Panda Internet Security 2016 - SMART ARP ATTACK

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015
durchgeführt von Martin (Administrator) auf MAT (27-09-2015 15:11:12)
Gestartet von D:\Downloads
Geladene Profile: Martin (Verfügbare Profile: Martin)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Panda Security, S.L.) D:\Panda Security\PSANHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) D:\Panda Security\PSUAService.exe
() C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Flux Software LLC) C:\Users\Martin\AppData\Local\FluxSoftware\Flux\flux.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
(Panda Security, S.L.) D:\Panda Security\PSUAMain.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) D:\Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2015-04-27] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM-x32\...\Run: [PSUAMain] => D:\Panda Security\PSUAMain.exe [54520 2015-07-28] (Panda Security, S.L.)
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Run: [f.lux] => C:\Users\Martin\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53736048 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\avast! SecureLine.lnk [2015-09-21]
ShortcutTarget: avast! SecureLine.lnk -> C:\Program Files\AVAST Software\SecureLine\SecureLine.exe (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2015-03-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E48607A4-1E3F-4BF8-AEE2-47D7EE87B6CE}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default
FF DefaultSearchEngine: DuckDuckGo
FF Homepage: hxxps://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-09-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-09-13] (NVIDIA Corporation)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Martin\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\user.js [2015-06-26]
FF Extension: YouTube Unblocker - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\youtubeunblocker__web@unblocker.yt [2015-09-01]
FF Extension: MEGA - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\firefox@mega.co.nz.xpi [2015-07-31]
FF Extension: Grooveshark Unlocker - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\groovesharkUnlocker@overlord1337.xpi [2015-05-16]
FF Extension: flash updater - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\{4cfe964e-df39-4f00-b895-7e5b5975496d}.xpi [2015-07-20]
FF Extension: pdf shield pro - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\{83348fa0-b168-4ad9-8c08-36f3d83a1a66}.xpi [2015-06-23]
FF Extension: Adblock Plus - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\1tr99v49.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-28]
StartMenuInternet: FIREFOX.EXE - D:\Firefox\firefox.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 GalaxyClientService; D:\GalaxyClient\GalaxyClientService.exe [1738808 2015-09-09] (GOG.com)
S4 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6943800 2015-09-09] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
S2 MBAMService; D:\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 NanoServiceMain; D:\Panda Security\PSANHost.exe [142072 2015-07-29] (Panda Security, S.L.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2057736 2015-09-09] (Electronic Arts)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [73464 2015-07-23] (Panda Security, S.L.)
R2 PSUAService; D:\Panda Security\PSUAService.exe [38136 2015-07-28] (Panda Security, S.L.)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [445240 2015-05-12] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-09-05] (The OpenVPN Project)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [529392 2015-08-20] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 EvolveVirtualAdapter; C:\Windows\system32\DRIVERS\evolve.sys [21656 2015-07-24] (Echobit, LLC)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-03-11] (REALiX(tm))
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [178976 2015-07-07] (Intel Corporation)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [94456 2015-07-09] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [201976 2015-07-09] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110840 2015-07-09] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [110840 2015-07-09] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [103160 2015-07-09] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [78072 2015-07-09] ()
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124152 2015-07-09] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [300280 2015-07-09] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [170232 2015-07-09] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113400 2015-07-09] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [257784 2015-07-09] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106232 2015-07-09] (Panda Security, S.L.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [39032 2015-09-14] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [164088 2015-07-19] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121592 2015-07-19] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [197880 2015-07-19] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124152 2015-07-19] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [134392 2015-07-19] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107768 2015-07-19] (Panda Security, S.L.)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33448 2015-07-07] (Synaptics Incorporated)
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [32792 2015-06-01] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [42672 2015-09-04] (SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-27 15:08 - 2015-09-27 15:11 - 00000000 ____D C:\FRST
2015-09-27 01:51 - 2015-09-27 01:51 - 00000636 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2015-09-27 01:51 - 2015-09-27 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2015-09-27 00:19 - 2015-09-27 00:20 - 00007157 _____ C:\Users\Martin\Desktop\infos.txt
2015-09-26 19:17 - 2015-09-26 19:17 - 00000117 _____ C:\Users\Martin\Desktop\enbinjector.ini
2015-09-26 19:17 - 2015-09-26 19:17 - 00000031 _____ C:\Users\Martin\Desktop\LoLUpdater.ini
2015-09-26 19:16 - 2015-06-04 15:28 - 00961192 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00062304 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00883712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00064352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 19:16 - 2015-06-04 15:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 19:07 - 2015-09-02 19:17 - 101460480 _____ (https://lolupdater.com) C:\Users\Martin\Desktop\LoLUpdater.exe
2015-09-26 18:49 - 2015-09-26 18:49 - 00002153 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-09-26 18:48 - 2015-09-13 23:50 - 00574072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-09-26 18:47 - 2015-09-14 02:29 - 42840368 _____ C:\Windows\system32\nvcompiler.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 37819000 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 22525560 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 18543736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 16637528 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 15513208 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 14936264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 13660648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 12185344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 11096696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-09-26 18:47 - 2015-09-14 02:29 - 02940024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 02627192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 01898288 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435598.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 01558832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435598.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 01105976 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 01074808 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 01064056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00986232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00944760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00943712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00879000 _____ C:\Windows\system32\nvmcumd.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00512904 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00421544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00408184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00364152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00117552 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2015-09-26 18:47 - 2015-09-14 02:29 - 00039032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2015-09-26 17:43 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-26 17:43 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-26 17:43 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-26 17:43 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-26 17:43 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-26 17:42 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-26 17:42 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-26 17:42 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-26 17:42 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-26 17:42 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-26 17:42 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-26 17:42 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-26 17:42 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-26 17:42 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-09-26 17:42 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-26 17:42 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-26 17:42 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-26 17:42 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-26 17:42 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-26 17:42 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-26 17:42 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-26 17:42 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-26 17:42 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-26 17:42 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-26 17:42 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-09-26 17:42 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-26 17:42 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-09-26 17:42 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-26 17:42 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-26 17:42 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-26 17:42 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-26 17:42 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-26 17:42 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-26 17:42 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-26 17:42 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-09-26 17:42 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-26 17:42 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-09-26 17:42 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-26 17:42 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-26 17:42 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-26 17:42 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-26 17:42 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-26 17:42 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-26 17:42 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-26 17:42 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-26 17:42 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-26 17:42 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-26 17:42 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-26 17:42 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-26 17:42 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-26 17:42 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-26 17:42 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-26 17:42 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-26 17:42 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-09-26 17:42 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-26 17:42 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-26 17:42 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-09-26 17:42 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-09-26 17:42 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-26 17:42 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-26 17:42 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-09-26 17:42 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-09-26 17:42 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-09-26 17:42 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-09-26 17:42 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-09-26 17:42 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-09-26 17:42 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-09-26 17:42 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-09-26 17:42 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-09-26 17:42 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-09-26 17:42 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-09-26 17:42 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-09-26 17:42 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-26 17:42 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-09-26 17:42 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-09-26 17:42 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-09-26 17:41 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-26 17:41 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-26 17:41 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-26 17:41 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-26 17:41 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-26 17:41 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-26 17:41 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-26 17:41 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-26 17:41 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2015-09-26 17:41 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2015-09-26 17:41 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-26 17:41 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2015-09-26 17:41 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2015-09-26 17:41 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-09-26 17:41 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-09-26 17:41 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-09-26 17:41 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-09-26 17:41 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-09-26 17:41 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-09-26 17:41 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-09-26 17:41 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-09-26 17:41 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-09-26 17:41 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-09-26 17:41 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-26 17:41 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-09-26 17:41 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-26 17:41 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-09-26 17:41 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-09-26 17:41 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-09-26 17:41 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-09-26 17:41 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-09-26 17:41 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-09-26 17:41 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-09-26 17:41 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-09-26 17:41 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2015-09-26 17:41 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-26 17:41 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-09-26 17:41 - 2015-07-13 21:10 - 00411455 _____ C:\Windows\system32\ApnDatabase.xml
2015-09-26 17:41 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-09-26 17:41 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-09-26 17:41 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-09-26 17:41 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-09-26 17:41 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-09-26 17:41 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-09-26 17:41 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-09-26 17:41 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-09-26 17:41 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-09-26 17:41 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-09-26 17:39 - 2015-09-26 17:39 - 00519724 _____ C:\Users\Martin\Desktop\FixDotNet20150926153947635.cab
2015-09-22 20:59 - 2015-09-27 15:11 - 00000000 ____D C:\Users\Martin\AppData\Roaming\NetSpeedMonitor
2015-09-22 20:59 - 2015-09-22 20:59 - 00000000 ____D C:\Program Files\NetSpeedMonitor
2015-09-22 19:09 - 2015-09-22 19:09 - 00001251 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Avast SecureLine.lnk
2015-09-21 23:28 - 2015-09-21 23:41 - 00000000 ____D C:\Users\Martin\Documents\FIFA 16
2015-09-21 23:11 - 2015-09-21 23:11 - 00003910 _____ C:\Windows\System32\Tasks\avast! SL Update
2015-09-21 23:11 - 2015-09-21 23:11 - 00001025 _____ C:\Users\Public\Desktop\Avast SecureLine.lnk
2015-09-21 23:11 - 2015-09-21 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-21 23:11 - 2015-09-21 23:11 - 00000000 ____D C:\ProgramData\AVAST Software
2015-09-21 23:11 - 2015-09-21 23:11 - 00000000 ____D C:\Program Files\AVAST Software
2015-09-21 23:11 - 2014-09-05 14:09 - 00044640 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\aswTap.sys
2015-09-21 16:51 - 2015-09-21 16:51 - 00000925 _____ C:\Users\Martin\Desktop\trace.txt
2015-09-19 21:47 - 2015-09-19 21:47 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Gyazo
2015-09-19 21:46 - 2015-09-27 02:33 - 00000000 ____D C:\Program Files (x86)\Gyazo
2015-09-19 21:46 - 2015-09-19 21:46 - 00000998 _____ C:\Users\Public\Desktop\Gyazo.lnk
2015-09-19 21:46 - 2015-09-19 21:46 - 00000998 _____ C:\Users\Public\Desktop\Gyazo GIF.lnk
2015-09-19 21:46 - 2015-09-19 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2015-09-19 01:28 - 2015-09-19 01:28 - 00001532 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\League of Legends (6).lnk
2015-09-17 23:14 - 2015-09-17 23:15 - 00001637 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Internet Security 2016.lnk
2015-09-17 23:14 - 2015-09-17 23:14 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Panda Security
2015-09-17 23:14 - 2015-09-17 23:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Internet Security 2016
2015-09-17 23:14 - 2015-09-17 23:14 - 00000000 ____D C:\Program Files (x86)\Panda Security
2015-09-15 21:39 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-09-15 21:39 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-09-13 19:07 - 2015-09-13 19:11 - 00000000 ____D C:\Users\Martin\AppData\Local\dof
2015-09-12 02:26 - 2015-09-12 02:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blobby Volley 2 Version 1.0
2015-09-12 02:24 - 2015-09-12 02:24 - 00000000 ____D C:\Users\Martin\Desktop\Blobby
2015-09-12 01:52 - 2015-09-12 01:52 - 00000000 ____D C:\Users\Martin\AppData\Local\Risk_of_Rain
2015-09-12 00:09 - 2015-09-12 00:09 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashRpt
2015-09-11 15:04 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-11 15:04 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-09-11 13:34 - 2015-09-12 00:13 - 00000000 ____D C:\Users\Martin\AppData\Local\wf-launcher
2015-09-11 13:34 - 2015-09-11 23:59 - 00000000 ____D C:\ProgramData\GFACE
2015-09-11 01:27 - 2015-09-11 01:27 - 00000000 ____D C:\Users\Martin\Documents\FIFA 16 Demo
2015-09-10 02:21 - 2015-09-10 02:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher® 3 - Wild Hunt [GOG.com]
2015-09-05 22:25 - 2015-09-05 22:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-05 22:25 - 2015-09-05 22:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-04 04:20 - 2015-09-04 04:20 - 00042672 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys
2015-09-04 01:31 - 2015-09-27 11:31 - 00000000 ____D C:\Program Files\MyDefrag v4.3.1
2015-09-04 01:31 - 2015-09-04 01:31 - 00000875 _____ C:\Users\Public\Desktop\MyDefrag.lnk
2015-09-03 23:12 - 2015-09-03 23:12 - 00001532 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\League of Legends (5).lnk
2015-08-28 19:49 - 2015-08-28 19:49 - 00001532 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\League of Legends (4).lnk

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-27 15:09 - 2015-03-11 17:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\ClassicShell
2015-09-27 14:43 - 2015-04-01 21:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-27 14:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-09-27 12:41 - 2015-03-11 17:36 - 01546620 _____ C:\Windows\WindowsUpdate.log
2015-09-27 12:04 - 2015-03-11 17:44 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B7902AC2-8D8D-4A34-AA6C-EC3D53B99613}
2015-09-27 11:31 - 2015-03-11 17:44 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1509404375-1592212314-1928463619-1001
2015-09-27 05:36 - 2014-03-18 12:03 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-27 05:36 - 2014-03-18 11:25 - 00764340 _____ C:\Windows\system32\perfh007.dat
2015-09-27 05:36 - 2014-03-18 11:25 - 00159160 _____ C:\Windows\system32\perfc007.dat
2015-09-27 05:31 - 2015-03-12 00:20 - 00000000 ____D C:\ProgramData\Origin
2015-09-27 05:31 - 2015-03-11 17:47 - 00002866 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Martin)
2015-09-27 05:31 - 2015-03-11 17:42 - 00000000 ___DO C:\Users\Martin\OneDrive
2015-09-27 05:30 - 2015-05-06 18:00 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-27 05:30 - 2014-03-18 03:50 - 00052828 _____ C:\Windows\PFRO.log
2015-09-27 05:30 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-27 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-27 05:30 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-09-27 05:30 - 2013-08-22 16:46 - 00039144 _____ C:\Windows\setupact.log
2015-09-27 05:30 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-27 03:35 - 2015-03-11 19:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2015-09-27 02:33 - 2015-03-25 23:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2015-09-26 19:15 - 2015-03-12 00:27 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-26 18:49 - 2015-05-06 17:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-09-26 18:49 - 2015-05-06 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-09-26 18:13 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-09-26 17:48 - 2013-08-22 16:44 - 00380872 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-26 17:47 - 2015-03-11 18:18 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-09-26 17:47 - 2015-03-11 18:18 - 00000000 ____D C:\Windows\system32\appraiser
2015-09-26 17:47 - 2014-03-18 11:40 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-26 17:47 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-26 17:47 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-26 17:47 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-09-26 17:47 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-09-26 17:44 - 2015-03-11 18:07 - 00000000 ____D C:\Windows\system32\MRT
2015-09-26 17:44 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-26 17:44 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-26 17:36 - 2015-03-11 17:47 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-25 12:03 - 2015-03-11 18:37 - 00000000 ____D C:\Users\Martin\AppData\Local\SteelSeries Engine 3 Client
2015-09-25 11:51 - 2015-03-11 19:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Battle.net
2015-09-25 08:40 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-09-22 21:16 - 2015-04-04 01:48 - 00025088 ___SH C:\Users\Martin\Desktop\Thumbs.db
2015-09-22 20:55 - 2015-07-25 16:05 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-22 20:54 - 2015-03-11 17:47 - 00000000 ____D C:\ProgramData\ProductData
2015-09-22 19:59 - 2015-05-21 22:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2015-09-22 03:43 - 2015-04-01 21:34 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-18 23:01 - 2015-04-01 21:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2015-09-17 23:14 - 2015-03-11 17:51 - 00000000 ____D C:\ProgramData\Panda Security
2015-09-17 22:38 - 2015-07-25 16:05 - 00000637 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-09-15 03:18 - 2013-08-22 17:38 - 00812008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-09-15 03:18 - 2013-08-22 17:38 - 00178152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-14 02:29 - 2015-05-18 12:47 - 14635600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 03530608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 03116160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 01558832 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 00112760 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 00105080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-09-14 02:29 - 2015-05-06 17:59 - 00033079 _____ C:\Windows\system32\nvinfo.pb
2015-09-14 02:29 - 2015-03-11 18:30 - 12514824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-09-14 02:29 - 2015-03-11 18:03 - 17082928 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-09-14 00:09 - 2015-05-06 17:59 - 06884984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-09-14 00:09 - 2015-05-06 17:59 - 03496056 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-09-14 00:09 - 2015-05-06 17:59 - 02558584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-09-14 00:09 - 2015-05-06 17:59 - 00937776 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-09-14 00:09 - 2015-05-06 17:59 - 00385144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-09-14 00:09 - 2015-05-06 17:59 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-09-11 14:17 - 2015-05-06 17:59 - 05231082 _____ C:\Windows\system32\nvcoproc.bin
2015-09-10 02:22 - 2015-05-19 14:44 - 00000000 ____D C:\Users\Martin\Documents\The Witcher 3
2015-09-09 23:59 - 2015-05-19 14:44 - 00000000 ____D C:\Users\Martin\AppData\Local\GalaxyCommunicationService
2015-09-07 19:52 - 2015-03-11 17:39 - 00000000 ____D C:\Users\Martin\AppData\Local\VirtualStore
2015-09-05 22:25 - 2015-03-11 19:45 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2015-09-05 22:25 - 2015-03-11 19:45 - 00000000 ____D C:\ProgramData\Skype
2015-09-05 13:23 - 2015-03-19 19:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-04 01:38 - 2015-08-11 16:34 - 00000000 ____D C:\Users\Martin\AppData\Roaming\DisplayTune

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-07-06 15:16 - 2014-09-09 18:44 - 0017542 _____ () C:\Users\Martin\AppData\Local\amazon.ico

Einige Dateien in TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Martin\AppData\Local\Temp\nvStInst.exe
C:\Users\Martin\AppData\Local\Temp\{22631183-E4C1-4614-896E-91ECFC569186}.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-25 05:43

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-09-2015
durchgeführt von Martin (2015-09-27 15:11:27)
Gestartet von D:\Downloads
Windows 8.1 (X64) (2015-03-11 15:39:03)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1509404375-1592212314-1928463619-500 - Administrator - Disabled)
Gast (S-1-5-21-1509404375-1592212314-1928463619-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1509404375-1592212314-1928463619-1003 - Limited - Enabled)
Martin (S-1-5-21-1509404375-1592212314-1928463619-1001 - Administrator - Enabled) => C:\Users\Martin

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Panda Internet Security 2016 (Enabled - Up to date) {AAF74A68-8713-CDF1-004F-30003398BE9E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Internet Security 2016 (Enabled - Up to date) {1196AB8C-A129-C27F-3AFF-0B72481FF423}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Panda Firewall (Enabled) {92CCCB4D-CD7C-CCA9-2B10-9935CD4BF9E5}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Action Henk (HKLM-x32\...\Steam App 285820) (Version:  - RageSquid)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 1.0.244.0 - AVAST Software)
Blobby Volley 2 Version 1.0 (HKLM-x32\...\Blobby Volley 2 Version 1.0_is1) (Version:  - )
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - Techland)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
DiRT Rally (HKLM-x32\...\Steam App 310560) (Version:  - Codemasters Racing Studio)
Driver Booster 2.4 (HKLM-x32\...\Driver Booster_is1) (Version: 2.4 - IObit)
f.lux (HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Flux) (Version:  - )
FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.0.3.0 - Electronic Arts)
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Football Manager 2015 (HKLM-x32\...\Steam App 295270) (Version:  - Sports Interactive)
Game of Thrones (HKLM-x32\...\{4B1B0CB7-B136-45D6-A63B-CF01EE964E50}_is1) (Version: 2015.5.28.1699 - Telltale Games)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Intel(R) C++ Redistributables on IA-32 (HKLM-x32\...\{F143FC2D-B3F5-4FD6-BD51-B11F855B5124}) (Version: 15.0.221 - Intel Corporation)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MacroX 3.1 (HKLM-x32\...\MacroX) (Version: 3.1 - Uhrzeit.org)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 37.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0 (x86 de)) (Version: 37.0 - Mozilla)
Mozilla Firefox 38.0.5 (x86 de) (HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nostalrius WoW version 1.12.1 (HKLM-x32\...\{66622061-C7A3-495E-8D87-027F4A7027BC}_is1) (Version: 1.12.1 - Nostalrius)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.98 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.98 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 355.98 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.2 - Panda Security)
Panda Devices Agent (x32 Version: 1.03.05 - Panda Security) Hidden
Panda Devices Agent (x32 Version: 1.06.00 - Panda Security) Hidden
Panda Internet Security 2016 (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 16.00.01.0000 - Panda Security)
Panda Internet Security 2016 (Version: 8.03.00.0000 - Panda Security) Hidden
Pillars of Eternity (HKLM-x32\...\Steam App 291650) (Version:  - Obsidian Entertainment)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - Slightly Mad Studios)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.13004.105 - raidcall.com)
Ratz Instagib 2.0 (HKLM-x32\...\Steam App 338170) (Version:  - Lino Slahuschek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version:  - )
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.7 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Samsung SSD 840 EVO Performance Restoration (HKLM-x32\...\{B4B18E77-4C37-46F2-BC38-9451E65C9AEC}_is1) (Version: 1.1 - Samsung Electronics)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
SteelSeries Engine 3.4.4.1 (HKLM\...\SteelSeries Engine 3) (Version: 3.4.4.1 - SteelSeries ApS)
TeamSpeak 2 RC2 (HKLM-x32\...\Teamspeak 2 RC2_is1) (Version: 2.0.32.60 - Dominating Bytes Design)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Teslagrad (HKLM-x32\...\Steam App 249590) (Version:  - Rain Games)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.8.4 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Ciri (HKLM-x32\...\Alternative Look for Ciri_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Triss (HKLM-x32\...\Alternative Look for Triss_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Yennefer (HKLM-x32\...\Alternative Look for Yennefer_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Ballad Heroes - Neutral Gwent Card Set (HKLM-x32\...\Ballad Heroes - Neutral Gwent Card Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Elite Crossbow Set (HKLM-x32\...\Elite Crossbow Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Finisher Animations (HKLM-x32\...\New Finisher Animations_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - NEW GAME + (HKLM-x32\...\NEW GAME +_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted (HKLM-x32\...\New Quest - Contract: Skellige's Most Wanted_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Fool's Gold (HKLM-x32\...\New Quest - Fool's Gold_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Scavenger Hunt - Wolf School Gear (HKLM-x32\...\New Quest - Scavenger Hunt: Wolf School Gear_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Where the Cat and Wolf Play... (HKLM-x32\...\New Quest - Where the Cat and Wolf Play..._is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Nilfgaardian Armor Set (HKLM-x32\...\Nilfgaardian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Skellige Armor Set (HKLM-x32\...\Skellige Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
Titan Souls (HKLM-x32\...\Steam App 297130) (Version:  - Acid Nerve)
Total War: Arena (HKLM-x32\...\Steam App 227520) (Version:  - Creative Assembly)
Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft)
Valhalla Hills (HKLM-x32\...\Steam App 351910) (Version:  - Funatics Software)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

10-09-2015 20:30:04 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
19-09-2015 04:24:47 Geplanter Prüfpunkt
21-09-2015 20:03:53 Installed NetSpeedMonitor 2.5.4.0 x64
22-09-2015 20:58:54 Installed NetSpeedMonitor 2.5.4.0 x64
25-09-2015 11:59:05 DirectX wurde installiert
26-09-2015 17:36:39 Removed Chrome Remote Desktop Host

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {206327B3-8243-4471-90A6-E01F4A3E2C90} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {5D4FB4C4-EB08-4B24-8E86-77095BCC4038} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {6878DF65-AA8D-49C0-8244-5E801DB2C27F} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-07-06] (IObit)
Task: {759BD858-44F4-47F6-91D4-DA714AA708F2} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
Task: {974110CD-ACAF-44B4-88BA-2070E66650CD} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {9F8270C7-15F0-433B-8296-9ADAF044AD5D} - System32\Tasks\avast! SL Update => C:\Program Files\AVAST Software\SecureLine\SLUpdate.exe [2015-05-12] (AVAST Software)
Task: {ABC003E2-FB9B-4434-9A7E-A4D55E8F4B42} - System32\Tasks\Driver Booster SkipUAC (Martin) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-07-06] (IObit)
Task: {B613B85C-D433-4838-9897-D886C9B6DB09} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22] (Adobe Systems Incorporated)
Task: {EA6F2E0D-A3F8-44B3-98C6-4B8A4B567DF4} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {FC599943-E92C-43F2-809B-F1D3661FE1CC} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-07-06] (IObit)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-05-06 17:59 - 2015-09-14 00:09 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-21 23:11 - 2015-05-12 16:11 - 00445240 _____ () C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
2015-03-05 18:44 - 2015-03-05 18:44 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll
2013-04-12 19:23 - 2013-04-12 19:23 - 00612664 _____ () D:\Panda Security\SQLite3.dll
2015-05-06 17:52 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-09-21 23:11 - 2015-05-12 16:11 - 38561984 _____ () C:\Program Files\AVAST Software\SecureLine\libcef.dll
2015-03-19 19:32 - 2014-09-28 18:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Martin\OneDrive:ms-properties

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: chromoting => 2
MSCONFIG\Services: EvoSvc => 3
MSCONFIG\Services: GalaxyClientService => 3
MSCONFIG\Services: GalaxyCommunication => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "Start WingMan Profiler"
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\StartupApproved\Run: => "EvolveClient"
HKU\S-1-5-21-1509404375-1592212314-1928463619-1001\...\StartupApproved\Run: => "Gyazo"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{30798737-7432-46F4-BD9C-DCEBD0678750}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{6A8A32A6-3477-4966-A261-F5C702750C19}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{315A5F1E-30E8-4803-985E-8ED4D4AB5068}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{288DC537-2D81-424D-A652-B07D4B5DBED9}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DA90B3E7-3686-49D3-B564-EF93E4B54281}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1AC89309-FB0A-4108-BF46-7033F5CFEF59}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{0228BC4D-9A2C-40B8-8F79-8E868428543D}D:\blizzard\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\blizzard\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{EF47BFF1-89F8-470C-AC32-429B60E9ACF0}D:\blizzard\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) D:\blizzard\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{5E65D240-BAAD-48DD-B693-7A95AF786F57}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{3254968E-9CE0-4139-BA05-C5706FE4873C}D:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) D:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{5EA033BA-BBA5-4C39-863C-EA5C0125BDF6}] => (Allow) D:\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{791ED270-D44C-4DA2-B2BD-0C3CE8A93DDF}] => (Allow) D:\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{BF220DC6-CEF6-46BF-AB82-F6CC8CF5D4D1}D:\blizzard\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\blizzard\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{BA4AC362-9DA3-453B-A74A-7619D5995369}D:\blizzard\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) D:\blizzard\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{4CF0BA88-83B0-4A3D-8A73-65964002C40F}] => (Allow) D:\Blizzard\Diablo III\Diablo III.exe
FirewallRules: [{B6E3662C-3501-4399-8986-348A7C1021BC}] => (Allow) D:\Blizzard\Diablo III\Diablo III.exe
FirewallRules: [{23FA6A94-3B81-4488-8CF1-05BDB1D71B9C}] => (Allow) D:\Steam\SteamApps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{5E11DFC0-E2AE-46FB-8A38-585F7B0454F6}] => (Allow) D:\Steam\SteamApps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{C29B38B3-BF13-4FB3-8BC7-C0CFBBD96623}] => (Allow) D:\Blizzard\Hearthstone\Hearthstone.exe
FirewallRules: [{92C2C573-E5F8-420A-BA1D-16A3E65F1D7B}] => (Allow) D:\Blizzard\Hearthstone\Hearthstone.exe
FirewallRules: [{C04D90D8-C8D5-46EE-B77E-64E961FFDFAA}] => (Allow) D:\Firefox\firefox.exe
FirewallRules: [{DBEF1C0E-2E19-47C2-BB5F-8B4A62356308}] => (Allow) D:\Firefox\firefox.exe
FirewallRules: [TCP Query User{0CAF650C-A9FA-44E0-A30A-29D5892BEBB2}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{0D66ADAC-1B9F-40F4-80B7-900BC64DD6BB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{17212B7C-06A8-4F25-BF04-6F4FA0E416E4}D:\soundwire server\soundwireserver.exe] => (Allow) D:\soundwire server\soundwireserver.exe
FirewallRules: [UDP Query User{C37B0E46-4112-42FF-A33D-316A71500C59}D:\soundwire server\soundwireserver.exe] => (Allow) D:\soundwire server\soundwireserver.exe
FirewallRules: [{6612B062-1968-4177-9DD2-4C8778379482}] => (Allow) D:\Steam\SteamApps\common\Titan Souls\TITAN.exe
FirewallRules: [{B0B76135-82DE-4603-9C9C-A5437ADD22EE}] => (Allow) D:\Steam\SteamApps\common\Titan Souls\TITAN.exe
FirewallRules: [{8E1D2145-F293-4BA5-B27E-6A7791C36D53}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C8EF5CA2-7BA3-433F-A744-9E314C3D2F16}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{3B2C8099-2A05-4CC1-BF22-307CB0E0FEAC}] => (Allow) D:\Steam\SteamApps\common\Action Henk\ActionHenk.exe
FirewallRules: [{37B9F427-54C0-47F7-8756-5F50EEC5B44C}] => (Allow) D:\Steam\SteamApps\common\Action Henk\ActionHenk.exe
FirewallRules: [{193288BD-D7F8-4983-A145-C3126FD6DDBE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C1A8CDE-8B7F-41BC-9E1B-2C39AFFA74C4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{23881459-E66E-4B1D-B54E-6589644D91B7}] => (Allow) D:\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{4EF7FD7C-F0BF-48D5-808C-7FAB0B3C8F52}] => (Allow) D:\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{FD926E1A-318F-4B18-9C85-A1E00BD020E3}] => (Allow) D:\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{65B4EB99-35E5-4403-8E07-26E08282D191}] => (Allow) D:\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{07AF98B3-91EA-46B1-947A-A626EB5E9F66}] => (Allow) D:\Steam\SteamApps\common\DiRT Rally\drt.exe
FirewallRules: [{E5EB491F-C934-4DBA-80EB-6993E7FE2257}] => (Allow) D:\Steam\SteamApps\common\DiRT Rally\drt.exe
FirewallRules: [{3CE6ECFD-69B6-45AE-AA9F-70FCFB6FBD65}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe
FirewallRules: [{7D128F1E-7BFA-42BA-B9FC-B912CABA9B64}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{6EECC2CD-8A64-4634-ABAB-8CA3239E7F9D}] => (Allow) D:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{3F65F964-E21E-4B8D-8D09-0C5C4EF063BD}] => (Allow) D:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [TCP Query User{028DFA86-A443-4C94-9ACB-F48287AD7935}D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [UDP Query User{F04485DB-CAB5-4E86-9DE7-87390FD94FE7}D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{4723D982-64A5-4A0E-AF3C-41345BB49677}] => (Allow) D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{AEA0E240-4455-417D-807E-C089A0E85DC5}] => (Allow) D:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{C2180339-82B5-480C-AD33-FD276576C8D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{DFFC600C-E98F-4230-BAAA-4C0D00E78482}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0291BBB8-2874-4C6C-8212-996984F18AF2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6FF3A450-E679-4E3E-AD54-562E110195EA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8231D084-5A4E-40CC-B384-0A3FB03AFEC1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EA2A5080-E114-4141-A200-EDA224FD4DF5}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{F8B60653-4650-40AE-B614-D84AB6E88B36}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3AA76FEE-BC54-434A-813C-ECDECE1E5DCC}] => (Allow) D:\Steam\SteamApps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{97DE91D4-E061-4CED-8E31-E88F004E0F27}] => (Allow) D:\Steam\SteamApps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [TCP Query User{06799C0F-C56F-4546-B824-125B8A42570A}D:\steam\steamapps\common\total war arena\arena.exe] => (Allow) D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{427DA657-5ADD-4DF0-93E6-1E7DED2B457A}D:\steam\steamapps\common\total war arena\arena.exe] => (Allow) D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{D3C2C1AA-C93C-4AEC-B8D5-DC3EAD5DBE7C}] => (Allow) D:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{6E10D2DF-2025-45E1-B6EA-91B356AC0267}] => (Allow) D:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{F1D32E76-BFF5-4676-A436-F72F840C741A}] => (Allow) D:\Steam\SteamApps\common\Teslagrad\Teslagrad.exe
FirewallRules: [{640CCB28-3364-4812-9BFE-CCC16FAFB101}] => (Allow) D:\Steam\SteamApps\common\Teslagrad\Teslagrad.exe
FirewallRules: [TCP Query User{34B8BE69-7293-480A-962B-23F579819A4B}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{532BDE83-4EC4-42D3-BA18-4DCCA35EB5B2}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{E71FAB6F-535B-49A4-8899-44EDEB2CC619}D:\cloud imperium games\patcher\cigpatcher.exe] => (Allow) D:\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{FC40216B-75B4-4E82-A880-ADE271284777}D:\cloud imperium games\patcher\cigpatcher.exe] => (Allow) D:\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{5650C04A-E766-4013-8F18-3BAFC7B9988E}D:\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) D:\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{13A3E537-2FD5-425C-99A3-4495EC6D392A}D:\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) D:\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [{03D82030-0260-4EE9-88EF-5E95306BD620}] => (Allow) D:\Steam\SteamApps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{0DB35656-6183-4C0F-BB9E-DA113BC4AF98}] => (Allow) D:\Steam\SteamApps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{B2443D91-2CB6-42EC-8421-DF9D5FC8C76B}] => (Allow) D:\FINAL FANTASY\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{E5C02EE9-3EF5-41AB-B173-537706F4804F}] => (Allow) D:\FINAL FANTASY\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{5202F026-4D0B-4A13-A3A1-E13B37EF362F}] => (Allow) D:\FINAL FANTASY\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{12D8602F-9267-40A0-B49E-16D6BBD8FA30}] => (Allow) D:\FINAL FANTASY\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{F20EB214-19B2-464B-B33B-E812034D9186}] => (Allow) D:\Steam\SteamApps\common\Football Manager 2015\fm.exe
FirewallRules: [{D3AC5242-3266-40F2-9DEC-12D4DED6FC45}] => (Allow) D:\Steam\SteamApps\common\Football Manager 2015\fm.exe
FirewallRules: [{03AC75CA-2E51-4040-9300-123B843B8ED7}] => (Allow) D:\Steam\SteamApps\common\ValhallaHills\ValhallaHills.exe
FirewallRules: [{13590FFE-984C-4C3D-9F32-72F2F1B6345F}] => (Allow) D:\Steam\SteamApps\common\ValhallaHills\ValhallaHills.exe
FirewallRules: [TCP Query User{A3A7C781-33C0-49A6-8EC6-11DC8DD23D9E}D:\steam\steamapps\common\valhallahills\valhallahills\binaries\win64\valhallahills-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\valhallahills\valhallahills\binaries\win64\valhallahills-win64-shipping.exe
FirewallRules: [UDP Query User{DF2C66D8-2B2E-4591-9EEC-DFE6E8D00C9A}D:\steam\steamapps\common\valhallahills\valhallahills\binaries\win64\valhallahills-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\valhallahills\valhallahills\binaries\win64\valhallahills-win64-shipping.exe
FirewallRules: [{B0DA1C53-F065-449A-BA5D-B6A2B723BDA3}] => (Allow) D:\Steam\SteamApps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{341CE784-7ADE-402A-BA1B-D221B9FBB3EB}] => (Allow) D:\Steam\SteamApps\common\Magic Duels\MagicDuels.exe
FirewallRules: [TCP Query User{9EBE7A67-E382-401E-A245-3AB5D46AA3F6}D:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [UDP Query User{2C762E63-12FA-41AD-9251-D355033C7E4A}D:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) D:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [{E60780A8-7015-46B4-951E-B29867328FAA}] => (Allow) D:\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{27837EAD-ECE1-4813-A8A4-E38C52A16045}] => (Allow) D:\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{57BCECBB-605C-4B17-A2E4-2DD1E52B72AE}] => (Allow) D:\Steam\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{98D2A431-306D-475D-82DA-C8E084807BF1}] => (Allow) D:\Steam\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{72AC5853-C4FE-4196-922E-B9FEA59ACB67}] => (Allow) D:\Steam\SteamApps\common\Ratz Instagib\RatzInstagib.exe
FirewallRules: [{6EE4DFF1-2B89-4E2B-A527-E97C9B3468EA}] => (Allow) D:\Steam\SteamApps\common\Ratz Instagib\RatzInstagib.exe
FirewallRules: [TCP Query User{20332A00-4BC5-43FA-A34A-CD5B04A8634D}C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe] => (Allow) C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe
FirewallRules: [UDP Query User{2BCFC342-EA84-449B-8261-9C9E14EC8C26}C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe] => (Allow) C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe
FirewallRules: [{2E14D466-4124-459F-A9BF-C212035E4D8F}] => (Block) C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe
FirewallRules: [{46A933DB-3204-4F23-AC38-5FDAF59E6AE2}] => (Block) C:\users\martin\appdata\local\temp\rar$exa0.024\blobby-1.0\blobby.exe
FirewallRules: [TCP Query User{F8ACD7C4-FFED-49EE-9902-C547D90F186D}C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe] => (Allow) C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe
FirewallRules: [UDP Query User{37DB7CA7-D9C4-402F-BA9B-5D3F8EAEE110}C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe] => (Allow) C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe
FirewallRules: [{6F755193-C75E-416B-9411-CCDA37C432F1}] => (Block) C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe
FirewallRules: [{71982D68-38EF-476B-8D02-CF9721141A89}] => (Block) C:\users\martin\appdata\local\temp\rar$exa0.638\blobby-1.0\blobby-server.exe
FirewallRules: [TCP Query User{95D7B5C6-A4B7-4E12-B5D0-0C84159C0932}D:\blobby volley 2 version 1.0\blobby.exe] => (Allow) D:\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [UDP Query User{280DBE03-C345-4633-A279-FA9AAB5019AA}D:\blobby volley 2 version 1.0\blobby.exe] => (Allow) D:\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [TCP Query User{3F5701B6-7F63-4EEF-9D47-1A7F6559974D}D:\blobby volley 2 version 1.0\blobby-server.exe] => (Allow) D:\blobby volley 2 version 1.0\blobby-server.exe
FirewallRules: [UDP Query User{51F72341-420C-431A-8D07-C09394DF7918}D:\blobby volley 2 version 1.0\blobby-server.exe] => (Allow) D:\blobby volley 2 version 1.0\blobby-server.exe
FirewallRules: [{BA791006-042A-4F5C-BCD6-D7F6370F2847}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{27E2FB12-217E-480D-BEFB-22E3A12656EC}] => (Allow) D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Description: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvvad_WaveExtensible
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/26/2015 07:13:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LoLUpdater.exe, Version: 1.2.2.1, Zeitstempel: 0x55e72f1e
Name des fehlerhaften Moduls: libiomp5md.dll, Version: 6.3.9600.17936, Zeitstempel: 0x55a68dd1
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009d4f2
ID des fehlerhaften Prozesses: 0x178c
Startzeit der fehlerhaften Anwendung: 0xLoLUpdater.exe0
Pfad der fehlerhaften Anwendung: LoLUpdater.exe1
Pfad des fehlerhaften Moduls: LoLUpdater.exe2
Berichtskennung: LoLUpdater.exe3
Vollständiger Name des fehlerhaften Pakets: LoLUpdater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LoLUpdater.exe5

Error: (09/26/2015 07:08:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LoLUpdater.exe, Version: 1.2.2.1, Zeitstempel: 0x55e72f1e
Name des fehlerhaften Moduls: libiomp5md.dll, Version: 6.3.9600.17936, Zeitstempel: 0x55a68dd1
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009d4f2
ID des fehlerhaften Prozesses: 0x11a0
Startzeit der fehlerhaften Anwendung: 0xLoLUpdater.exe0
Pfad der fehlerhaften Anwendung: LoLUpdater.exe1
Pfad des fehlerhaften Moduls: LoLUpdater.exe2
Berichtskennung: LoLUpdater.exe3
Vollständiger Name des fehlerhaften Pakets: LoLUpdater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LoLUpdater.exe5

Error: (09/26/2015 07:08:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LoLUpdater.exe, Version: 1.2.2.1, Zeitstempel: 0x55e72f1e
Name des fehlerhaften Moduls: libiomp5md.dll, Version: 6.3.9600.17936, Zeitstempel: 0x55a68dd1
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009d4f2
ID des fehlerhaften Prozesses: 0x614
Startzeit der fehlerhaften Anwendung: 0xLoLUpdater.exe0
Pfad der fehlerhaften Anwendung: LoLUpdater.exe1
Pfad des fehlerhaften Moduls: LoLUpdater.exe2
Berichtskennung: LoLUpdater.exe3
Vollständiger Name des fehlerhaften Pakets: LoLUpdater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LoLUpdater.exe5

Error: (09/26/2015 05:37:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LolClient.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2924

Startzeit: 01d0f870aff7d1ae

Endzeit: 11

Anwendungspfad: D:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.160\deploy\LolClient.exe

Berichts-ID: 75a501af-6464-11e5-82d7-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/25/2015 08:38:55 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Origin.exe, Version 9.8.3.59237 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b0c

Startzeit: 01d0f75ca44821fe

Endzeit: 4

Anwendungspfad: D:\Origin\Origin.exe

Berichts-ID: 13b63913-6350-11e5-82d4-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/25/2015 05:44:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LolClient.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1988

Startzeit: 01d0f7239b7d4e81

Endzeit: 8

Anwendungspfad: D:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.160\deploy\LolClient.exe

Berichts-ID: c2e5b691-6337-11e5-82d4-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/24/2015 04:01:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Cleanup.exe, Version: 4.3.0.0, Zeitstempel: 0x55c28306
Name des fehlerhaften Moduls: Wpc.dll_unloaded, Version: 6.3.9600.17415, Zeitstempel: 0x54503e7c
Ausnahmecode: 0xc00001a5
Fehleroffset: 0x000775a0
ID des fehlerhaften Prozesses: 0x1f24
Startzeit der fehlerhaften Anwendung: 0xCleanup.exe0
Pfad der fehlerhaften Anwendung: Cleanup.exe1
Pfad des fehlerhaften Moduls: Cleanup.exe2
Berichtskennung: Cleanup.exe3
Vollständiger Name des fehlerhaften Pakets: Cleanup.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Cleanup.exe5

Error: (09/23/2015 07:38:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Origin.exe, Version 9.8.3.59237 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 3e8c

Startzeit: 01d0f6268a7d766d

Endzeit: 4294967295

Anwendungspfad: D:\Origin\Origin.exe

Berichts-ID: dfefa4e1-6219-11e5-82d3-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/22/2015 10:55:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Origin.exe, Version 9.8.3.59237 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2f78

Startzeit: 01d0f57066289926

Endzeit: 4294967295

Anwendungspfad: D:\Origin\Origin.exe

Berichts-ID: 4d0b24ad-616c-11e5-82d3-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/22/2015 08:55:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Origin.exe, Version 9.8.3.59237 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 18a4

Startzeit: 01d0f5598fc49f20

Endzeit: 4294967295

Anwendungspfad: D:\Origin\Origin.exe

Berichts-ID: 7d91d3cc-615b-11e5-82d3-d0509934c9ef

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (09/27/2015 02:45:58 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:54 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:50 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:47 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:43 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:39 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:36 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:32 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:28 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (09/27/2015 02:45:24 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 8111.11 MB
Verfügbarer physikalischer RAM: 6185.61 MB
Summe virtueller Speicher: 16111.11 MB
Verfügbarer virtueller Speicher: 14066.4 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:100.27 GB) (Free:52.29 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:931.51 GB) (Free:634.6 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 865ED687)
Partition 1: (Active) - (Size=100.3 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 865ED6F0)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================