|
Plagegeister aller Art und deren Bekämpfung: Nach Virus/Maleware kein Ton mehr in diverse SpielenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
08.03.2016, 16:21 | #1 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Hallo erstmal, Ich bin leidenschaftlicher Gamer und lade mir hier und da mal Mods herrunter aber auch nur von vertrauenswürdigen Seiten. Als ich mit letztens mal wieder einen Mod herrunter geladen habe und ihn installiert hab, habe ich mitbekommen das meine CPU Auslastung anstieg also hab ich Malewarebytes Anti-Maleware drüber laufen lassen und das war das Ergebniss: https://gyazo.com/8c8e0c03517b3fd0165159f28cad2d95 Ich hab diese dann entfernt und als ich ein Spiel spielen wollte war im Hauptmenü alles gut Ton alles da. Als ich dann richtig im Spiel war, war der Ton auf einmal weg. Das Problem ist bei allen Rennspielen und bei 2 Shootern. Eine Neu installation hat nicht geholfen. Gegenwärtig habe ich auch das Problem mit Windows Media Player das ich immer diese Fehlermeldung bekomme: https://gyazo.com/20c08e93e128bce36eb7908d17037900 Ich hoffe mir kann jemand helfen. MFG Equinox Geändert von EquinoxRB (08.03.2016 um 16:30 Uhr) |
08.03.2016, 16:54 | #2 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse SpielenMein Name ist Dennis und ich werde dir bei der Bereinigung helfen. Bitte beachte, dass es ein paar Regeln gibt:
Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM! Hast du das MBAM-Log noch? Malwarebytes Anti-Malware Logfile finden - Anleitungen Schritt # 1: FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt # 2: Bitte Posten
__________________ |
08.03.2016, 17:35 | #3 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Hallo Dennis
__________________Hier ist die FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von test (Administrator) auf DAT_BRONIE (08-03-2016 17:25:21) Gestartet von C:\Users\test\Downloads Geladene Profile: test (Verfügbare Profile: test) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe (hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Valve Corporation) K:\Steam\Steam.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Psyonix, Inc) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) K:\Steam\GameOverlayUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Farbar) C:\Users\test\Downloads\FRST64 (1).exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [804168 2016-02-18] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18] ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] () FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] () FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27] FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18] Chrome: ======= CHR HomePage: Default -> hxxps://www.google.de/ CHR StartupUrls: Default -> "hxxps://www.google.de/" CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24] CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11] CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04] CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19] CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03] CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31] CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23] CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17] CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17] CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08] CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23] CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18] CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08] CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2016-02-18] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1417592 2016-02-18] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] () R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] () R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert] S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2016-02-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [75472 2015-12-01] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-08] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation ) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net) S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X] S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X] S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 17:25 - 2016-03-08 17:26 - 00031364 _____ C:\Users\test\Downloads\FRST.txt 2016-03-08 17:25 - 2016-03-08 17:25 - 00000000 ____D C:\FRST 2016-03-08 17:24 - 2016-03-08 17:24 - 02374144 _____ (Farbar) C:\Users\test\Downloads\Nicht bestätigt 897244.crdownload 2016-03-08 17:24 - 2016-03-08 17:24 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64 (1).exe 2016-03-08 16:37 - 2016-03-08 16:37 - 00000202 _____ C:\Users\test\Desktop\Rocket League.url 2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics 2016-03-07 16:05 - 2016-03-07 16:05 - 00000199 _____ C:\Users\test\Desktop\Half-Life 2 Episode Two.url 2016-03-05 10:26 - 2016-03-05 12:06 - 00000000 ____D C:\Program Files\Sound+ 2016-03-05 10:24 - 2016-03-05 10:24 - 00540004 _____ C:\Users\test\Downloads\Dear Esther Update 1 And 2 SKI Downloader.rar 2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk 2016-03-05 06:58 - 2016-03-05 06:58 - 00000000 ____D C:\Users\test\Documents\FIFA 15 2016-03-05 06:47 - 2016-03-05 06:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15 2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ 2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp 2016-02-28 22:24 - 2016-02-28 22:24 - 00000868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Angry IP Scanner.lnk 2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt 2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Program Files\Angry IP Scanner 2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO 2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games 2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends 2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost 2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5 2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\Program Files\TAP-Windows 2016-02-24 14:54 - 2016-02-24 14:54 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2016-02-24 14:54 - 2016-02-24 14:54 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2 2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins 2016-02-24 14:49 - 2016-02-24 14:54 - 00000000 ____D C:\Program Files (x86)\Image-Line 2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA 2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan 2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters 2016-02-09 20:22 - 2016-02-09 20:22 - 00000000 ____D C:\Users\test\Documents\Banished 2016-02-07 20:34 - 2016-03-05 19:02 - 00000000 ____D C:\Users\test\Documents\ArmaMods 2016-02-07 01:59 - 2016-02-07 01:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 17:10 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi 2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games 2016-03-08 16:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-08 16:37 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-03-08 16:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-03-08 16:27 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche 2016-03-08 15:02 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-08 15:02 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-08 14:55 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache 2016-03-08 14:55 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-08 14:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-08 14:54 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA 2016-03-08 06:28 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe 2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype 2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew 2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache 2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client 2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps 2016-03-05 11:33 - 2014-12-27 17:35 - 00000000 ____D C:\Users\test\AppData\Roaming\vlc 2016-03-05 11:18 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent 2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters 2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin 2016-03-05 07:32 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive 2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ 2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat 2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat 2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-03-02 13:42 - 2015-04-19 08:23 - 00000080 _____ C:\Users\test\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily 2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine 2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo 2016-03-01 15:58 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher 2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3 2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation 2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test 2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder 2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient 2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin 2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient 2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5 2016-02-24 14:53 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2016-02-24 14:53 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line 2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin 2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft 2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft 2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-18 15:04 - 2014-06-01 08:59 - 00140448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk 2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk 2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk 2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk 2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk 2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk 2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk 2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk 2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk 2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss 2016-02-18 01:38 - 2015-02-10 02:56 - 00000000 ____D C:\ProgramData\APN 2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp 2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games 2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client 2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers 2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports 2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2016-02-15 11:24 - 2015-11-26 22:08 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox 2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts 2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC 2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb 2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2016-02-07 11:28 - 2016-01-01 03:38 - 00000000 ____D C:\Users\test\Documents\Camtasia Studio 2016-02-07 11:22 - 2014-06-13 22:06 - 00000000 ____D C:\Users\test\Documents\Bandicam 2016-02-07 02:26 - 2016-02-06 18:10 - 00000000 ____D C:\Users\test\AppData\Roaming\Tunngle ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-07-16 06:18 - 2014-07-16 11:33 - 0000312 _____ () C:\Users\test\AppData\Roaming\aps.uninstall.scan.results 2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg 2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt 2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg 2015-06-03 19:10 - 2015-06-03 19:10 - 0000016 _____ () C:\ProgramData\mntemp 2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe Einige Dateien in TEMP: ==================== C:\Users\test\AppData\Local\Temp\6a246669c4722113966d0cbd29442eb9.dll C:\Users\test\AppData\Local\Temp\6bbb725da4ced29daf3cdc0080a744e6.dll C:\Users\test\AppData\Local\Temp\avgnt.exe C:\Users\test\AppData\Local\Temp\nvSCPAPI.dll C:\Users\test\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-02-10 06:24 ==================== Ende von FRST.txt ============================ |
08.03.2016, 17:37 | #4 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Hier die Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 durchgeführt von test (2016-03-08 17:27:03) Gestartet von C:\Users\test\Downloads Windows 7 Professional Service Pack 1 (X64) (2014-05-27 14:07:32) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-809088717-832388673-2450759211-500 - Administrator - Disabled) Gast (S-1-5-21-809088717-832388673-2450759211-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-809088717-832388673-2450759211-1002 - Limited - Enabled) test (S-1-5-21-809088717-832388673-2450759211-1000 - Administrator - Enabled) => C:\Users\test ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) µTorrent (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\uTorrent) (Version: 3.4.5.41712 - BitTorrent Inc.) Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.1.474 - Adobe Systems Incorporated) Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated) Akamai NetSession Interface (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.4.1 - Angry IP Scanner) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.141 - Avira Operations GmbH & Co. KG) Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG) Avira Launcher (x32 Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG) Hidden Bandicam (HKLM-x32\...\Bandicam) (Version: 2.0.0.638 - Bandisoft.com) Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB) BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - ) BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - ) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden Camtasia Studio 8 (HKLM-x32\...\{F6EC4C4E-C87B-4F50-851B-1C86E0C94F00}) (Version: 8.6.0.2055 - TechSmith Corporation) Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version: - ) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive) Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.) EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.4.0.0 - Electronic Arts) Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software) FastStone Image Viewer 5.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.5 - FastStone Soft) FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line) FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.) Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google) Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North) greencube (HKLM-x32\...\greencube) (Version: 1.0 - UNKNOWN) greencube (x32 Version: 1.0 - UNKNOWN) Hidden Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve) HFSExplorer 0.23 (HKLM-x32\...\HFSExplorer) (Version: 0.23 - Catacombae Software) IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation) Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2010 (HKLM-x32\...\{FA8E7AF5-C70E-3274-9740-9E697FBD5BB7}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla) Never Alone (Kisima Ingitchuna) (HKLM-x32\...\Steam App 295790) (Version: - Upper One Games) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.91 - NVIDIA Corporation) NVIDIA GeForce Experience 2.10.2.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.10.2.40 - NVIDIA Corporation) NVIDIA Grafiktreiber 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.91 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 - ) Plague Inc: Evolved (HKLM\...\Steam App 246620) (Version: - Ndemic Creations) POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version: - Running With Scissors) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6767 - Realtek Semiconductor Corp.) Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.2 - Rockstar Games) SHIELD Streaming (Version: 5.1.0270 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.10.2.40 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation) Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.) Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version: - Valve) Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve) SPEEDLINK TORID (HKLM-x32\...\SPEEDLINK TORID) (Version: - ) Startfenster (HKLM-x32\...\Startfenster) (Version: - Startfenster) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) TeamSpeak 3 Client (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\TeamSpeak 3 Client) (Version: 3.0.18.1 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer) Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version: - Ubisoft Montreal) TortoiseSVN 1.8.8.25755 (64 bit) (HKLM\...\{7DAA9D5A-ED99-40D2-AA9D-386722FE105A}) (Version: 1.8.25755 - TortoiseSVN) TP-LINK TL-WN725N_TL-WN723N Treiber (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 1.3.1 - TP-LINK) TP-LINK-Konfigurationstool (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK) Turbo Dismount (HKLM\...\Steam App 263760) (Version: - Secret Exit Ltd.) Unity Web Player (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\UnityWebPlayer) (Version: 5.3.0f4 - Unity Technologies ApS) Unreal Development Kit: 2012-10 (HKLM\...\UDK-b2d9df31-df8c-4834-be3e-542d12ff8125) (Version: - Epic Games, Inc.) Unreal Development Kit: 2012-10 (HKLM\...\UDK-eaeb798e-fc03-40f3-8538-57e5172bb46b) (Version: - Epic Games, Inc.) Uplay (HKLM-x32\...\Uplay) (Version: 12.0 - Ubisoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ACHTUNG WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {08F2FECE-AC9F-446C-8D53-EB5FF261B913} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-02-17] () Task: {2EDE25E0-593D-40F3-B0BB-031B185D6C16} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-02-17] () Task: {30961954-2E32-4437-A94D-B5F7B7D7E661} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation) Task: {47F5E480-E3F1-4CBA-97E0-A03B6AE1E31F} - System32\Tasks\{8BDB838C-91E9-4029-8899-0D2B7CD3E48F} => pcalua.exe -a C:\Users\test\Downloads\HSB4b-full.exe -d C:\Users\test\Downloads Task: {4A899C26-D785-4E7E-88E4-FEC29AB18CC0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated) Task: {68D8D083-02F9-4A34-981D-F8341F5C5A72} - System32\Tasks\{D7B9746A-E892-4F5A-8E76-A7CD094C4CD7} => Chrome.exe hxxp://ui.skype.com/ui/0/7.3.0.101/de/abandoninstall?page=tsProgressBar Task: {7506D4C5-4A1D-4339-B6FF-7E8B00A9BA4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {80D81F71-59A1-4F7A-A243-F71984C9EC7F} - System32\Tasks\AdobeAAMUpdater-1.0-test-PC-test => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-02-03] (Adobe Systems Incorporated) Task: {8CD48D91-5C36-4C6D-85E1-23D9A2895E95} - System32\Tasks\{10391957-A673-4800-B15B-A82ED53D59BD} => pcalua.exe -a E:\SETUP.EXE -d E:\ Task: {C9420A85-4F1F-4630-BF7D-409F56DA0D6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {E8033DE3-F4FA-427F-8B80-B63F16342A30} - System32\Tasks\{0B40A337-3693-48CB-A5C4-5EB663AD7D25} => pcalua.exe -a "C:\Program Files (x86)\GTA IV Vehicle Mod Installer\v1.2\gtaivvmi.exe" -d "C:\Program Files (x86)\GTA IV Vehicle Mod Installer\v1.2" Task: {F08833DA-D150-4D85-A9E6-BC4D381E741A} - System32\Tasks\{FEF43B90-CB5A-469F-8D8C-35E9C8DD19F9} => pcalua.exe -a "C:\Users\test\AppData\Local\TeamSpeak 3 Client\package_inst.exe" -d C:\Users\test\Downloads -c "C:\Users\test\Downloads\ts3_DayZ_v1.0.ts3_style" (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2014-05-27 15:26 - 2016-02-09 06:41 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-02-29 14:49 - 2016-02-17 07:56 - 01416064 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2016-02-29 14:49 - 2016-02-17 07:56 - 03613056 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2016-02-17 22:04 - 2016-02-17 07:56 - 00299392 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2015-04-06 18:55 - 2015-12-26 10:26 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2015-02-11 14:13 - 2015-02-11 14:13 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2014-08-10 16:10 - 2014-08-10 16:10 - 00076032 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll 2014-08-10 16:10 - 2014-08-10 16:10 - 00088832 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll 2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll 2015-02-11 14:12 - 2015-02-11 14:12 - 05739680 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2016-02-17 22:04 - 2016-02-17 08:02 - 00020352 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-02-15 13:58 - 2015-02-15 13:58 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll 2014-08-10 15:40 - 2014-08-10 15:40 - 00065792 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll 2014-08-10 15:40 - 2014-08-10 15:40 - 00071936 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll 2016-02-19 21:47 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll 2016-02-19 21:47 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll 2014-06-01 18:12 - 2014-06-01 18:12 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll 2014-05-27 15:19 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-05-27 15:21 - 2012-07-19 20:55 - 01198912 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-02-15 13:58 - 2015-02-15 13:58 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll 2015-02-15 13:58 - 2015-02-15 13:58 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll 2016-03-02 19:59 - 2015-12-15 06:54 - 00782336 _____ () K:\Steam\SDL2.dll 2016-03-02 19:59 - 2015-07-03 17:12 - 04962816 _____ () K:\Steam\v8.dll 2016-03-02 19:59 - 2015-07-03 17:12 - 01556992 _____ () K:\Steam\icui18n.dll 2016-03-02 19:59 - 2015-07-03 17:12 - 01187840 _____ () K:\Steam\icuuc.dll 2016-03-02 19:59 - 2016-02-04 22:02 - 02546768 _____ () K:\Steam\video.dll 2016-03-02 19:59 - 2015-09-24 01:33 - 02549248 _____ () K:\Steam\libavcodec-56.dll 2016-03-02 19:59 - 2015-09-24 01:33 - 00442880 _____ () K:\Steam\libavutil-54.dll 2016-03-02 19:59 - 2015-09-24 01:33 - 00491008 _____ () K:\Steam\libavformat-56.dll 2016-03-02 19:59 - 2015-09-24 01:33 - 00332800 _____ () K:\Steam\libavresample-2.dll 2016-03-02 19:59 - 2015-09-24 01:33 - 00485888 _____ () K:\Steam\libswscale-3.dll 2016-03-02 19:59 - 2016-02-04 22:01 - 00802896 _____ () K:\Steam\bin\chromehtml.DLL 2016-03-02 19:59 - 2015-12-30 02:51 - 00208896 _____ () K:\Steam\bin\openvr_api.dll 2016-03-02 19:59 - 2016-02-04 22:01 - 00139344 _____ () K:\Steam\bin\audio.dll 2016-03-02 19:59 - 2014-11-11 19:48 - 00071680 _____ () K:\Steam\bin\mssmp3.asi 2016-03-02 19:59 - 2014-11-11 19:48 - 00153088 _____ () K:\Steam\bin\mssvoice.asi 2016-03-02 19:59 - 2016-01-06 02:52 - 48387872 _____ () K:\Steam\bin\libcef.dll 2016-03-02 19:59 - 2015-09-25 00:56 - 00119208 _____ () K:\Steam\winh264.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\test\AppData\Local\8YRhs3iQ30mJZ:RoGT2usJF0MypjsXLSbtAf8tsn1M [2158] AlternateDataStreams: C:\Users\test\AppData\Local\Temp:Jj5lgFytAbVSLv6PNnb [1922] AlternateDataStreams: C:\Users\test\AppData\Local\Temp:ulx5dh4iXRoxLHWLCKnvwC0t [1884] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 03:34 - 2016-03-05 10:27 - 00002338 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activation.cloud.techsmith.com 127.0.0.1 oscount.techsmith.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\test\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{695D3911-EDEB-4C46-9634-8B5DCB466B12}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{A146946D-4D54-4D11-A81E-2E2799B8DCEF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [TCP Query User{B1021062-B547-40D0-9A62-38F653323914}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Block) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe FirewallRules: [UDP Query User{7783A60B-AA02-41F8-8233-F4274E66110F}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Block) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe FirewallRules: [{DBAD7BBD-97AD-466F-A6E1-64B86686BA56}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{4DAF6791-52F7-41B9-8488-A35D0B8BB977}] => (Allow) LPort=2869 FirewallRules: [{3F9668DE-85FA-4474-8E90-FE7B14C2B0EC}] => (Allow) LPort=1900 FirewallRules: [{EFD5986D-AE48-4A8C-BF7C-25AD0E567E65}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{2C2CA005-2D16-43AC-9A15-6906C002AC74}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [UDP Query User{76C0FB7B-9FCA-4774-B9AF-D936EFA6C987}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe FirewallRules: [TCP Query User{B6AB152C-18D3-470F-954D-20530AD0EC61}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\test\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{4435343B-EFE1-4EA1-A22D-22B9F62EB129}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\test\appdata\local\akamai\netsession_win.exe FirewallRules: [{B2360F16-D143-413F-A995-7D26CC9FC69B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe FirewallRules: [{4244F561-932D-45D1-8F7F-A35BF76333DA}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe FirewallRules: [{C348F4F7-CCF7-4C33-9A50-C9B1888BDAAC}] => (Allow) LPort=80 FirewallRules: [{E34E7409-608C-45B9-88DA-76AC40EFD7ED}] => (Allow) LPort=443 FirewallRules: [{18618FA6-7CE0-451D-87D5-334F8F000E07}] => (Allow) LPort=20010 FirewallRules: [{904528E2-E247-438F-9240-7784171F5D7E}] => (Allow) LPort=3478 FirewallRules: [{EBAD38C0-4AB5-4B44-BDE3-BEC3D372E16B}] => (Allow) LPort=7850 FirewallRules: [{B27067C3-9035-4F09-9898-F4F6AD574FEF}] => (Allow) LPort=7852 FirewallRules: [{28A31963-4D65-4414-A409-8F67BBCAF8CE}] => (Allow) LPort=7853 FirewallRules: [{B8F8229A-1F87-420A-896F-DCFE8AC66DC3}] => (Allow) LPort=27022 FirewallRules: [{3B19357B-89C3-47FC-AFA4-BFA2D6C68CC9}] => (Allow) LPort=6881 FirewallRules: [{ACA44267-2340-4C98-9E25-990607970904}] => (Allow) LPort=33333 FirewallRules: [{B957009B-AF19-49AC-8692-D5AF01A0E5C8}] => (Allow) LPort=20443 FirewallRules: [{5BE2AC7E-8A6C-49BA-8367-ABFE42730047}] => (Allow) LPort=8090 FirewallRules: [{0DE33E54-84AA-4441-AD27-668536C3FFB1}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [{782D1C10-DE04-4F95-8F8A-A392949CA108}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [TCP Query User{7A0129F4-08D6-4E7D-BA8F-948846B0896B}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe FirewallRules: [UDP Query User{0355AA8F-05CA-4474-8326-F1E151A98A5C}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe FirewallRules: [TCP Query User{CE6AF90D-F6C8-49E6-82A2-5F536CFCCB49}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe FirewallRules: [UDP Query User{8388A23B-07AD-4503-81BA-6A39A996C119}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe FirewallRules: [TCP Query User{D840D84C-BA6E-49F9-8EAD-53D8141A1F91}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\test\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{D251B362-0F98-48E7-8343-18AACB06CE52}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\test\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{94CCDDA7-C34B-45E4-A102-3268AC9F41A3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{94FA350B-8B60-4A2E-9215-EAC337BEDC1F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{519477C3-8FCB-4D3A-833A-7CBD35EE6049}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{419AD47D-7C4A-4C1E-995C-7F1ECB6C2CE3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [TCP Query User{39C0478F-5F0B-4464-9FF4-9AD15879FD53}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [UDP Query User{B6D79009-B8AF-42CC-9439-7A0332E7629E}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [{94F91BB7-9FD5-4270-8ECE-7FF220F138F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe FirewallRules: [{B9FD7034-F284-4651-8875-EB1E50F30812}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe FirewallRules: [TCP Query User{1C5FACEF-F205-4DC4-A3FD-4CDC93A4CA98}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe FirewallRules: [UDP Query User{94642D68-D20B-4B1C-B4E0-0EC1D7512D92}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe FirewallRules: [{010C22CE-9FB9-4CF4-9BB5-DA6FAECA0A31}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{DCDA85A1-95DF-4A7C-BC7F-5BE2B7C9ADE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{D3A03F56-C6B8-4418-AC80-4EC04E5B0777}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{C531EB9B-7418-499A-8D46-AABB8F3C0B64}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [TCP Query User{22A27629-72E3-40B3-AC3D-1B4095DE6B69}C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe FirewallRules: [UDP Query User{679DAA39-7B1B-458F-8E6F-4D24047C2D26}C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe FirewallRules: [TCP Query User{EF3AA14E-45DD-4E13-84D9-1C70ED246C54}C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe] => (Allow) C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe FirewallRules: [UDP Query User{057863BD-23DC-41F3-B025-F9139AFC4E8F}C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe] => (Allow) C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe FirewallRules: [TCP Query User{D1443E68-ECB9-4747-94F5-DC1B704D946F}C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe] => (Block) C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe FirewallRules: [UDP Query User{589314FB-8347-448A-9264-AB51762B4979}C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe] => (Block) C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe FirewallRules: [{A32A816D-E93C-4B5B-B7CB-F29A922CE7CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe FirewallRules: [{2D09CC8A-DB3F-4DF9-893A-D244F579C909}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe FirewallRules: [TCP Query User{587AA4E9-0D3B-4B20-B2FE-05925075F694}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe FirewallRules: [UDP Query User{2289C16B-5938-4D7B-88B8-0B87844998FE}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe FirewallRules: [{C917C010-E053-4C15-ACCA-4BCE7C88AFBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [{C773B014-954F-46FD-93D0-BA0578B83C2F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [{07B3DC89-DB6A-4BF2-8209-CC907E4469FB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{5047515D-B209-4618-9AF2-87FAA313F918}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{CBF63EE0-1DF3-4340-A319-CB6B6AE64E33}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [{5119F37C-3E34-49B5-B7F5-A1FD142DA8FC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [TCP Query User{95F18B6D-D745-4C99-8398-D0C75A864F62}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [UDP Query User{22E72116-B803-4855-ABDA-91A4C122931F}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [{27A94EE4-79A3-4E4F-9697-D4D933F28FA3}] => (Block) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [{1C468C03-1480-4856-8D2E-49CF1BFF0390}] => (Block) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [{70F5E229-F19D-4C62-AA4B-F139AE6FC6D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{900DB2D3-025E-4C85-9758-D4774B1383C2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{14BDCB6B-85C8-416A-88A2-9E6C09C1E723}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe FirewallRules: [{7C48745E-6890-4BB5-B15F-35B9A3230E1E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe FirewallRules: [{F68EC52B-3B00-4B59-923F-5A67F1A21504}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe FirewallRules: [{D89E13EA-59DE-4730-9748-A82631110B45}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe FirewallRules: [TCP Query User{92206178-D212-4019-A23D-3D1218F54F68}C:\program files\java\jre1.8.0_20\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_20\bin\javaw.exe FirewallRules: [UDP Query User{76AA402F-DCFA-40F3-AA90-B6C686EB83B4}C:\program files\java\jre1.8.0_20\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_20\bin\javaw.exe FirewallRules: [{41838D09-EAFA-4817-8C93-ED9AF24A95B1}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe FirewallRules: [TCP Query User{286EB823-FDF4-4692-A83D-4BDAE585784D}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe FirewallRules: [UDP Query User{FACB5F39-191F-458F-A07F-0ED0E8AAB403}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe FirewallRules: [{DC4C31B1-E160-4B28-9BC1-779028D45492}] => (Block) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe FirewallRules: [{2ED05937-D237-40A3-80A2-F9031824A8D7}] => (Block) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe FirewallRules: [{B73B83F9-00C7-4E42-A75C-81633C673515}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\S.K.I.L.L\Binaries\Win32\sf2.exe FirewallRules: [{7050735F-3F30-4FEC-AA32-E6C2A617ED7B}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\S.K.I.L.L\Binaries\Win32\sf2.exe FirewallRules: [{0D85148A-0E19-41E8-BF5B-0370A1E6A223}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe FirewallRules: [{B73FDCC0-D128-4264-94D1-EFB19A492ACD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe FirewallRules: [{B2EB7DEE-9C7A-4AE3-B3CA-12D02A50DD81}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{EA40CBDE-4D57-4916-8D4A-6434515DA263}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{EFFB0444-40D2-4BA2-BFFD-80C0CE56AFD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{14D76610-B467-4F12-9F9F-90AC47728206}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{1FCA8C06-D26E-4A33-8F80-254A3D2A9297}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{9DCC6AD1-AE64-4929-B831-29F22A30B301}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{3D6D4416-50E9-4EE7-8E17-3CC924DFBEFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{CE925793-8D8D-40F8-AE27-5F7E0BD6E662}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{4305D72E-3651-4F3B-9EB1-4F1320411233}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{33E69FFA-1E93-4D8F-9025-6E07302CAE62}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [TCP Query User{72D994A7-C455-4E3F-A11A-3959F5EAB975}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [UDP Query User{31547FDB-F7E5-4200-A9D4-5F56DAFBF5E3}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [{DAC09195-A9CC-4633-9391-0014CC1450EB}] => (Block) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [{CF6C490D-4C7F-44DA-A8D4-8CE2774659C3}] => (Block) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [{1688195D-A529-4F2B-AE60-EC4AA64A490C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{B2557DD8-0150-46B2-BA89-E6A2500511F4}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{403F4D9A-71C4-4104-B8A2-82CC02F9B7C4}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{A5351725-AB79-4943-BF3F-371E869797C2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{DF5CDDE5-203D-4D70-9AEA-6C5909DBA95E}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{0C6DBCFE-7341-4406-AFDD-FFFF1C9DD4CC}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{5E1E228C-F8E9-4315-A2D4-298FEC0606F2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{73F3CEB2-D014-4D45-9208-25E0BAF6D9FE}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{CFCF8603-41AB-499A-835F-DB54C42E0485}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe FirewallRules: [{66AB3240-0BD0-4054-8F8D-BA4810D2AEEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe FirewallRules: [{557D5C2B-F783-499C-9DFA-7C372735F013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TacticalIntervention\bin\tacint.exe FirewallRules: [{BE96512C-D0C0-4AB6-968A-7F4B85F79BE3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TacticalIntervention\bin\tacint.exe FirewallRules: [{64317F2D-D7AE-4CB7-9093-E2FF11D957E4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe FirewallRules: [{1EE7A09A-CEE1-4DAA-8AEC-7A38542E766D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe FirewallRules: [TCP Query User{F6E6F2C6-5B61-41F5-9048-0A83EBC21D2D}C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe] => (Allow) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe FirewallRules: [UDP Query User{9975B013-72AB-4FAA-B175-190253FD09F7}C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe] => (Allow) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe FirewallRules: [{81C068F7-8F85-4EB8-9F10-C4F7C59166A0}] => (Block) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe FirewallRules: [{7655A79D-26E4-45A6-9D70-CAAC77B89CD2}] => (Block) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe FirewallRules: [{D805A79D-5959-40BD-94F1-8718C2531A27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe FirewallRules: [{8814A175-AD93-4E73-9619-1CA75F0F535B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe FirewallRules: [{F99AB413-6C3B-48C2-BC8D-EB7A7D68B3E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{DE4A34E8-017F-4984-B83D-6D0FC28271AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{D6AADE89-DCA6-458A-9895-65ACE9391015}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{6EFB359F-0D1D-43BC-9CCD-E9450A9C4028}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{B6B5C86D-4402-41DD-9ACB-C9AE45485900}] => (Allow) C:\Users\test\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{9BAB0C8E-B14D-47C2-89E4-9F17E7A270FE}] => (Allow) C:\Users\test\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{4F931EF8-B5D0-4D5B-8FB8-DFA212ED5C1E}C:\program files (x86)\lex mortis\bin32\lexmortis.exe] => (Allow) C:\program files (x86)\lex mortis\bin32\lexmortis.exe FirewallRules: [UDP Query User{FA42190D-1156-46B7-96C5-6F7649AE9967}C:\program files (x86)\lex mortis\bin32\lexmortis.exe] => (Allow) C:\program files (x86)\lex mortis\bin32\lexmortis.exe FirewallRules: [{3B4C68F5-CED3-4E63-A95A-8A0EF6A2113A}] => (Block) C:\program files (x86)\lex mortis\bin32\lexmortis.exe FirewallRules: [{1A84B4FE-BAA9-4074-8717-0377B0CB3029}] => (Block) C:\program files (x86)\lex mortis\bin32\lexmortis.exe FirewallRules: [TCP Query User{7CCFF8D2-0AAF-45E4-8040-7AF76E7288EC}C:\users\test\appdata\roaming\target folder\drop name.exe] => (Allow) C:\users\test\appdata\roaming\target folder\drop name.exe FirewallRules: [UDP Query User{F0B97BA4-E195-4DC4-A6AF-1FCE9E5A9EB3}C:\users\test\appdata\roaming\target folder\drop name.exe] => (Allow) C:\users\test\appdata\roaming\target folder\drop name.exe FirewallRules: [{E58264B0-7053-454C-91EB-E2FDC34670BD}] => (Block) C:\users\test\appdata\roaming\target folder\drop name.exe FirewallRules: [{EC396983-1D0D-4EEE-B5CC-51D96930BAAB}] => (Block) C:\users\test\appdata\roaming\target folder\drop name.exe FirewallRules: [TCP Query User{5E73DA8F-9401-42B2-BC8B-76A64ABBF452}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe FirewallRules: [UDP Query User{CFABDAC6-BD48-4184-85CD-939471DFA3C6}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe FirewallRules: [{04EBE04F-E4A4-411C-A216-677863C6BA20}] => (Block) C:\games\counter-strike\hl.exe FirewallRules: [{09CA7EC3-82AC-462D-BA4A-E987F6D66D18}] => (Block) C:\games\counter-strike\hl.exe FirewallRules: [{F36AE5D5-F9EA-46F4-86DB-DAAFF302CA22}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{562AE7C4-9F96-4360-BC59-8AFC97BB8637}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [TCP Query User{F71AF288-44A6-44FF-BE62-488F853A5867}C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe] => (Block) C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe FirewallRules: [UDP Query User{AFBFB99C-ABE8-4E35-8E0F-25973BF666DC}C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe] => (Block) C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe FirewallRules: [{6571AFFA-05A8-4012-9549-A279ED5211C8}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe FirewallRules: [{E0E08838-B85B-4556-B7C5-4F6FE44CD774}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe FirewallRules: [{AE608D28-F688-4085-8060-3EEEA6CBD585}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Squishy\bin\squishy.exe FirewallRules: [{6319706C-6ECC-41F8-8446-D4AE396D3778}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Squishy\bin\squishy.exe FirewallRules: [{42A744B6-DDEE-4E9B-9A81-623EC930D143}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe FirewallRules: [{1680FB6A-3020-4323-9F4B-DAD87A5195B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe FirewallRules: [TCP Query User{7C038DB0-C362-4952-8649-4BBA8FCEAF31}C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe] => (Allow) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe FirewallRules: [UDP Query User{C8863B92-EA8E-47D5-BB86-AAFDDD74FC78}C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe] => (Allow) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe FirewallRules: [{71ADD3AC-79FB-4789-9490-4C22108EFD70}] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe FirewallRules: [{1C06506C-268A-446B-A150-17EC71AE64D7}] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe FirewallRules: [TCP Query User{5F6D1AFB-AAB4-49DE-BF0A-AD3ECFF9FB9E}C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe] => (Allow) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe FirewallRules: [UDP Query User{F3570179-C202-431E-9D08-BF0694FCB02C}C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe] => (Allow) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe FirewallRules: [{D1D2C884-A636-49D9-8F07-85A169B18F20}] => (Block) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe FirewallRules: [{A25ACC99-94F2-48F3-81BD-CC0F0EECBEBD}] => (Block) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe FirewallRules: [TCP Query User{2A70E4A7-FF53-4D05-9FC3-625C4B991CE7}C:\program files (x86)\origin games\need for speed rivals\nfs14.exe] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14.exe FirewallRules: [UDP Query User{4E16C786-B37D-488E-A599-4B25DD807655}C:\program files (x86)\origin games\need for speed rivals\nfs14.exe] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14.exe FirewallRules: [TCP Query User{C8654B5F-3295-4AC4-AB3C-81F9A9E73C43}C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe FirewallRules: [UDP Query User{FD1E0844-A5B9-4320-A5FE-303272855EDE}C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe FirewallRules: [{CA277EBE-B157-4ACE-9278-C30DB8EEA565}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe FirewallRules: [{135B6DFD-5695-4A90-88F2-7C62869C43D1}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe FirewallRules: [TCP Query User{DA7D8957-B55C-4C44-BDEE-95B356E2188B}C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe FirewallRules: [UDP Query User{773064BE-9505-416A-9312-06800D948FB3}C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe FirewallRules: [{1F05855F-125F-4B50-A3A2-69DB97DB1C64}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe FirewallRules: [{360F1D26-1122-4619-9A47-C0438B29CBD8}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe FirewallRules: [TCP Query User{E94B85C0-4756-4BC8-ABB9-0DE077C903FE}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe FirewallRules: [UDP Query User{FF4D681C-B564-40E4-87B8-418CC5850287}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe FirewallRules: [{8AD6B78A-4E8C-4DDA-BCE9-518B4381095B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe FirewallRules: [{9F7DEB42-FE95-41A8-AACF-AB1005E2E3BC}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe FirewallRules: [TCP Query User{C1646F47-879F-41EE-A227-398D6BE1A2D2}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe FirewallRules: [UDP Query User{C096216D-29D4-4C7F-AF54-D3CFB4AED2FA}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe FirewallRules: [{08D96FAC-7969-45C1-B678-4ED45A11FE73}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe FirewallRules: [{CE39905A-95FA-4142-89C2-32E4754ED2BE}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe FirewallRules: [{11362248-90FE-462D-89AF-6DF1CF9CB64C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F1692A2D-BF85-4792-883F-B484B63C922F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{9CE11FAC-1406-4B60-B29A-70C01AA8751E}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [UDP Query User{016A1442-84A8-424A-86F9-B3CA6CF6B2C9}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [{F94D1B30-8591-426E-B38B-010FB5D6ECA5}] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [{640CFAEB-811E-4A99-812C-4BF292122CF7}] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe FirewallRules: [TCP Query User{12C206E5-FA63-46AF-89A9-7B4198BFC8BC}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{33E24441-C23F-444B-B55C-BA16D0D27771}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{73AC774E-31DC-4800-89F3-F13F4936DD8E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe FirewallRules: [UDP Query User{CBDACC70-BDBE-4EA7-9618-CA021584247D}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe FirewallRules: [{B041AA26-51B2-4924-9B98-620FF6296751}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe FirewallRules: [{00C176F8-2B11-444C-ACE2-B850347CBE02}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe FirewallRules: [TCP Query User{B3EEEF12-C728-47C1-8C0C-38DCEFAC3B48}C:\server\srcds.exe] => (Allow) C:\server\srcds.exe FirewallRules: [UDP Query User{B767B565-189D-493E-BD5F-0E9D89250C87}C:\server\srcds.exe] => (Allow) C:\server\srcds.exe FirewallRules: [{83608F75-C617-4127-B5BE-1FD143B309D7}] => (Block) C:\server\srcds.exe FirewallRules: [{D0005207-363C-4CB0-A563-A1F3C504AFDB}] => (Block) C:\server\srcds.exe FirewallRules: [TCP Query User{54AD8FA4-C5CD-4C9F-9B8D-ED451C409911}C:\program files (x86)\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\the stanley parable\stanley.exe FirewallRules: [UDP Query User{7EAE675B-6CCB-4D6B-9610-C5947D1F2189}C:\program files (x86)\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\the stanley parable\stanley.exe FirewallRules: [{46AECE65-5920-495A-8EF5-730400FC5012}] => (Block) C:\program files (x86)\the stanley parable\stanley.exe FirewallRules: [{5A768D07-1BF7-498F-A6CD-DF89808878B1}] => (Block) C:\program files (x86)\the stanley parable\stanley.exe FirewallRules: [{950F1596-DD55-4671-879E-9C06487388AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTA5.exe FirewallRules: [{E9CA229E-822F-42D3-881A-80DF7AC14BE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTA5.exe FirewallRules: [TCP Query User{44A0898C-96C9-4C72-8453-3F213C626501}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe FirewallRules: [UDP Query User{D919C857-4E09-41DC-848C-B7F567E3D9BC}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe FirewallRules: [{16BE9F17-DE9E-498F-8926-085437391AA5}] => (Block) C:\games\paintball2\paintball2.exe FirewallRules: [{953B699B-4AA1-400F-BD81-C1534B823E3B}] => (Block) C:\games\paintball2\paintball2.exe FirewallRules: [TCP Query User{803E331F-28CC-491A-AE18-BA0F0E238E90}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe FirewallRules: [UDP Query User{59810101-0269-4055-872C-7B386F022903}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe FirewallRules: [{964C98A0-7C93-4E69-AE72-66F4E0C6B105}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe FirewallRules: [{2BF8FD6E-6C99-4660-85EC-85CBCA5F0651}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe FirewallRules: [TCP Query User{D10E42C0-D39A-45B0-BF6C-C54752F2197B}C:\users\test\downloads\ogar-windows-9bec584.exe] => (Allow) C:\users\test\downloads\ogar-windows-9bec584.exe FirewallRules: [UDP Query User{E760562A-C5B3-4D95-8757-23AC50FDB0FD}C:\users\test\downloads\ogar-windows-9bec584.exe] => (Allow) C:\users\test\downloads\ogar-windows-9bec584.exe FirewallRules: [{39214554-C8A9-4967-819E-12B219F473CA}] => (Block) C:\users\test\downloads\ogar-windows-9bec584.exe FirewallRules: [{79FA1763-7C51-4533-B065-465FB0D87F7E}] => (Block) C:\users\test\downloads\ogar-windows-9bec584.exe FirewallRules: [{7CC0EF3C-F708-4988-8274-A41DD7A95F3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe FirewallRules: [{9FB3BC4A-E2A3-46D1-844C-E9AC5D3C5F05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe FirewallRules: [TCP Query User{0BB5A880-3567-4975-9EEC-E05DDF8BD1FF}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe FirewallRules: [UDP Query User{48500F73-1CC1-452F-8A62-624A661FB4DB}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{3247D0DA-7431-4A06-84C7-EA69576A2E61}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{5E4EE28B-A894-40F6-81DC-471177035DF3}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{431FDECD-FF9B-48D6-858D-3D7C9ADBD492}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe FirewallRules: [{9BD98A53-3DFA-481D-981C-90F043007883}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe FirewallRules: [{85BDEA30-C904-464C-B87D-79AC2A21F3A7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{F7DC39BD-D5C9-4065-BC7B-5CEB61A3EE2F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{61506067-FC5D-4307-BD5D-048DD501390E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{E03BD74E-391F-47EA-A723-DE438C0215BC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{DECC4ADC-0915-4CC9-97C9-EE0738D20461}] => (Allow) LPort=8317 FirewallRules: [{0AF83E1C-9AB2-49BD-83FF-F499BCF9379C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{EA6A3F20-67E8-4949-A3B2-90816F60FF3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{37F122B4-11D1-4824-8A6D-76B2CD4632C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{F1B7DD6E-47AD-4407-A972-806C1B477D91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{E6894958-BA90-4C25-A675-E9DC8C5D96BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{7630E3EE-8B80-4509-B135-6D2C5BA31DB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [TCP Query User{DC98BE1B-3729-40A0-817B-8D95ADCC8500}C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe] => (Allow) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe FirewallRules: [UDP Query User{D9DB2C64-D993-452A-93F4-3ADC502F6F63}C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe] => (Allow) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe FirewallRules: [{D2A1CB6B-B54C-4080-9240-ED3FC4BE6CFC}] => (Block) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe FirewallRules: [{67130DF9-12B5-496F-B761-F3F3A27B16F3}] => (Block) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe FirewallRules: [{52B4F510-0BFA-48AE-83D2-9C75719E3191}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{581781B0-2A4E-4966-B6DC-2E5386C13854}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{04F88A0B-7AD7-415D-B5D9-8680060A2072}] => (Allow) C:\Program Files (x86)\CombatArms\CombatArms_EU\NMService.exe FirewallRules: [{5830E212-5D57-4A2B-847C-4F587105A092}] => (Allow) C:\Program Files (x86)\CombatArms\CombatArms_EU\NMService.exe FirewallRules: [TCP Query User{591C2ED8-0A05-4A0A-91D6-15CEBB0EF3CB}C:\games\dying light\dyinglightgame.exe] => (Allow) C:\games\dying light\dyinglightgame.exe FirewallRules: [UDP Query User{A98E3C76-4230-4CD7-8A6E-392D0C9D495B}C:\games\dying light\dyinglightgame.exe] => (Allow) C:\games\dying light\dyinglightgame.exe FirewallRules: [{D73CEF7F-0EBE-465C-B596-4A7C32D66B32}] => (Block) C:\games\dying light\dyinglightgame.exe FirewallRules: [{77CED018-863D-4B77-A8DF-B0560A9214C8}] => (Block) C:\games\dying light\dyinglightgame.exe FirewallRules: [{0E748FD1-ECF5-4BEF-8CB9-D564C3B32076}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{B8A4971E-BE83-4BF7-9074-4DDC86111807}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{86FFBF48-B83D-4CE2-A2F7-94B1DE9C33C8}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{CB4DF907-D32A-4F37-A977-217ED22AE4B7}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{76B7C432-7DDE-456B-887A-9444CA57645A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{FB3283BA-765E-486A-9927-A491849AB2A6}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{D34D8911-9411-42D8-B8DF-3F7734EC72FF}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{C05A3D2A-13D3-457E-AD67-93C3BF7EB5ED}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{FCB29C6C-EA35-4D02-8B4D-2F14BD74056F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\NeverAlone\Never_Alone.exe FirewallRules: [{88633B51-7390-4FD8-9070-6DFC1E47079B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\NeverAlone\Never_Alone.exe FirewallRules: [{21A4C154-7C64-4B58-A49F-2390665FCB7E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe FirewallRules: [{36F70973-676B-465C-AB23-779C6D5BD51A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe FirewallRules: [{B885DAD9-5C54-4FCD-8457-E24E2021CD0D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{27A92616-4F2D-4016-AE32-2266ABA2255E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{B68DCCAA-0DBF-42A1-8E00-E9538DA385DD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E63E9F15-BDCE-4453-B370-F3CD28B7EB06}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E2E3C7A4-F21E-4CA9-9AA9-D859DA409534}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{3A6F2C8D-DCD2-4F8F-ADD4-AE73B376CC0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{88D55BBF-D8DA-4AD2-A4FE-6B0BC7F3CB69}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{A1182067-3C1D-4D31-8E28-884C1EA6C5DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{15437F99-C1C3-4843-9A37-201F81034D35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{73FD70EF-647E-4EAB-A9D3-CB428F9137C4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{07B4032F-E3EC-4851-A222-2BDF0BAAAF59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{B53B9135-D027-479C-A36A-E8D405FD4119}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{396A92DB-1A6C-4906-BFE2-02E021A2D695}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{3BC256D2-DC7C-4A94-A2AB-E3140BB12792}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{3B7A6FEA-2E57-4E11-A595-54F8D394FCDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A07D85D9-C61F-4F66-A506-3311C05A684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{20CC6732-F3E4-4D69-AB97-F6FD68A6FF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{2EAB7CCE-B356-42D0-94C6-596AEA7998D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{D2C860F7-E9BB-4FC8-BCA7-E109F429FFAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TurboDismount\TurboDismount.exe FirewallRules: [{C09A498D-DA56-45BE-8750-C39D0CE3F55E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TurboDismount\TurboDismount.exe FirewallRules: [TCP Query User{32812463-6892-4B77-9CA2-E78CBE74BBAD}K:\steam\steam.exe] => (Block) K:\steam\steam.exe FirewallRules: [UDP Query User{CCF357A8-0E8B-4B4B-93F4-69760CBBC6F1}K:\steam\steam.exe] => (Block) K:\steam\steam.exe FirewallRules: [{9A09BD8E-F6F1-495E-AEBE-471120AA316F}] => (Allow) K:\Steam\Steam.exe FirewallRules: [{40304954-5428-4990-924E-F7E90EE0CD50}] => (Allow) K:\Steam\Steam.exe FirewallRules: [{8E2CA30F-BEFE-4A2F-8600-1C99E9C26387}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe FirewallRules: [{651DED02-0176-4FE6-8497-AE9BAADC52F5}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe FirewallRules: [{36DCDEEE-1F33-44E8-8817-43039C398439}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe FirewallRules: [{C2221272-0F2F-4EDB-8EC3-F7D9B68984EA}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe FirewallRules: [TCP Query User{686ED634-6DB6-498B-BCB1-A3F56EC60AAD}K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe FirewallRules: [UDP Query User{69B47672-84A5-402D-A97E-CE7D0919241E}K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe FirewallRules: [{474D1E28-757E-4B3E-AA78-53FACC960B46}] => (Allow) K:\Steam\bin\steamwebhelper.exe FirewallRules: [{D4077FC1-4198-4947-840C-63AC3E27C05B}] => (Allow) K:\Steam\bin\steamwebhelper.exe FirewallRules: [{1446E7FE-B260-4907-BE3C-B85C472A1C2E}] => (Allow) K:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{0E0676F8-57F4-4BD6-98ED-731CC72C311F}] => (Allow) K:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{7E6B01E4-E3BA-4BB7-95E9-945AD22C3AF7}] => (Allow) K:\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{6D911E27-1297-4586-8C42-2F750AC04466}] => (Allow) K:\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{789802B4-C3B8-44CE-B184-16BFDBFB86D8}] => (Allow) K:\Steam\SteamApps\common\DayZ\DayZ_BE.exe FirewallRules: [{52C4A810-6E31-4795-ABB1-92E6B1047E02}] => (Allow) K:\Steam\SteamApps\common\DayZ\DayZ_BE.exe FirewallRules: [TCP Query User{D58B4AAA-82C9-4233-96BD-761C34C907A6}K:\steam\steamapps\common\dayz\dayz.exe] => (Allow) K:\steam\steamapps\common\dayz\dayz.exe FirewallRules: [UDP Query User{2C02E508-23C2-4911-9A86-9E11AC113214}K:\steam\steamapps\common\dayz\dayz.exe] => (Allow) K:\steam\steamapps\common\dayz\dayz.exe FirewallRules: [{99651565-BB77-4AE0-8B70-559215A8B594}] => (Block) K:\steam\steamapps\common\dayz\dayz.exe FirewallRules: [{9BC0E2E2-94F0-474D-9071-81887431CA39}] => (Block) K:\steam\steamapps\common\dayz\dayz.exe FirewallRules: [{4DAFE24A-B576-4C84-B372-6F17BFDB2384}] => (Allow) K:\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [{84FBEEC0-BC3F-43C6-A32E-39E2DB58EEDC}] => (Allow) K:\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [{8AD0BCF9-6372-4F98-8567-C9147A251A2C}] => (Allow) K:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{07DD24E4-29BC-4442-A3DB-1CD499FB2965}] => (Allow) K:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{55318ACB-4C63-4011-9CEF-77F515793D06}] => (Allow) C:\Users\test\AppData\Local\Temp\Rar$EXa0.930\FIFA 15\fifasetup\fifaconfig.exe FirewallRules: [{7AE4E8A3-80B8-4B5E-BE6C-16DEF7C2F7C9}] => (Allow) C:\Users\test\AppData\Local\Temp\Rar$EXa0.930\FIFA 15\fifasetup\fifaconfig.exe FirewallRules: [TCP Query User{A8D93093-DA99-464E-89AD-EA93FCA45309}K:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) K:\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [UDP Query User{90DDEC39-9088-403E-9459-0EF1C0EACEDF}K:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) K:\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [{C52A2147-383D-402A-AEB0-2B7A3A8378A3}] => (Block) K:\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [{835C5309-105D-43EE-9B9B-CB2892C18358}] => (Block) K:\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [{E3C8E145-7E93-4EAB-86BE-CA945D1D188E}] => (Allow) K:\Steam\SteamApps\common\Half-Life 2\hl2.exe FirewallRules: [{F1C75A3F-261A-47E9-BFF4-7976DACFF0E9}] => (Allow) K:\Steam\SteamApps\common\Half-Life 2\hl2.exe FirewallRules: [{4A398AD0-16C5-475F-B6C2-541EA2F2F523}] => (Allow) LPort=49191 FirewallRules: [{50DC1A0F-AEB5-4CAE-A7A2-7757E39D3AD3}] => (Allow) LPort=5000 FirewallRules: [{C0DDDB59-5FCB-40D3-87E3-D12839AF2BCA}] => (Allow) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{6C1C67CF-109D-4969-9A01-B275B619B1A6}] => (Allow) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe ==================== Wiederherstellungspunkte ========================= 05-03-2016 07:32:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (03/08/2016 02:55:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/08/2016 06:18:46 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/07/2016 02:48:18 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/06/2016 10:53:14 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/05/2016 11:12:02 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wmplayer.exe, Version 12.0.7601.18150 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1c64 Startzeit: 01d1772bc495b6f3 Endzeit: 10 Anwendungspfad: C:\Program Files (x86)\Windows Media Player\wmplayer.exe Berichts-ID: 46bda431-e31f-11e5-b031-bcee7b772580 Error: (03/05/2016 12:07:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/05/2016 11:38:30 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: CamtasiaStudio.exe, Version: 8.6.0.2055, Zeitstempel: 0x55de2a14 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002e41b ID des fehlerhaften Prozesses: 0x24cc Startzeit der fehlerhaften Anwendung: 0xCamtasiaStudio.exe0 Pfad der fehlerhaften Anwendung: CamtasiaStudio.exe1 Pfad des fehlerhaften Moduls: CamtasiaStudio.exe2 Berichtskennung: CamtasiaStudio.exe3 Error: (03/05/2016 11:37:20 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: CamtasiaStudio.exe, Version: 8.6.0.2055, Zeitstempel: 0x55de2a14 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000374 Fehleroffset: 0x000ce753 ID des fehlerhaften Prozesses: 0x24cc Startzeit der fehlerhaften Anwendung: 0xCamtasiaStudio.exe0 Pfad der fehlerhaften Anwendung: CamtasiaStudio.exe1 Pfad des fehlerhaften Moduls: CamtasiaStudio.exe2 Berichtskennung: CamtasiaStudio.exe3 Error: (03/05/2016 10:31:11 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Der angegebene Server kann den angeforderten Vorgang nicht ausführen. . Error: (03/05/2016 10:31:11 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben. . Systemfehler: ============= Error: (03/08/2016 02:55:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: papycpu2 papyjoy Error: (03/08/2016 02:55:00 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\Rtlihvs.dll Fehlercode: 126 Error: (03/08/2016 02:54:51 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (03/08/2016 02:54:51 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (03/08/2016 06:18:44 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: papycpu2 papyjoy Error: (03/08/2016 06:18:12 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\Rtlihvs.dll Fehlercode: 126 Error: (03/08/2016 06:18:01 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (03/08/2016 06:18:01 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (03/07/2016 02:48:18 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: papycpu2 papyjoy Error: (03/07/2016 02:47:24 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\Rtlihvs.dll Fehlercode: 126 CodeIntegrity: =================================== Date: 2016-03-05 10:29:28.231 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:29:23.950 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:29:23.310 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:29:22.089 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:29:11.396 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:29:03.267 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:28:42.640 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:28:42.520 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:28:42.470 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-03-05 10:28:42.360 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-3340 CPU @ 3.10GHz Prozentuale Nutzung des RAM: 42% Installierter physikalischer RAM: 8100.93 MB Verfügbarer physikalischer RAM: 4658.66 MB Summe virtueller Speicher: 16500.05 MB Verfügbarer virtueller Speicher: 12488.46 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:302.91 GB) NTFS Drive k: (Games) (Fixed) (Total:931.51 GB) (Free:671.65 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B44B87F2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1F3BC101) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 05-Mar-16 Suchlaufzeit: 11:19 Protokolldatei: Logfile.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2016.03.05.03 Rootkit-Datenbank: v2016.02.27.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: test Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 510051 Abgelaufene Zeit: 44 Min., 56 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 1 PUP.Optional.SpaceSoundPro, C:\Program Files\Sound+\idscservice.exe, 4424, Löschen bei Neustart, [eb3cbcc866338babd4676f85ae5352ae] Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 3 PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{28EB90E0-EFE7-498D-8899-490D31FC2A03}, Löschen bei Neustart, [ca5db4d040591a1c7a3119f0768d7c84], PUP.Optional.AnySend, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ASPackage, In Quarantäne, [cb5c5e26a7f21e18520bd6a37c88916f], PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\WIN\win_en_77, In Quarantäne, [96911470c1d892a4b9be0d6c24e042be], Registrierungswerte: 2 PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{28EB90E0-EFE7-498D-8899-490D31FC2A03}|Path, \ASP, Löschen bei Neustart, [ca5db4d040591a1c7a3119f0768d7c84] PUP.Optional.AnySend, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ASPACKAGE|DisplayName, AnySend, In Quarantäne, [bd6abfc56831f83e8b12dc8e848005fb] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 5 PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580, In Quarantäne, [ab7c22623663b284764683f313f1ab55], PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8], PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8], PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77\1.20, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8], PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54], Dateien: 14 PUP.Optional.SpaceSoundPro, C:\Program Files\Sound+\idscservice.exe, Löschen bei Neustart, [eb3cbcc866338babd4676f85ae5352ae], Adware.ConvertAd, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\Uninstall.exe, In Quarantäne, [9d8a572db0e9cd693a4f9865a75a7789], Adware.ConvertAd, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\vnsy8E15.tmp, In Quarantäne, [c661cfb59801df572c5dc439e61bcb35], PUP.Optional.SoundPlus, C:\Users\test\AppData\Local\Temp\DAQ0XFN2CE.exe, In Quarantäne, [8e993d47c6d3f145438a942606fbf907], PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [35f2592ba0f9ea4ce3eef308877a9967], PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\Temp\KNVDR94SIO\win.exe, In Quarantäne, [e542bbc95346c47225c42539798728d8], PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Rar$EXb0.426\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [fa2d22625c3dc86e547da25944bda65a], PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Rar$EXb0.968\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [dc4b91f34455092db71a04f71de43ec2], PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\vnsy8E15.tmp, In Quarantäne, [ab7c22623663b284764683f313f1ab55], PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\Uninstall.exe, In Quarantäne, [ab7c22623663b284764683f313f1ab55], PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77\1.20\cnf.cyl, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8], PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77\win_en_77 - uninstall.dat, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54], PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77\win_en_77 - uninstall.exe, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54], PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\amipixel.cfg, In Quarantäne, [48df87fd3960072f9918ea499e67718f], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
08.03.2016, 23:23 | #5 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse Spielen Hi, Schritt # 1: AttentionUninstaller Deaktiviere deinen Virenscanner, damit AttentionUninstaller sauber durchläuft! Bitte lade dir die passende Version von AttentionUninstaller auf deinen Desktop: AttentionUninstaller 32-Bit | AttentionUninstaller 64-Bit
Schritt # 2: AdwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt # 3: FRST Bitte noch ein frisches FRST-Log. Schritt # 4: Bitte Posten
|
09.03.2016, 00:51 | #6 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Guten Abend, ich habe wieder alles so gemacht wie beschriben und hie ist das AU-Log Code:
ATTFilter ATTENTION UNINSTALLER by Deathkid Version 1.2 =========================================================== 09-Mar-16 00:20:27: Deinstallation gestartet... 09-Mar-16 00:20:27: WindowsMangerProtect20.0.0.502 wird deinstalliert. ------------------------- [EOF] --------------------------- Code:
ATTFilter # AdwCleaner v5.101 - Bericht erstellt am 09/03/2016 um 00:33:12 # Aktualisiert am 07/03/2016 von Xplode # Datenbank : 2016-03-08.1 [Server] # Betriebssystem : Windows 7 Professional Service Pack 1 (x64) # Benutzername : test - DAT_BRONIE # Gestartet von : C:\Users\test\Desktop\AdwCleaner_5.101.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner Gelöscht : C:\Program Files\SOUND+ [-] Ordner Gelöscht : C:\Program Files (x86)\Startfenster [-] Ordner Gelöscht : C:\ProgramData\apn [#] Ordner Gelöscht : C:\ProgramData\mntemp [-] Ordner Gelöscht : C:\Users\test\AppData\Local\globalUpdate ***** [ Dateien ] ***** [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bestialitycrawler.com_0.localstorage [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bestialitycrawler.com_0.localstorage-journal [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal [-] Datei Gelöscht : C:\Users\test\AppData\Roaming\aps.uninstall.scan.results ***** [ DLLs ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66} [-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] [-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Tinstalls [-] Schlüssel Gelöscht : HKCU\Software\OCS [-] Schlüssel Gelöscht : HKCU\Software\Reg\Clean [-] Schlüssel Gelöscht : HKCU\Software\Softonic [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Reg\Clean [-] Schlüssel Gelöscht : HKLM\SOFTWARE\WIN [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sweet-page.com ***** [ Internetbrowser ] ***** [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : trovi.search [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : sweet-page.com [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : sweet-page [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : booedmolknjekdopkepjjeckmjkdpfgl [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : bopakagnckmlgajfccecajhnimjiiedh [-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : flpcjncodpafbgdpnkljologafpionhb ************************* :: "Tracing" Schlüssel gelöscht :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [4274 Bytes] - [09/03/2016 00:33:12] C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [4075 Bytes] - [09/03/2016 00:29:49] ########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [4460 Bytes] ########## Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von test (Administrator) auf DAT_BRONIE (09-03-2016 00:39:16) Gestartet von C:\Users\test\Desktop Geladene Profile: test (Verfügbare Profile: test) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (NVIDIA Corporation) C:\Users\test\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-03-08] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18] ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [Keine Datei] FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] () FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Keine Datei] FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] () FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27] FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18] Chrome: ======= CHR HomePage: Default -> hxxps://www.google.de/ CHR StartupUrls: Default -> "hxxps://www.google.de/" CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24] CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11] CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04] CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19] CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03] CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31] CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23] CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17] CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17] CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08] CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23] CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18] CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08] CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-03-08] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-03-08] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] () R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] () R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert] S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-08] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-03-08] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-03-08] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation ) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net) S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X] S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X] S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-09 00:39 - 2016-03-09 00:39 - 00030396 _____ C:\Users\test\Desktop\FRST.txt 2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe 2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Desktop\FRST64.exe 2016-03-09 00:28 - 2016-03-09 00:33 - 00000000 ____D C:\Program Files (x86)\AdwCleaner 2016-03-09 00:27 - 2016-03-09 00:27 - 01524224 _____ C:\Users\test\Downloads\AdwCleaner_5.101.exe 2016-03-09 00:20 - 2016-03-09 00:20 - 00000000 ____D C:\Users\test\AppData\Local\Data 2016-03-09 00:18 - 2016-03-09 00:22 - 00002180 _____ C:\Users\test\AppData\Local\settings.ini 2016-03-09 00:18 - 2016-03-09 00:22 - 00000297 _____ C:\Users\test\Desktop\AttentionUninstallerLog.txt 2016-03-09 00:17 - 2016-03-09 00:17 - 03741464 _____ (Igor Pavlov) C:\Users\test\Downloads\AttentionUninstaller64.exe 2016-03-08 17:27 - 2016-03-08 17:28 - 00082890 _____ C:\Users\test\Downloads\Addition.txt 2016-03-08 17:25 - 2016-03-09 00:39 - 00000000 ____D C:\FRST 2016-03-08 17:25 - 2016-03-08 17:28 - 00055725 _____ C:\Users\test\Downloads\FRST.txt 2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics 2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk 2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ 2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp 2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt 2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO 2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games 2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends 2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost 2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5 2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins 2016-02-24 14:49 - 2016-03-08 22:54 - 00000000 ____D C:\Program Files (x86)\Image-Line 2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA 2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan 2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-09 00:34 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi 2016-03-09 00:34 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-09 00:34 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA 2016-03-09 00:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-09 00:31 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche 2016-03-09 00:31 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-09 00:31 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-09 00:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-03-09 00:23 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache 2016-03-09 00:17 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent 2016-03-08 23:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-08 23:02 - 2015-02-10 14:01 - 00000000 ____D C:\Games 2016-03-08 22:59 - 2014-06-12 06:15 - 00000000 ____D C:\Users\test\Documents\Rockstar Games 2016-03-08 22:56 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line 2016-03-08 22:52 - 2014-12-27 17:32 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2016-03-08 22:24 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-03-08 19:06 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-03-08 19:05 - 2014-06-01 08:59 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2016-03-08 19:05 - 2014-06-01 08:59 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2016-03-08 19:05 - 2014-06-01 08:59 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games 2016-03-08 06:28 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe 2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype 2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew 2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache 2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client 2016-03-05 19:02 - 2016-02-07 20:34 - 00000000 ____D C:\Users\test\Documents\ArmaMods 2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps 2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters 2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin 2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive 2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ 2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat 2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat 2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-03-02 13:42 - 2015-04-19 08:23 - 00000080 _____ C:\Users\test\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily 2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine 2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo 2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher 2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3 2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation 2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test 2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder 2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient 2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin 2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient 2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5 2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin 2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft 2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft 2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk 2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk 2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk 2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk 2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk 2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk 2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk 2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk 2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk 2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss 2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp 2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games 2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client 2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers 2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports 2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox 2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts 2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC 2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb 2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg 2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt 2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg 2016-03-09 00:18 - 2016-03-09 00:22 - 0002180 _____ () C:\Users\test\AppData\Local\settings.ini 2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe Einige Dateien in TEMP: ==================== C:\Users\test\AppData\Local\Temp\6a246669c4722113966d0cbd29442eb9.dll C:\Users\test\AppData\Local\Temp\6bbb725da4ced29daf3cdc0080a744e6.dll C:\Users\test\AppData\Local\Temp\avgnt.exe C:\Users\test\AppData\Local\Temp\nvSCPAPI.dll C:\Users\test\AppData\Local\Temp\nvStInst.exe C:\Users\test\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-02-10 06:24 ==================== Ende von FRST.txt ============================ |
09.03.2016, 07:15 | #7 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse Spielen Hi, Schritt # 1: FRST Fix Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe C:\Users\test\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 EmptyTemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt # 2: ESET ESET Online Scanner
Schritt # 3: FRST Und noch ein frisches FRST-Log bitte. Schritt # 2: Frage Besteht das Problem noch? Schritt # 4: Bitte Posten
|
09.03.2016, 15:59 | #8 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Hallo, Also hier ist das FRST Fixlog Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 durchgeführt von test (2016-03-09 13:52:27) Run:1 Gestartet von C:\Users\test\Desktop Geladene Profile: test (Verfügbare Profile: test) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe C:\Users\test\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 EmptyTemp: ***************** HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Wert erfolgreich entfernt "HKU\S-1-5-21-809088717-832388673-2450759211-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{055d8156-e5a7-11e3-a196-806e6f6e6963}" => Schlüssel erfolgreich entfernt HKCR\CLSID\{055d8156-e5a7-11e3-a196-806e6f6e6963} => Schlüssel nicht gefunden. C:\Users\test\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 => erfolgreich verschoben EmptyTemp: => 7.4 GB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende von Fixlog 13:57:56 ==== Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=45603979733876409c187b4a6074e88e # end=init # utc_time=2016-03-09 01:06:58 # local_time=2016-03-09 02:06:58 (+0100, Mitteleuropäische Zeit) # country="United States" # osver=6.1.7601 NT Service Pack 1 Update Init Update Download Update Finalize Updated modules version: 28497 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=45603979733876409c187b4a6074e88e # end=updated # utc_time=2016-03-09 01:09:53 # local_time=2016-03-09 02:09:53 (+0100, Mitteleuropäische Zeit) # country="United States" # osver=6.1.7601 NT Service Pack 1 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=45603979733876409c187b4a6074e88e # engine=28497 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2016-03-09 02:27:43 # local_time=2016-03-09 03:27:43 (+0100, Mitteleuropäische Zeit) # country="United States" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 55893132 209163513 0 0 # scanned=419775 # found=0 # cleaned=0 # scan_time=4669 Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von test (Administrator) auf DAT_BRONIE (09-03-2016 15:32:09) Gestartet von C:\Users\test\Desktop Geladene Profile: test (Verfügbare Profile: test) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Valve Corporation) K:\Steam\Steam.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Valve Corporation) K:\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (NVIDIA Corporation) C:\Users\test\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-03-08] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.) HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] () ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18] ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [Keine Datei] FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] () FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Keine Datei] FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] () FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27] FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18] Chrome: ======= CHR HomePage: Default -> hxxps://www.google.de/ CHR StartupUrls: Default -> "hxxps://www.google.de/" CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24] CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11] CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04] CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19] CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03] CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31] CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23] CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17] CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17] CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08] CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23] CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18] CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08] CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-03-08] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-03-08] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] () R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] () R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert] S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-08] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-03-08] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-03-08] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation ) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net) S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X] S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X] S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-09 14:06 - 2016-03-09 14:06 - 02870984 _____ (ESET) C:\Users\test\Downloads\esetsmartinstaller_deu.exe 2016-03-09 14:06 - 2016-03-09 14:06 - 02870984 _____ (ESET) C:\Users\test\Desktop\esetsmartinstaller_deu.exe 2016-03-09 14:06 - 2016-03-09 14:06 - 00000000 ____D C:\Program Files (x86)\ESET 2016-03-09 13:52 - 2016-03-09 13:57 - 00001307 _____ C:\Users\test\Desktop\Fixlog.txt 2016-03-09 00:42 - 2016-03-09 00:43 - 00078608 _____ C:\Users\test\Desktop\Addition.txt 2016-03-09 00:39 - 2016-03-09 15:32 - 00030879 _____ C:\Users\test\Desktop\FRST.txt 2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe 2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Desktop\FRST64.exe 2016-03-09 00:28 - 2016-03-09 00:33 - 00000000 ____D C:\Program Files (x86)\AdwCleaner 2016-03-09 00:27 - 2016-03-09 00:27 - 01524224 _____ C:\Users\test\Downloads\AdwCleaner_5.101.exe 2016-03-09 00:20 - 2016-03-09 00:20 - 00000000 ____D C:\Users\test\AppData\Local\Data 2016-03-09 00:18 - 2016-03-09 00:22 - 00002180 _____ C:\Users\test\AppData\Local\settings.ini 2016-03-09 00:18 - 2016-03-09 00:22 - 00000297 _____ C:\Users\test\Desktop\AttentionUninstallerLog.txt 2016-03-09 00:17 - 2016-03-09 00:17 - 03741464 _____ (Igor Pavlov) C:\Users\test\Downloads\AttentionUninstaller64.exe 2016-03-08 17:27 - 2016-03-08 17:28 - 00082890 _____ C:\Users\test\Downloads\Addition.txt 2016-03-08 17:25 - 2016-03-09 15:32 - 00000000 ____D C:\FRST 2016-03-08 17:25 - 2016-03-08 17:28 - 00055725 _____ C:\Users\test\Downloads\FRST.txt 2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics 2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk 2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ 2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp 2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt 2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO 2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games 2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends 2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games 2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost 2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5 2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins 2016-02-24 14:49 - 2016-03-08 22:54 - 00000000 ____D C:\Program Files (x86)\Image-Line 2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA 2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan 2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters 2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-09 15:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-03-09 14:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-09 14:07 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-09 14:07 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-09 14:00 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi 2016-03-09 13:59 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache 2016-03-09 13:59 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-09 13:59 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA 2016-03-09 13:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-09 13:52 - 2014-06-10 11:29 - 00000000 ____D C:\Users\test\AppData\LocalLow\Temp 2016-03-09 06:11 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe 2016-03-09 00:31 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche 2016-03-09 00:17 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent 2016-03-08 23:02 - 2015-02-10 14:01 - 00000000 ____D C:\Games 2016-03-08 22:59 - 2014-06-12 06:15 - 00000000 ____D C:\Users\test\Documents\Rockstar Games 2016-03-08 22:56 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line 2016-03-08 22:52 - 2014-12-27 17:32 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2016-03-08 22:24 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-03-08 19:06 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-03-08 19:05 - 2014-06-01 08:59 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2016-03-08 19:05 - 2014-06-01 08:59 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2016-03-08 19:05 - 2014-06-01 08:59 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games 2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype 2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew 2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache 2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client 2016-03-05 19:02 - 2016-02-07 20:34 - 00000000 ____D C:\Users\test\Documents\ArmaMods 2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps 2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters 2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin 2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive 2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ 2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat 2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat 2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily 2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine 2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo 2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher 2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3 2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation 2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test 2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder 2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient 2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin 2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient 2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5 2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin 2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft 2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft 2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk 2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk 2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk 2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk 2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk 2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk 2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk 2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk 2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk 2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss 2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp 2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games 2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client 2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers 2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports 2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox 2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts 2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC 2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb 2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg 2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt 2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg 2016-03-09 00:18 - 2016-03-09 00:22 - 0002180 _____ () C:\Users\test\AppData\Local\settings.ini 2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe Einige Dateien in TEMP: ==================== C:\Users\test\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-02-10 06:24 ==================== Ende von FRST.txt ============================ Desweiteren funktioniert WMP weitergehend nicht. |
10.03.2016, 15:13 | #9 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse Spielen Aber ausserhalb von Spielen hast du Ton? Beziehungsweise in manchen davon? Mach mal bitte das: Windows reparieren - so geht's - Anleitungen |
11.03.2016, 17:21 | #10 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Hallo Dennis, nach dem Windows repair hatte ich immernoch das selbe problem doch als ich Heute meinen PC startete und erst etwas gearbeitet hab und mich dann einem Spiel gewidmet habe, habe ich mitbekommen das dieses Ton hatte. Also habe ich es nochmal beendet und dem WMP getestet und da konnte ich auch wieder Musik hören. Ich möchte hiermit nur sagen das jetzt alles wieder funktioniert und ich möchte mich bei dir von ganzem Herzen gedanken das du mir helfen konntest. MFG Equinox |
12.03.2016, 13:42 | #11 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse Spielen Hi, freut mich Dann wären wir hier durch. Deine Logs sind sauber Falls du deine Passwörter nicht regelmäßig änderst - jetzt ist der Zeitpunkt dafür! Schritt # 1: Entfernen unserer Tools Die Reihenfolge ist hier entscheidend.
Abschließend noch ein paar Tipps von mir: Schritt # 2: Empfohlene Software Habe immer ein aktuelles Antivirenprogramm deiner Wahl installiert und aktiviere die automatischen Updates (standardmäßig eingeschaltet). Ich empfehle:
Verwende nach Möglichkeit nicht den Internet Explorer, da dieser viele Sicherheitslücken enthält. Achte aber darauf, dass er immer up to date bleibt, weil viele Programme diesen zum Anzeigen von Websites benutzen. Alternativ kannst du verwenden:Dazu sind folgende Add-ons empfehlenswert: uBlock Origin (Chrome) --> Blockiert Werbung. Werbung kann sehr nervig sein, aber auch auf schädliche Links verweisen. uBlock ist effizienter als der Konkurrent AdblockPlus. Ghostery --> Blockiert Tracker und Cookies, welche dich im Internet nachverfolgen können. Stelle jedoch bei der Installation sicher, dass du Ghostrank nicht zustimmst. Du kannst auch Malwarebytes Anti-Exploit verwenden, um aktuelle Sicherheitslücken zu stopfen. Halte immer deine Plug-ins und Software aktuell, vor allem:
PluginCheck Filehippo App Manager Schritt # 3: Tipps um eine Neuinfektion zu vermeiden Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal wie FilePony.de. Von Downloadern wie die von Chip, Softonic und Sourceforge raten wir ab: CHIP-Installer - was ist das? - Anleitungen Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt. Da hilft es nur aufmerksam zu sein. Ein Tool, welches dich dabei gut unterstützen kann, ist: Unchecky. Dieses überwacht im Hintergrund Installationsprozesse und hakt automatisch nervige Adwarekomponenten wie Toolbars ab. Falls man etwas übersieht, warnt noch ein Pop-up, bevor man fortfahren kann. Wir raten von jeglichen Optimizern, Cleanern, SpeedUps und Ähnlichem ab, da diese Softwareprodukte meist keinen Performancegewinn bringen. Du kannst jedoch regelmäßig deinen PC mit der windowsinternen Datenträgerbereinigung behandeln. Überprüfe regelmäßig (mind. 1x pro Monat) deinen PC mit Malwarebytes Anti-Malware und ESET. Falls du dir unsicher bist, ob ein Download wirklich sauber ist, kannst du immer https://www.virustotal.com/ zurate ziehen. Schritt # 4: Unterstütze uns! Wenn du uns mit einer kleinen Spende unterstützen möchtest, so kannst du dies hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Es reicht aber auch schon ein simples hier, wenn du mit uns zufrieden warst. unsere Facebook-Seite! Bitte gib mir bescheid, wenn du das alles gelesen hast und alles klar ist, damit ich dieses Thema aus meinen Abos löschen kann. |
13.03.2016, 13:52 | #12 |
| Nach Virus/Maleware kein Ton mehr in diverse Spielen Tag Dennis, Ich habe die letzten Schritte alle befolgt und mir die ein und andere Software heruntergelade um mich besser zu schützen. Ich möchte mich ganz besonders bei dir bedanken für deine tolle hilfe und algemein für das bestehen dieser Seite bedanken. Dankeschoen an Trojaner-Board für die schnelle und verständliche Hilfe <3<3 MFG Equinox |
13.03.2016, 20:44 | #13 |
/// Malwareteam | Nach Virus/Maleware kein Ton mehr in diverse Spielen Gerne |
Themen zu Nach Virus/Maleware kein Ton mehr in diverse Spielen |
auslastung, cpu, cpu auslastung, diverse, entfernt, ergebniss, fehlermeldung, gamer, games, geladen, herrunter, hoffe, installiert, kein ton, laufen, media, media player, player, problem, richtig, seite, spiel, spiele, vertrauenswürdige, windows, windows media player |