12:16 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-09-09 12:16 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-09-09 12:16 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-09-09 12:16 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-09-09 12:16 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-09-09 12:16 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-09-09 12:16 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-09-09 12:16 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-09-09 12:16 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-09-09 12:16 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-09-09 12:16 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-09-09 12:16 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-09-09 12:16 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-09-09 12:16 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-09-09 12:16 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-09-09 12:16 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-09-09 12:16 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-09-09 12:16 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-09-09 12:16 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-09-09 12:16 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-09-09 12:16 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-09-09 12:16 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-09-09 12:16 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-09-09 12:16 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-09-09 12:16 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-09-09 12:16 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-09-09 12:16 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-09-09 12:16 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-09-09 12:16 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-09-09 12:16 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-09-09 12:16 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-09-09 12:16 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-09-09 12:16 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-09-09 12:16 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-09-09 12:16 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-09-09 12:16 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-09-09 12:16 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-09-09 12:16 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-09-09 12:16 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-09-09 12:16 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-09-09 12:16 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-09-09 12:16 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-09-09 12:16 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-09-09 12:16 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-09-09 12:16 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-09-09 12:16 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-09-09 12:16 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-09-09 12:16 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-09-09 12:16 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2015-09-05 20:40 - 2015-09-06 10:23 - 00000000 ____D C:\Users\SimonsZocken\Desktop\items 2015-09-05 20:39 - 2015-09-05 20:39 - 00000000 ____D C:\Users\SimonsZocken\Desktop\assets 2015-09-05 20:36 - 2015-09-05 20:36 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk 2015-09-05 20:36 - 2015-09-05 20:36 - 00001288 _____ C:\Users\Public\Desktop\paint.net.lnk 2015-09-05 20:36 - 2015-09-05 20:36 - 00000000 ____D C:\Program Files\paint.net 2015-09-05 20:35 - 2015-09-05 20:40 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\paint.net 2015-09-02 23:38 - 2015-09-02 23:38 - 06520208 _____ (Tim Kosse) C:\Users\SimonsZocken\Downloads\FileZilla_3.13.1_win64-setup.exe 2015-09-02 23:33 - 2015-09-04 14:57 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mc-2 2015-09-02 23:10 - 2015-09-05 00:03 - 00004776 _____ C:\Users\SimonsZocken\Desktop\Boss-MobCommands.txt 2015-09-02 15:57 - 2015-09-02 15:58 - 19538382 _____ C:\Users\SimonsZocken\Downloads\craftbukkit-1.8-R0.1-SNAPSHOT.jar 2015-09-02 15:57 - 2015-09-02 15:57 - 07641600 _____ (Bertware) C:\Users\SimonsZocken\Downloads\BukkitGUI.exe 2015-08-31 14:13 - 2015-08-31 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-08-30 14:31 - 2015-08-30 14:31 - 00001176 _____ C:\Users\SimonsZocken\Downloads\pssfa2_n.schematic 2015-08-30 14:31 - 2015-08-30 14:31 - 00000929 _____ C:\Users\SimonsZocken\Downloads\public_lupf.schematic 2015-08-30 14:31 - 2015-08-30 14:31 - 00000742 _____ C:\Users\SimonsZocken\Downloads\public_arti.schematic 2015-08-30 14:31 - 2015-08-30 14:31 - 00000644 _____ C:\Users\SimonsZocken\Downloads\public_stich_s.schematic 2015-08-30 00:55 - 2015-09-05 19:32 - 00000000 ____D C:\Users\SimonsZocken\Desktop\SC2 Maps 2015-08-29 13:24 - 2015-09-19 08:52 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\.minecraft 2015-08-28 10:15 - 2015-08-29 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-19 20:04 - 2014-09-13 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-09-19 20:02 - 2014-09-20 14:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-09-19 20:02 - 2014-09-20 14:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft 2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\Program Files (x86)\Minecraft 2015-09-19 19:45 - 2014-12-11 17:48 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\LogMeIn Hamachi 2015-09-19 19:44 - 2014-08-14 16:38 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Skype 2015-09-19 18:47 - 2014-08-14 16:02 - 01776470 _____ C:\Windows\WindowsUpdate.log 2015-09-19 17:46 - 2014-11-28 18:46 - 00003488 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job 2015-09-19 17:46 - 2014-11-28 18:46 - 00002128 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job 2015-09-19 17:45 - 2014-08-14 21:29 - 00000000 ____D C:\Program Files (x86)\Steam 2015-09-19 16:43 - 2015-08-13 18:36 - 00000000 ____D C:\Users\SimonsZocken\Desktop\Steam 2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Spotify 2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Spotify 2015-09-19 08:44 - 2014-08-14 16:34 - 00000000 ____D C:\ProgramData\NVIDIA 2015-09-19 08:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-19 08:44 - 2009-07-14 06:51 - 00112356 _____ C:\Windows\setupact.log 2015-09-18 22:18 - 2014-10-12 15:26 - 00000000 ____D C:\Program Files (x86)\Diablo III 2015-09-18 21:20 - 2014-09-24 18:54 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox 2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Battle.net 2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-09-18 21:16 - 2015-04-10 22:36 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2015-09-17 20:46 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\YGOPro DevPro 2015-09-16 20:29 - 2014-08-17 14:01 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Audacity 2015-09-16 15:12 - 2014-08-14 22:38 - 00000000 ____D C:\Users\SimonsZocken\Documents\My Games 2015-09-12 15:43 - 2014-11-02 14:58 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\FileZilla 2015-09-12 12:12 - 2014-10-19 13:59 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\CrashDumps 2015-09-11 11:43 - 2014-08-15 14:18 - 00000000 ____D C:\ProgramData\Package Cache 2015-09-10 14:09 - 2014-08-14 22:33 - 00144049 _____ C:\Windows\DirectX.log 2015-09-10 13:30 - 2015-08-15 20:28 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mcrcon-0.0.5-bin-windows 2015-09-10 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-09-10 10:55 - 2009-07-14 06:45 - 00338640 _____ C:\Windows\system32\FNTCACHE.DAT 2015-09-10 10:53 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal 2015-09-10 10:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-09-10 02:12 - 2014-08-14 18:53 - 00000000 ____D C:\Windows\system32\MRT 2015-09-08 10:07 - 2014-08-15 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-09-08 09:55 - 2010-11-21 05:47 - 00503800 _____ C:\Windows\PFRO.log 2015-09-04 21:15 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YGOPro DevPro 2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ____D C:\ProgramData\Skype 2015-08-29 19:10 - 2015-04-10 21:20 - 00000000 ____D C:\Users\SimonsZocken\Documents\StarCraft II 2015-08-29 13:11 - 2014-11-09 19:35 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-08-29 10:53 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-08-29 10:52 - 2014-09-08 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-08-28 00:26 - 2014-08-20 11:27 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client 2015-08-26 18:37 - 2014-08-14 18:53 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-10-22 20:24 - 2014-11-22 22:08 - 0000097 _____ () C:\Users\SimonsZocken\AppData\Roaming\LauncherSettings_live.cfg 2014-11-22 10:45 - 2015-05-08 14:48 - 0000441 _____ () C:\Users\SimonsZocken\AppData\Roaming\MinecraftClickerSave.txt 2014-11-28 18:44 - 2014-11-28 18:44 - 1857496 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\MMUJI.exe 2014-11-28 18:45 - 2014-11-28 18:45 - 1857496 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\OGLG.exe 2014-10-23 17:04 - 2014-10-23 17:04 - 0008144 _____ () C:\Users\SimonsZocken\AppData\Roaming\TheHunterSettings_live.bin 2015-03-09 17:48 - 2015-03-09 17:48 - 0040960 ___SH () C:\Users\SimonsZocken\AppData\Roaming\Thumbs.db 2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\TM.exe 2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\WDFYUBZ.exe 2014-11-28 19:54 - 2014-11-28 19:54 - 0628496 _____ (CMI Limited) C:\Users\SimonsZocken\AppData\Local\nsa74AD.tmp 2015-07-31 10:57 - 2015-08-15 20:21 - 0000600 _____ () C:\Users\SimonsZocken\AppData\Local\PUTTY.RND 2015-08-16 05:09 - 2015-08-16 05:09 - 0002104 _____ () C:\Users\SimonsZocken\AppData\Local\recently-used.xbel 2014-08-14 17:48 - 2014-08-14 17:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== C:\Users\SimonsZocken\AppData\Local\Temp\avgnt.exe C:\Users\SimonsZocken\AppData\Local\Temp\BullseyeCoverage-2-x86.dll C:\Users\SimonsZocken\AppData\Local\Temp\devcon64.exe C:\Users\SimonsZocken\AppData\Local\Temp\drm_dialogs.dll C:\Users\SimonsZocken\AppData\Local\Temp\drm_dyndata_7400008.dll C:\Users\SimonsZocken\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\SimonsZocken\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe C:\Users\SimonsZocken\AppData\Local\Temp\HiRezLauncherControls.dll C:\Users\SimonsZocken\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll C:\Users\SimonsZocken\AppData\Local\Temp\Installer.exe C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-1343543407322120933.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-238329836124738100.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-3365330378586126933.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-5193640500515359623.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-8171894015821889474.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-56-g3779cff-b3072jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-b3020jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.1-10-g8688bd4-b3092jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.2-11-g3fd9db2-b3098jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1512374936573016778.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1744232142253645131.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3261719090937640218.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3470107198358187167.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-397091771528305221.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3982136512997162608.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-4511803116025988274.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5047948624743418102.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5385809942258672043.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5806029061823537793.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5903323399846814354.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5991621273645016773.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6056074404322815342.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6412964357349152929.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6472183450542454474.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-649047008773354403.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6549758609594149016.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6565206762538792243.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6647646490544346695.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6713297519027044306.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6955666785049800781.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6973134385895982404.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7072675254096131220.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7264940990901904890.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7495142713063067959.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7644747225610167787.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-768229924774051002.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Spigot-1649.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-4073286446991539302.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-458874702202751746.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5536207071792889188.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5544614261553966182.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-6757111243856382035.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-7837874448066176117.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-jenkins-CraftBukkit-173.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-MCPC-Plus-jenkins-MCPC-Plus-Legacy-617.dll C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Spigot-1649.dll C:\Users\SimonsZocken\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-7-g22f18a2-b1425jnks.dll C:\Users\SimonsZocken\AppData\Local\Temp\jre-8u25-windows-au.exe C:\Users\SimonsZocken\AppData\Local\Temp\nvSCPAPI.dll C:\Users\SimonsZocken\AppData\Local\Temp\nvStInst.exe C:\Users\SimonsZocken\AppData\Local\Temp\OptimizerPro.exe C:\Users\SimonsZocken\AppData\Local\Temp\setup.exe C:\Users\SimonsZocken\AppData\Local\Temp\SkypeSetup.exe C:\Users\SimonsZocken\AppData\Local\Temp\smt_istartsurf.exe C:\Users\SimonsZocken\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll C:\Users\SimonsZocken\AppData\Local\Temp\swt-win32-3349.dll C:\Users\SimonsZocken\AppData\Local\Temp\xmlUpdater.exe C:\Users\SimonsZocken\AppData\Local\Temp\YgoUpdater.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. LastRegBack: 2015-09-03 17:41 ==================== Ende von FRST.txt ============================ |
19.09.2015, 19:31 | #4 |
| Addition-Code: FRST Additions Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015 durchgeführt von SimonsZocken (2015-09-19 20:09:13) Gestartet von C:\Users\SimonsZocken\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2014-08-14 14:02:58) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1749110370-1768304781-627677907-500 - Administrator - Disabled) Gast (S-1-5-21-1749110370-1768304781-627677907-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1749110370-1768304781-627677907-1004 - Limited - Enabled) SimonsZocken (S-1-5-21-1749110370-1768304781-627677907-1000 - Administrator - Enabled) => C:\Users\SimonsZocken ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated) AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version: - Hyper Hippo Games) AirMech (HKLM-x32\...\Steam App 206500) (Version: - Carbon Games) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG) Avira Launcher (HKLM-x32\...\{315dd168-0794-4cf1-8355-f195cde642fc}) (Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG) Avira Launcher (x32 Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG) Hidden Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.) BlueStacks Notification Center (HKLM-x32\...\{4FCF716C-CEB4-499D-AFB8-A5375105EC2A}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.) Böse Nachbarn 2 (HKLM-x32\...\{706EC84C-6966-45EB-AEB9-EE6DCEA8CA3A}) (Version: 1.0 - JoWooD Studio Vienna) Bridge Constructor Medieval (HKLM-x32\...\Steam App 319850) (Version: - ClockStone) Build and Shoot Launcher 1.2 (HKLM-x32\...\Build and Shoot Launcher) (Version: 1.2 - Buld Then Snip, LLC) Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation) Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine) Construct 2 r212.2 (HKLM\...\Construct 2_is1) (Version: 1.0.212.2 - Scirra) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Craften Terminal 4.0.2 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 4.0.2 - Craften.de) Cubetractor (HKLM-x32\...\Steam App 235720) (Version: - Ludochip) DeepBurner 1.9.0.228 (HKLM-x32\...\{F0A8E94F-1AD1-4428-873E-36CEEABA5FED}_is1) (Version: 1.9.0.228 - Astonsoft Ltd.) Depth Hunter 2: Deep Dive (HKLM-x32\...\Steam App 248530) (Version: - Biart Company LLC) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts) EE-ZDE (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version: - ) Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version: - ) FileZilla Client 3.11.0.2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse) FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line) FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - ) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Frozen Hearth (HKLM-x32\...\Steam App 257890) (Version: - Epiphany Games) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.) GoToAssist Customer 2.1.0.715 (HKLM-x32\...\GoToAssist Express Customer) (Version: 2.1.0.715 - Citrix Online) Hacker Evolution Duality (HKLM-x32\...\Steam App 70120) (Version: - exosyphen studios) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) Java SE Development Kit 8 Update 20 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation) Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation) K-Lite Codec Pack 6.0.4 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.0.4 - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts) LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden LibreOffice 4.3.5.1 (HKLM-x32\...\{DB19C830-14B7-4301-B4F2-A69FBDEE9A70}) (Version: 4.3.5.1 - The Document Foundation) Lock On: Modern Air Combat (HKLM-x32\...\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}) (Version: 1.00.000 - ) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version: - Paradox North) Melissa K. and the Heart of Gold Collector's Edition (HKLM-x32\...\Steam App 321150) (Version: - SDP Games) Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - ) Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - ) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Monkey Island™ Special Edition Collection (HKLM-x32\...\MISEC) (Version: 1.0.0.0 - LucasArts) Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla) My Lands (HKLM-x32\...\Steam App 290730) (Version: - Gravvit Ltd) No Man's Land (HKLM-x32\...\No Man's Land) (Version: - ) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team) NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Pahelika: Revelations HD (HKLM-x32\...\Steam App 333650) (Version: - Ironcode Gaming) paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC) Pivot Stickfigure Animator version 2.2.7 (HKLM-x32\...\Pivot Stickfigure Animator_is1) (Version: 2.2.7 - ) PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment) PlanetSide 2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\SOE-PlanetSide 2) (Version: - Sony Online Entertainment) Plants vs. Zombies 1.0.4.7924 (by Scar) (HKLM-x32\...\{0DE8527A-FE3E-4FCA-A023-D57EF0B796C9}_is1) (Version: - PopCap Games) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7173 - Realtek Semiconductor Corp.) RGSS-RTP Standard (HKLM-x32\...\RGSS-RTP Standard_is1) (Version: 1.04 - Enterbrain) ROBLOX Player for SimonsZocken (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation) Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam) RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version: - Atari) RPG Maker VX Ace Lite (HKLM-x32\...\Steam App 224280) (Version: - Enterbrain) RPG Maker XP (HKLM-x32\...\Steam App 235900) (Version: - Degica) Rush for Glory (HKLM-x32\...\Steam App 303470) (Version: - Parseh Game Studio) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden ShootMania Storm Demo (HKLM-x32\...\Steam App 233050) (Version: - Nadeo) Sigils of Elohim (HKLM-x32\...\Steam App 321480) (Version: - Croteam) Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.) Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2477.0 - Hi-Rez Studios) SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts) Spotify (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB) Star Conflict (HKLM-x32\...\Steam App 212070) (Version: - Star Gem Inc.) Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts) Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Stranded II 1.0.0.1 (HKLM-x32\...\{CE0900ED-C76A-40C0-8DB4-0F68D825B283}_is1) (Version: - Unreal Software) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) TeamSpeak 3 Client (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43174 - TeamViewer) The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl) The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version: - Nicalis, Inc.) The Culling Of The Cows (HKLM-x32\...\Steam App 297020) (Version: - Decaying Logic) The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd) theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds) TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo) Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios) Trove (HKLM-x32\...\Steam App 304050) (Version: - Trion Worlds) Unity (HKLM-x32\...\Unity) (Version: 5.0.0f4 - Unity Technologies ApS) Unity Web Player (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS) Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden Waldmeister Sause XXL - Winteredition (HKLM-x32\...\Waldmeister Sause XXL - Winteredition_is1) (Version: - media Verlagsgesellschaft mbH) Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes) WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) World of Tanks (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warships (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) YGOPro DevPro (HKLM-x32\...\{A115F80F-2B26-464E-97A3-8B13EC533C3D}) (Version: 2.1.2 - DevPro, LLC) YouTube Song Downloader (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C11EF142}_is1) (Version: 10.3 - Abelssoft) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1749110370-1768304781-627677907-1000_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\RobloxProxy64.dll (ROBLOX Corporation) ==================== Wiederherstellungspunkte ========================= 10-09-2015 14:08:07 DirectX wurde installiert 11-09-2015 11:42:21 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11-09-2015 11:42:56 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 15-09-2015 13:41:30 Windows Update 18-09-2015 13:54:39 Windows Update ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Keine Datei <==== ACHTUNG Task: {315030D9-AB7C-49D7-ADD0-B90395FAE25B} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: {374AF5F3-734D-4B6F-90D7-9712E084DF13} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: {51C03CF9-8689-438E-9B36-40E7F0806453} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: {52A5826A-AA29-4A0E-9003-1B305B5D81BF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated) Task: {7A966CAF-639A-49D5-9A68-CEECE95C2212} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1 => C:\Program Files (x86)\MediaPlayersvideos 1.1\MediaPlayersvideos 1.1-codedownloader.exe <==== ACHTUNG Task: {80E38280-1FC7-4649-81D1-B6654E675CAA} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2 => C:\Program Files (x86)\MediaPlayersvideos 1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG Task: {A63EFB14-8DB6-4FB4-AC6E-B7DA7B7D149C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.) Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Keine Datei <==== ACHTUNG Task: {C3905DAC-465F-4F6C-9B1C-DD5F1C317C36} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.) Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Keine Datei <==== ACHTUNG Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Keine Datei <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job => C:\Program Files (x86)\MediaPlayersvideos 1.1\MediaPlayersvideos 1.1-codedownloader.exe <==== ACHTUNG Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job => C:\Program Files (x86)\MediaPlayersvideos 1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2014-08-14 16:34 - 2015-02-05 21:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-09-10 13:38 - 2015-09-10 13:38 - 00103424 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe 2014-02-28 15:33 - 2015-08-28 00:26 - 00153576 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\quazip.dll 2014-08-04 15:43 - 2015-08-28 00:26 - 00090088 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win32.dll 2014-08-04 15:43 - 2015-08-28 00:26 - 00103400 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll 2014-08-04 15:45 - 2015-08-28 00:26 - 00260072 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll 2014-08-04 15:45 - 2015-08-28 00:26 - 00369640 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll 2014-06-05 15:35 - 2015-08-28 00:26 - 00271360 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ssleay32.dll 2014-06-05 15:35 - 2015-08-28 00:26 - 01300992 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\LIBEAY32.dll 2014-08-14 21:30 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2015-02-02 18:31 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll 2015-02-02 18:31 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2015-02-02 18:31 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2014-08-14 21:30 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll 2014-08-29 10:12 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2014-08-29 10:12 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2014-08-29 10:12 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2014-08-29 10:12 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2014-08-29 10:12 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2014-08-14 21:30 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2015-07-25 10:09 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll 2015-09-19 17:45 - 2015-09-19 17:45 - 00155232 ___HT () C:\Users\SimonsZocken\AppData\Local\Temp\~C2DB.tmp 2014-08-14 21:30 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00198144 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00317440 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll 2015-09-10 13:38 - 2015-09-16 14:41 - 00203776 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00389120 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll 2015-09-10 13:37 - 2015-09-18 19:04 - 06686208 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\engine.dll 2015-09-10 13:38 - 2015-09-16 14:41 - 00156160 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 01174016 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 01240064 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00351744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00607744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00164864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00708096 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll 2015-09-10 13:38 - 2015-09-16 14:41 - 00134656 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 01336320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00394752 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 03192320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll 2015-09-10 13:37 - 2015-09-17 15:15 - 01762816 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00143360 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\localize.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00230912 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00996864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00582144 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll 2015-09-10 13:37 - 2015-09-19 10:39 - 12464640 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll 2015-09-10 13:37 - 2015-09-18 19:04 - 09998336 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll 2015-09-10 13:37 - 2015-09-16 14:41 - 00094208 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll 2015-09-10 13:38 - 2015-09-16 14:41 - 00084992 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll 2015-09-10 13:37 - 2015-09-10 13:37 - 00071680 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi 2015-09-10 13:37 - 2015-09-10 13:37 - 00012800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt 2015-09-10 13:37 - 2015-09-10 13:37 - 00055808 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt 2015-09-10 13:37 - 2015-09-16 14:41 - 00972800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll 2015-09-10 13:38 - 2015-09-16 14:41 - 00173568 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_celt.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist Remote Support Customer => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\sony.com -> sony.com ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 8.8.4.4 - 8.8.8.8 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{2F726ED7-4A9D-4550-B90C-CE3B82C29E19}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{D784F753-56F0-41B0-B96D-BCF95200226B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{58DFA857-69F3-4655-9540-88813050921A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{7917AE98-62DD-4300-8EAB-9E90163D91E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe FirewallRules: [{2D0C18B1-F5EE-418D-B10A-850CF58EEAAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe FirewallRules: [{EE2C622F-A4BF-47E1-8955-EF0C36945F1D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0956CB22-6272-4D6C-A129-C509FD55583D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{123728DE-A5A9-4BF9-ADEB-299D07E9154E}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{39BF0AD8-7F4F-4C6A-A01B-7D7E92FEAFD4}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [TCP Query User{32A060E1-C363-4369-86DF-F608DE6D272B}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{3A1389C2-025B-431A-A110-1E3BE525E701}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{200C306E-ABF3-4C79-AD87-C98CCDE0FB1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe FirewallRules: [{BF254D3A-E5D7-4599-8ECB-F8158009E8BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe FirewallRules: [TCP Query User{45DD3608-9CF2-4AC1-A225-DCE3E2786590}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe FirewallRules: [UDP Query User{3DC89CA1-D5CD-4F7D-845F-EA94BBC0C24A}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe FirewallRules: [TCP Query User{8C232603-0CE4-4D76-AA82-BDF20A849F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe FirewallRules: [UDP Query User{915796F5-4394-4FC0-856E-F86D220D8DB0}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe FirewallRules: [TCP Query User{58C79CAE-498C-49B0-AF37-A3BA11B9C8C5}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [UDP Query User{1516ED9E-27E0-4AAB-8FEC-BFDC7756348D}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [{AFF25DEA-D331-4F4F-912A-86369A25A98F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe FirewallRules: [{FAE4C5EA-33AE-4966-BC4D-FAD0F5DE53AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe FirewallRules: [TCP Query User{F551757D-E4D2-49E5-8043-A7B276A1F2F0}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe FirewallRules: [UDP Query User{0F57F22D-543A-43F3-B558-4F219775056A}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe FirewallRules: [TCP Query User{8F4676B1-882A-4EBE-9A57-D55DABCAFB0F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{32F88CD4-B0C6-46C9-BAA0-BFF3AE5D8ACF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe FirewallRules: [{DFF93F8B-BE5A-4023-9B87-666F42A5EAEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe FirewallRules: [{8FE9286F-E77B-425D-9B0D-1DA226434228}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe FirewallRules: [{F764258B-A6F0-4A9C-8BA4-29049B3F2FB7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe FirewallRules: [{963D743C-DB2E-443B-940B-EBB96248E38B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe FirewallRules: [TCP Query User{55586366-8CA6-4337-8260-90142508C734}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{A5BEFF69-143D-4342-9406-B922505BEDAB}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{58EF501E-2D67-428C-A23F-5CAE82B1B2FE}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{2F395C6C-5441-44D1-B5AE-35F6226F747C}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe FirewallRules: [{CA81FABF-AB24-4201-89B3-3991251F5C00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe FirewallRules: [{DA6C07E1-01DB-4E73-B54B-7BC0CCDC363D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe FirewallRules: [{6F726BEA-A1CD-4278-87B1-B6527C190450}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [{0E907AA9-76AE-44B9-A498-AF17C4CED9DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [TCP Query User{1D093274-E11E-4FC1-ABA5-40D65C10B182}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{80007B90-99F9-44EB-91E8-811CEC1D39FA}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [{B1E4CA0F-99B4-499F-83A7-AD59C7B55101}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [{B40CADC5-6219-4320-AC70-0F6B408F7A00}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [{D30D30CC-4402-4DA9-9C22-5C69B2591949}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{9300198A-89C9-4FF8-A68B-B60A738434DF}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{795B04B2-7BAA-477A-AF1B-6437A109B5C7}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{DC74349A-911C-424A-BBBC-19ED85D74041}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [TCP Query User{ADDF3F93-7B12-4C05-9F76-42F1ABFE093C}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe FirewallRules: [UDP Query User{B6D8CD5C-4467-4746-9282-2FA7AF8D200E}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe FirewallRules: [TCP Query User{E258B353-9255-42AE-A597-8B9000C9355F}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe FirewallRules: [UDP Query User{328AA47C-FDD0-472E-9064-BDC4AFD6B68B}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe FirewallRules: [TCP Query User{A67C1F31-DBDA-43F6-B58A-AB0CB2594C9C}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe FirewallRules: [UDP Query User{FEC00150-F0D3-498D-8535-0F33EA35416F}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe FirewallRules: [{8386F9A9-3C5C-47B6-87BC-5A1B1C02D99E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe FirewallRules: [{D4703125-BB1B-4B2F-8CB6-D6A57EB145D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe FirewallRules: [TCP Query User{3FDB0236-39E9-4C64-84B9-6F0D0F184C8D}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{3FFB7F58-EFDE-4B37-8DB9-AF2D30787593}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{3AB34498-5806-4BE1-B733-ED437C1E0266}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [UDP Query User{9C65700E-F032-41A9-97C0-F9E8B40B2DF3}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [{1EB9CC70-9A17-48A3-AABF-FC94D9F7F1EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe FirewallRules: [{98EBADA9-7E63-4F03-BE4F-1EA873A5E40B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe FirewallRules: [{0A89F39C-8F39-4ABD-A1A0-CEDC0AD4FB01}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe FirewallRules: [{644B4B90-ACC1-458A-B8AD-627106A6156C}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe FirewallRules: [TCP Query User{8237B478-7432-49A2-9ECF-CECC01AA3613}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{A9C8B693-186C-49BF-899C-19E59A4845BF}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{5063DA2A-C62A-4A03-AAFA-93AB6B573D7E}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{35C4217A-0E3E-4341-BB33-0D75512EF5DC}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{6D311860-A659-4105-AD6F-C74B44EEDC64}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{3FB27387-5105-4AF6-8E13-18DC0CAB8095}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{EE2A542C-88F6-47B4-9364-6421FF86FD12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{30661C10-19FB-4C7A-B118-E4A23E9DB5DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{9CE9228F-3A9E-495D-B1A6-833F5133D1CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{97DDA423-D10F-4F01-AD70-D75A724E1C98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{EC85A608-57FE-42DF-BB85-7EE6870044B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{93DF7F64-7654-4720-BDCD-9D6CB359CABB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{0BE80142-15C2-4EF2-B94E-D412CC5B6121}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{7E338786-3CBB-4CFB-B00D-54904E573C29}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{BEDFAF1E-0961-4F0F-975D-A869C92EF88B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe FirewallRules: [{7A99108B-DA19-4835-A1F8-C38959AB339C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe FirewallRules: [{D685866B-E021-448D-BC88-E0DAB6708178}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{ADB0694A-67DB-4C68-8D35-5C9F7A3DCBDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe FirewallRules: [{C29A59CA-58B7-4F9D-B134-B0DD0995629B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe FirewallRules: [TCP Query User{14FF171B-7027-48E7-8771-7174224A1348}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe FirewallRules: [UDP Query User{778F87D3-FDB5-4B60-B105-9BD24CE7CA49}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe FirewallRules: [TCP Query User{28D5FAD7-386E-4E0E-A1BB-D33193CC611A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe FirewallRules: [UDP Query User{416C18DE-637A-44E6-84CA-BDAECD74AC15}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe FirewallRules: [TCP Query User{E5DBA3B3-48EA-49C4-A23F-A47339D5EEC1}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe FirewallRules: [UDP Query User{3348B724-F2A6-4A7C-AE82-3B35C283C5BA}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe FirewallRules: [{77C8B80A-C652-4C32-AA4D-0462363EEBC6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{B37B497B-9E9C-4B72-92CB-F761A2BAB530}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{268D2283-8AA2-4803-B576-B3DD1627122D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe FirewallRules: [{54F67AC1-B752-4012-8409-FA1B86BF0B62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe FirewallRules: [{B757227C-0E50-43D9-93E8-32E5D1AE894B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe FirewallRules: [{168EFC4B-5393-4B80-85E2-4D51F7B3D0A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe FirewallRules: [TCP Query User{5AF7541F-651E-43F6-BF08-9D02BABA1F82}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe FirewallRules: [UDP Query User{F53267DC-7E41-495B-B837-37ED19F6911F}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe FirewallRules: [TCP Query User{CFB5A3C9-BF2D-4924-A149-6B54C1203C3A}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe FirewallRules: [UDP Query User{A147E709-56BC-4770-ABCF-29EC58D122D4}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe FirewallRules: [{7F657E3C-4C7D-48BC-976E-8F464241A26A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{398C6842-ECFB-47F0-8C0E-D8E22C485E10}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6B055FEF-316F-49AB-A551-7884F674FFDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{59E897ED-2D08-4254-857C-063F2CFEA75F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{93DF153E-C89F-4961-BFB6-B89F89C3051E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{9941B03D-B848-4BF0-8C95-E46F023891DF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [TCP Query User{0EF787C7-83FF-437A-80F3-5DFBE61EEF5F}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe FirewallRules: [UDP Query User{9E2ED2BC-EAAB-4674-BD01-E96376DF2441}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe FirewallRules: [TCP Query User{264A36FA-C754-49F9-B191-CB901A9E9D27}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe FirewallRules: [UDP Query User{4FA3B020-3FE3-417E-BFAF-09986477B8AD}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe FirewallRules: [TCP Query User{98AE15A8-561F-412A-88CE-92954B2D60A3}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin FirewallRules: [UDP Query User{AD8113C0-7BD4-4E28-BA5E-6D84A7E56C1C}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin FirewallRules: [TCP Query User{DE669AAE-30E2-4C8F-AC45-DEF28AD9EE47}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{872DF301-F55A-4CAD-ADB8-9A1317A30680}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{27393D7F-5FE1-4E03-B885-32774193A0C9}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe FirewallRules: [UDP Query User{65ACA6E4-77AC-4946-8568-E367D0A26575}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe FirewallRules: [{FA5086A2-70BC-4F5B-BC8C-2B6AA6D2FD05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{5DDBCC12-D323-4F19-ABFC-A0597066072B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{CC14C9A6-C852-476A-8B14-3E75EFE4670A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{A7637826-3E45-497C-BC63-4788B6C12A1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{043BC74E-5452-4BCB-9FFA-4FF0AE2AE9E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{E123B6F3-4C9B-4EE8-A618-EAD08B287083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{92EB6915-5964-4C4F-A6B5-2DC65F22BCBF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{3B2BF885-C443-4418-A39E-DDE483DDD331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{337DF535-8595-4F33-B532-63505E30AAF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{80F0747D-BBC7-45AC-84FE-8C1198F3163C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{2B51188A-D59A-4E92-A7B4-82E8BF556EFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{7684015A-B618-4D6B-A692-04130FEB346D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [TCP Query User{AEAC2B55-5792-4848-813C-30606C546C57}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [UDP Query User{7E08674A-AE2B-4947-852C-91AAF6B6E690}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [TCP Query User{5E77DCCF-9FEA-4D9B-901D-D63146EFACA1}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe FirewallRules: [UDP Query User{8A243591-D39F-4696-AE1C-DB7C65823EA7}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe FirewallRules: [{4466584F-7D7B-46DC-ADA6-752C9AD3AE8E}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [{29C37AD5-23BB-4775-A667-D4B58956B880}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe FirewallRules: [TCP Query User{F842B238-7DC5-4DB2-BC7A-C15738AC3AFC}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe FirewallRules: [UDP Query User{E0F113EA-49A3-4B2D-849A-D58495CFF8C5}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe FirewallRules: [TCP Query User{46F49C6F-DB73-4881-A6A8-0CA1B0E1DCC6}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{BE169B55-C441-4D3A-8082-31BD7F8CFBAA}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe FirewallRules: [{63DB4D6B-276F-4649-BF21-C02D4FADAEB0}] => (Allow) LPort=8317 FirewallRules: [TCP Query User{8B707C4C-6416-4F7B-AE88-63725429F9BD}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe FirewallRules: [UDP Query User{566C9349-E633-46FE-B9FC-531CD1697F1D}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe FirewallRules: [{8774AE70-6619-4737-8405-F4001580A0BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe FirewallRules: [{CC19F6B5-623D-497A-86B4-2E0835AFDBBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe FirewallRules: [{66BC2096-EF75-4AD2-9261-2CF27DB94607}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe FirewallRules: [{5BB2782F-38AC-4B1B-9F23-225C6BB923E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe FirewallRules: [TCP Query User{996945A8-E5AE-4047-8788-AFDE9821FB71}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe FirewallRules: [UDP Query User{B9260334-AACA-46AC-AB81-A37320A4AD38}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe FirewallRules: [TCP Query User{58DBE857-49F7-4DDE-8DE1-7CA9F3E078AB}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe FirewallRules: [UDP Query User{2FFB8F78-CEAC-4608-B590-E302C0074AD5}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe FirewallRules: [TCP Query User{B882810C-3728-4C71-B71D-A7C55165B93A}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [UDP Query User{A04F4B5E-DF13-4933-91C7-C68D21360FD6}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe FirewallRules: [{F1F9B650-7AF5-4A51-851A-92B39EE53BE0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe FirewallRules: [{A2204E5F-0F64-436E-94B7-A8AB9A69F33A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe FirewallRules: [TCP Query User{7B75A489-FB05-45AA-A39B-D2BBEC7FB9C1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{57CB02DE-DD96-4EA0-9C57-E2866AD5E83D}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{4A223B7E-7D30-4B41-BC28-9A61FDFF53D8}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe FirewallRules: [UDP Query User{FE2A0640-0392-4700-9107-A49C8FC4BA48}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe FirewallRules: [TCP Query User{0555506F-FE6B-4D40-B4C7-E9E5FF53ACF2}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{CDF60FC9-95FB-4C13-B344-776F06AF3721}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{16E449D0-A8C3-4AF6-990A-32468841D94A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{F9F142AC-BC35-49F6-A411-5F7814457420}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{15C3D140-BD93-4781-AB38-67904DA670CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{53CCA546-9903-4095-B8F4-8032EF71D3CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [TCP Query User{72B96AD4-A215-4BE5-89B7-97F74E939106}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{4E959108-BDD6-4D15-9929-3E9A01620C28}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [{0832F117-CB42-4FC6-A6D9-DB60DEDA6F9F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe FirewallRules: [{9C743BB5-4100-4411-9CF1-5BEF441C28B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe FirewallRules: [TCP Query User{598E3D36-851A-4638-B28A-DB90C82CA8AB}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe FirewallRules: [UDP Query User{BD2297DD-DF53-4AA9-8831-473322ADC0A8}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe FirewallRules: [TCP Query User{58233860-5523-4808-85B4-6B7BB3AFF168}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe FirewallRules: [UDP Query User{7195C04B-88EF-49A3-AC25-F50D64B87202}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe FirewallRules: [TCP Query User{2D43B713-4EF2-49AC-A782-4DA4C219EBBF}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [UDP Query User{6391E82D-BEBB-49F1-AC83-1E2865CBB5EB}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe FirewallRules: [{2EF8885F-FBA1-4F88-9FC7-C905C11FE1D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe FirewallRules: [{3F728ED7-288B-44DF-98DE-D61F9CE99060}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe FirewallRules: [TCP Query User{254B8670-E11B-4B6F-A76C-25571C173004}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{87A06178-1884-480A-B93B-E23A2593FE32}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [TCP Query User{E5C786C2-506E-41A8-8EEF-A1A50875B061}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe FirewallRules: [UDP Query User{AFBB9732-4EFD-4F46-BBEB-CE9835B07079}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe FirewallRules: [{FF207E3B-7EAB-4FBA-BBB8-3185177EC3C1}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe FirewallRules: [{0AA63053-179F-4918-8A94-677213B9D9FB}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe FirewallRules: [{946931B3-E955-4E0C-8D5F-AAD57DBF0622}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe FirewallRules: [{C663C848-3CC2-4AED-8DFE-B2F52767C863}] => (Allow) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe FirewallRules: [{D25BF0AF-E525-481F-AA1C-964C4DD69302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe FirewallRules: [{713CDFD1-7853-4D3D-B9F6-8ECB30C0694B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe FirewallRules: [TCP Query User{BBE327D4-33F2-4B51-A4B6-9F7088B2E87A}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe FirewallRules: [UDP Query User{940C14B9-48B5-4D15-955F-66DD894B16FF}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe FirewallRules: [{8B892E02-320F-4B85-ADAC-10EA2F56D34D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe FirewallRules: [{6D952D6F-FA2A-47B5-85DF-BC8C1A954058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe FirewallRules: [{8C7D35B8-9FE2-481C-9D2D-3CE3E6CEC46B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe FirewallRules: [{E4F5FE9B-D893-4AA8-80BB-DE56D3B70D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe FirewallRules: [{4F49EF8A-7D57-43E9-9F40-D2D071FA2DBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe FirewallRules: [{9754D73C-1DF2-4F3F-AF50-DFABE5D92A37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe FirewallRules: [{9ACE691F-54B6-4050-8A09-41F25A7E9927}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe FirewallRules: [{3D5015AE-039D-4C87-9F70-E103F3999163}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe FirewallRules: [{F40773A1-9244-44C9-92AA-78B7D48AD03E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe FirewallRules: [{14DA3B7B-5454-43DD-9FE1-6FFD723F68BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe FirewallRules: [{B1AA9A96-F52A-4612-B61B-D0BDB9F56AFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe FirewallRules: [{16174C44-7670-40CD-851C-BC728C689CEB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe FirewallRules: [{8E68E757-9B47-4768-B80B-F22B989D1875}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe FirewallRules: [{09585341-4D49-4506-B012-03675C5E0242}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe FirewallRules: [{1096E7AE-1F0C-4B94-89DA-3E880386CEDF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe FirewallRules: [{0C02D692-A514-4849-9D43-BFCA2EFC77AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe FirewallRules: [{502C23F8-2C95-4C09-A00A-45CA27CC1731}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe FirewallRules: [{6AD92839-8CC4-4640-B670-2AD1ED0A283D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe FirewallRules: [TCP Query User{E24D4284-001F-4B5F-9E60-9DA6F0AC006C}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{B149A0D6-AA01-4239-AF43-CF6936463F94}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe FirewallRules: [{FA94524A-6DA7-4698-AB94-3A7341AE5685}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe FirewallRules: [{5087BF38-43B7-4D3E-ABA9-BA3D06B8254F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe FirewallRules: [TCP Query User{09FC800A-1DE0-4B22-857E-854F303B6D5B}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{BC59956C-5ED5-43DB-918E-81190AC56AB9}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe FirewallRules: [{53445603-D5CF-436A-9749-13DE5E7559B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{73CED924-4294-40B2-82BF-A6B365386D00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{4E5D5C95-1AEC-4CB4-9C7B-C76826871E99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe FirewallRules: [{14DAD71E-3FE9-4505-AEE6-5DA5ABF73D99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe FirewallRules: [{E8EC73D2-4510-477A-9E45-7E37D53DC62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe FirewallRules: [{ABB8DF44-6353-4B93-A65E-466B8B187DAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: wpnfd_1_10_0_2 Description: wpnfd_1_10_0_2 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: wpnfd_1_10_0_2 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: BlueStacks Hypervisor Description: BlueStacks Hypervisor Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: BstHdDrv Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (09/19/2015 08:44:57 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (09/18/2015 06:44:54 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2015 01:47:12 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/17/2015 01:34:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/16/2015 03:16:36 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm isaac-ng.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: ab0 Startzeit: 01d0f081d5700597 Endzeit: 14 Anwendungspfad: C:\Users\SimonsZocken\Desktop\The Binding Of Isaac Rebirth\isaac-ng.exe Berichts-ID: 23cdf068-5c75-11e5-85d3-448a5b97a961 Error: (09/16/2015 01:35:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2015 01:35:26 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Systemfehler: ============= Error: (09/19/2015 12:14:50 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung empfangen: 20. Error: (09/19/2015 12:08:43 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung empfangen: 20. Error: (09/19/2015 09:54:14 AM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "ARI-PC", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EED73D88-452A-4C7B-8FAD-BEF5D841CEE7}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (09/19/2015 08:56:35 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung empfangen: 20. Error: (09/19/2015 08:45:37 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (09/19/2015 08:44:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: wpnfd_1_10_0_2 Error: (09/19/2015 08:44:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "IHProtect Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "BlueStacks Updater Service;gadgetDataDir=C:\ProgramData\BlueStacks\UserData\Gadget"" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (09/18/2015 06:44:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: wpnfd_1_10_0_2 ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz Prozentuale Nutzung des RAM: 54% Installierter physikalischer RAM: 8120.02 MB Verfügbarer physikalischer RAM: 3722.93 MB Summe virtueller Speicher: 16238.23 MB Verfügbarer virtueller Speicher: 10689.36 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:1374.73 GB) (Free:1000.51 GB) NTFS Drive d: () (Fixed) (Total:488.18 GB) (Free:487.78 GB) NTFS Drive e: (AOE) (CDROM) (Total:5.1 GB) (Free:0 GB) CDFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 361F625A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=488.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=1374.7 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ |
20.09.2015, 12:14 | #5 |
/// the machine /// TB-Ausbilder | TR/Agent Virus Minecraft.exe ist befallen hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu TR/Agent Virus Minecraft.exe ist befallen |
.exe, bedingt, befallen, befällt, bereits, brauche, durchgeführt, guten, hilfe, problem, scan, tr/agent, unbedingt, virus |