Origin Konto gehackt

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Bibi (Administrator) auf I7 (29-03-2016 16:34:20)
Gestartet von C:\Users\Bibi\Desktop
Geladene Profile: Bibi (Verfügbare Profile: Bibi)
Platform: Windows 8.1 Enterprise (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\Pioneer\DDJ-SZ\DDJ-SZ_AutoSetup.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
() C:\Windows\System32\PnkBstrA.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ChallengerUltimate] => C:\Program Files (x86)\Thermaltake Ttesports Ultimate\Ttsystray3.exe [1254912 2010-08-05] (Chicony)
HKLM-x32\...\Run: [ChallengerUltimateOSD] => C:\Program Files (x86)\Thermaltake Ttesports Ultimate\tTOSD2k1001.exe [634880 2010-08-05] (Chicony)
HKU\S-1-5-21-1243987460-10116721-3724635124-1001\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [868864 2016-03-18] (RemoteMouse.net)
HKU\S-1-5-21-1243987460-10116721-3724635124-1001\...\MountPoints2: {2e84238f-c2b0-11e5-8280-d8cb8ac28b7b} - "E:\OnePlus_setup.exe" /s
HKU\S-1-5-21-1243987460-10116721-3724635124-1001\...\MountPoints2: {d8b59a03-e394-11e5-82aa-d8cb8ac28b7b} - "E:\OnePlus_setup.exe" /s
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm.lnk [2016-01-23]
ShortcutTarget: ROCCAT Swarm.lnk -> C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_Swarm_Monitor.exe (ROCCAT)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{8504B452-1D48-41E9-83F5-088A1CCB59F8}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-28] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-28] (Microsoft Corporation)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-28] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Bibi\AppData\Roaming\Mozilla\Firefox\Profiles\c3d8lvpb.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-14] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-14] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-28] (Microsoft Corporation)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-01-15] (pdfforge GmbH)
FF Extension: Adblock Plus - C:\Users\Bibi\AppData\Roaming\Mozilla\Firefox\Profiles\c3d8lvpb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-23]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-05] [ist nicht signiert]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1257504 2015-12-28] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-28] (Microsoft Corporation)
R2 DDJ-SZ_AutoSetup; C:\Program Files (x86)\Pioneer\DDJ-SZ\DDJ-SZ_AutoSetup.exe [79856 2014-01-06] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-03-14] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-03-11] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-12] (@ByELDI) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 DDJ-SZAudio; C:\Windows\system32\drivers\DDJ-SZAudio64.sys [41968 2014-01-06] (Pioneer Corporation.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 mm2avs; C:\Windows\System32\Drivers\mm2avs.sys [358520 2012-06-06] (Native Instruments GmbH)
S3 mm2usb_svc; C:\Windows\System32\Drivers\mm2usb.sys [45688 2012-06-06] (Native Instruments GmbH)
R3 NIWinCDEmu; C:\Windows\System32\drivers\NIWinCDEmu.sys [112408 2016-02-03] ()
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [47760 2015-11-10] (NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-29 16:34 - 2016-03-29 16:34 - 00009577 _____ C:\Users\Bibi\Desktop\FRST.txt
2016-03-29 16:34 - 2016-03-29 16:34 - 00000000 ____D C:\FRST
2016-03-29 16:30 - 2016-03-29 16:30 - 02374144 _____ (Farbar) C:\Users\Bibi\Desktop\FRST64.exe
2016-03-28 19:22 - 2016-03-28 21:56 - 2613084160 _____ C:\Users\Bibi\Downloads\rld-tfub.iso
2016-03-28 14:22 - 2016-03-28 16:06 - 4105482240 _____ C:\Users\Bibi\Downloads\rld-tfua.iso
2016-03-28 12:57 - 2016-03-28 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-28 12:20 - 2016-03-28 12:20 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\THQ
2016-03-27 20:27 - 2016-03-27 20:27 - 00000000 ____D C:\Program Files (x86)\THQ
2016-03-21 22:03 - 2016-03-21 22:03 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\Warner Bros. Interactive Entertainment
2016-03-15 15:43 - 2016-03-15 15:43 - 00000000 ____D C:\Users\Bibi\Downloads\Dying Light The Following
2016-03-15 14:25 - 2016-03-15 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tt eSPORTS Challenger Ultimate
2016-03-15 14:25 - 2016-03-15 14:25 - 00000000 ____D C:\Program Files (x86)\Thermaltake Ttesports Ultimate
2016-03-14 11:07 - 2016-03-14 11:07 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
2016-03-14 10:55 - 2016-03-14 10:57 - 00000000 ____D C:\Users\Bibi\Documents\Battlefield 4
2016-03-14 10:54 - 2016-03-14 10:54 - 00000000 ____D C:\Users\Bibi\AppData\Local\ESN
2016-03-11 17:26 - 2016-03-11 17:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2016-03-09 21:13 - 2016-03-09 21:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serato
2016-03-09 21:13 - 2016-03-09 21:13 - 00000000 ____D C:\Program Files (x86)\Serato
2016-03-09 19:03 - 2016-02-20 17:45 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 19:03 - 2016-02-20 17:45 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 19:03 - 2016-02-20 17:45 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 19:03 - 2016-02-20 17:45 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 19:03 - 2016-02-20 17:45 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 19:03 - 2016-02-20 17:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 19:03 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 19:03 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 19:03 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 19:03 - 2016-02-08 22:29 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-09 19:03 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 19:03 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 19:03 - 2016-02-08 22:07 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-09 19:03 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 19:03 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 19:03 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 19:03 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 19:03 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 19:03 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 19:03 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 19:03 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 19:03 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 19:03 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 19:03 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 19:03 - 2016-02-08 20:14 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-09 19:03 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 19:03 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 19:03 - 2016-02-08 19:42 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-09 19:03 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 19:03 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 19:03 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 19:03 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 19:03 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 19:03 - 2016-02-08 19:15 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-09 19:03 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 19:03 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 19:03 - 2016-02-05 21:06 - 00046768 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 19:03 - 2016-02-05 16:59 - 07784960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-09 19:03 - 2016-02-05 16:55 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 19:03 - 2016-02-05 16:48 - 07075840 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-09 19:03 - 2016-02-05 16:47 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-09 19:03 - 2016-01-24 20:19 - 00419160 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-09 19:03 - 2016-01-24 20:19 - 00378712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-09 19:03 - 2016-01-24 20:19 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-09 19:03 - 2016-01-24 13:57 - 01335296 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-09 19:03 - 2016-01-24 13:45 - 01063424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-09 19:03 - 2016-01-09 03:38 - 00091992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-09 19:03 - 2016-01-06 20:25 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-09 19:03 - 2015-12-30 23:53 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 19:02 - 2016-02-12 21:14 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 19:02 - 2016-02-12 17:14 - 03708416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 19:02 - 2016-02-12 16:55 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-09 19:02 - 2016-02-12 16:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 19:02 - 2016-02-12 16:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 19:02 - 2016-02-12 16:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 19:02 - 2016-02-12 16:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 19:02 - 2016-02-12 16:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 19:02 - 2016-02-12 16:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 19:02 - 2016-02-12 16:48 - 02244096 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 19:02 - 2016-02-12 16:47 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 19:02 - 2016-02-12 16:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 19:02 - 2016-02-11 16:21 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-09 19:02 - 2016-02-11 16:21 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-03-09 19:02 - 2016-02-11 16:20 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-09 19:02 - 2016-02-11 16:20 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-03-09 19:02 - 2016-02-06 20:08 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 19:02 - 2016-02-06 18:58 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 19:02 - 2016-02-06 18:32 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 19:02 - 2016-02-05 21:07 - 00292696 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL
2016-03-09 19:02 - 2016-02-05 21:07 - 00243032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL
2016-03-09 19:02 - 2016-02-05 17:03 - 15432704 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 19:02 - 2016-02-05 17:00 - 13318144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 19:02 - 2016-02-04 20:18 - 04174336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 19:02 - 2016-02-04 20:18 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 19:02 - 2016-02-04 20:12 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 19:02 - 2016-02-04 19:44 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 19:02 - 2016-02-04 19:39 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 19:02 - 2016-02-04 19:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 19:02 - 2016-02-04 19:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-09 19:02 - 2016-02-03 22:37 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-09 19:02 - 2016-02-03 22:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-09 19:02 - 2016-02-03 17:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-03-09 19:02 - 2016-02-03 17:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 19:02 - 2016-02-03 17:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 19:02 - 2016-01-31 21:16 - 00148832 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 19:02 - 2016-01-31 20:08 - 00111104 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\tsusbhub.sys
2016-03-09 19:02 - 2016-01-15 18:56 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 19:02 - 2016-01-15 18:45 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 19:02 - 2016-01-10 18:41 - 01707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-09 19:02 - 2016-01-10 18:31 - 01344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-09 19:02 - 2016-01-09 03:49 - 00218448 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-03-09 19:02 - 2016-01-09 03:49 - 00192120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-03-09 19:02 - 2016-01-07 01:46 - 00148752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-09 19:02 - 2016-01-07 01:45 - 00177712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-09 19:02 - 2016-01-06 18:47 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-09 19:02 - 2016-01-05 17:00 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-09 19:02 - 2015-12-30 22:49 - 00470360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-09 19:02 - 2015-12-20 16:57 - 00839168 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-09 19:02 - 2015-12-20 16:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-09 19:02 - 2015-12-20 16:43 - 00696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-09 19:02 - 2015-11-19 16:33 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 19:02 - 2015-11-19 16:26 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-08 20:54 - 2016-03-08 20:58 - 00000000 ____D C:\adb
2016-03-08 20:54 - 2014-09-20 12:49 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-03-08 20:54 - 2014-09-20 12:49 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2016-03-08 20:35 - 2016-03-08 20:35 - 00000000 ____D C:\Program Files\DIFX
2016-03-05 17:07 - 2016-03-05 17:08 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\PDF Architect 4
2016-03-05 17:07 - 2016-03-05 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 4
2016-03-05 17:06 - 2016-03-05 17:08 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-03-05 17:06 - 2016-03-05 17:07 - 00000000 ____D C:\Program Files (x86)\PDF Architect 4
2016-03-05 17:06 - 2016-03-05 17:06 - 00000000 ____D C:\Users\Bibi\Documents\PDF Architect
2016-03-05 17:05 - 2016-03-05 17:05 - 00000000 ____D C:\ProgramData\PDF Architect 4
2016-03-04 18:51 - 2016-03-14 10:57 - 00000000 ____D C:\Users\Bibi\AppData\Local\PunkBuster
2016-03-04 18:48 - 2016-03-04 18:52 - 00000000 ____D C:\Users\Bibi\Documents\BFH
2016-03-04 18:47 - 2016-03-15 14:21 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-03-04 13:08 - 2016-03-16 17:30 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-03-04 13:08 - 2016-03-16 17:30 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-03-04 13:08 - 2016-03-11 17:26 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-03-04 13:08 - 2016-03-04 13:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline
2016-03-03 20:59 - 2016-03-10 18:41 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-03-03 20:59 - 2016-03-04 12:38 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\Origin
2016-03-03 20:59 - 2016-03-03 20:59 - 00000000 ____D C:\Users\Bibi\AppData\Local\Origin
2016-03-03 20:55 - 2016-03-29 16:34 - 00000000 ____D C:\ProgramData\Origin
2016-03-03 20:55 - 2016-03-04 18:47 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-03-03 20:55 - 2016-03-03 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-03-03 20:54 - 2016-03-29 16:31 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-28 12:25 - 2016-02-13 10:15 - 07853275 _____ C:\Users\Bibi\Downloads\KMSpico+v10.2.0.zip
2016-02-28 12:25 - 2016-01-16 15:51 - 2378901504 _____ C:\Users\Bibi\Downloads\Office 2016.img

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-29 16:25 - 2015-12-04 06:18 - 00003902 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DBED1AC5-D0D0-45D3-B7A7-C5D6EBCB547F}
2016-03-29 16:22 - 2015-12-04 05:42 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-03-28 16:32 - 2016-02-16 12:09 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\Mp3tag
2016-03-28 15:57 - 2015-12-04 05:51 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1243987460-10116721-3724635124-1001
2016-03-28 15:48 - 2015-12-04 07:07 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-28 15:17 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-03-28 14:22 - 2015-12-06 05:27 - 00000080 _____ C:\Users\Bibi\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-03-28 14:18 - 2013-09-30 06:14 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-28 14:18 - 2013-09-30 05:58 - 00764340 _____ C:\Windows\system32\perfh007.dat
2016-03-28 14:18 - 2013-09-30 05:58 - 00159160 _____ C:\Windows\system32\perfc007.dat
2016-03-28 14:13 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-28 12:52 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-28 12:20 - 2015-12-16 18:55 - 00000000 ____D C:\Users\Bibi\Documents\My Games
2016-03-27 20:27 - 2013-08-22 17:36 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-03-27 20:26 - 2015-12-04 19:24 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-26 14:59 - 2015-12-15 20:00 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\PioneerLog
2016-03-26 00:47 - 2016-02-09 20:20 - 00000000 ____D C:\Program Files (x86)\Pioneer
2016-03-26 00:47 - 2016-02-09 19:42 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pioneer
2016-03-24 22:19 - 2015-12-04 07:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-21 20:56 - 2016-02-15 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Mouse
2016-03-21 20:56 - 2016-02-15 17:54 - 00000000 ____D C:\Program Files (x86)\Remote Mouse
2016-03-19 18:24 - 2015-12-09 22:56 - 00000000 ____D C:\Users\Bibi\AppData\Roaming\Audacity
2016-03-17 14:43 - 2015-12-04 07:04 - 00000000 __SHD C:\Users\Bibi\AppData\LocalLow\EmieUserList
2016-03-17 14:43 - 2015-12-04 07:04 - 00000000 __SHD C:\Users\Bibi\AppData\LocalLow\EmieSiteList
2016-03-15 20:38 - 2015-12-28 14:42 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-03-15 15:55 - 2015-12-06 05:27 - 00000000 ____D C:\Program Files\Rockstar Games
2016-03-15 15:55 - 2015-12-06 05:27 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-03-15 13:36 - 2016-02-03 19:26 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-03-15 13:36 - 2015-12-04 05:39 - 00000000 ____D C:\Users\Bibi
2016-03-14 20:54 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-03-14 20:52 - 2016-02-13 10:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-03-12 08:49 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-11 17:50 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-11 17:26 - 2015-12-04 07:01 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-10 18:23 - 2015-12-21 22:07 - 00000000 ____D C:\Users\Bibi\AppData\Local\ElevatedDiagnostics
2016-03-10 18:13 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-09 20:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-03-09 20:36 - 2013-08-22 16:44 - 00473064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-09 20:34 - 2015-12-04 06:19 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 20:34 - 2015-12-04 01:06 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 20:32 - 2015-12-04 06:19 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-09 19:01 - 2015-12-09 21:02 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 19:01 - 2015-12-09 21:01 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 19:01 - 2015-12-09 21:01 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-08 09:00 - 2013-08-22 17:38 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:00 - 2013-08-22 17:38 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-07 20:04 - 2016-02-13 10:48 - 00000000 ____D C:\Users\Bibi\Documents\Bewerbungsscheisse
2016-03-01 18:26 - 2016-02-14 16:24 - 00000000 ____D C:\Users\Bibi\AppData\Local\wf-launcher
2016-03-01 18:26 - 2016-02-14 16:24 - 00000000 ____D C:\ProgramData\GFACE
2016-02-29 19:12 - 2016-02-24 00:34 - 00000000 ____D C:\Games

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-05 13:55 - 2015-12-05 13:55 - 0007601 _____ () C:\Users\Bibi\AppData\Local\Resmon.ResmonCfg
2015-12-04 19:24 - 2015-12-04 19:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Bibi\AppData\Local\Temp\12345.exe
C:\Users\Bibi\AppData\Local\Temp\Ableton Swapper.exe
C:\Users\Bibi\AppData\Local\Temp\DSETUP.dll
C:\Users\Bibi\AppData\Local\Temp\dsetup32.dll
C:\Users\Bibi\AppData\Local\Temp\DXSETUP.exe
C:\Users\Bibi\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Bibi\AppData\Local\Temp\nvStInst.exe
C:\Users\Bibi\AppData\Local\Temp\RemoteMouse.exe
C:\Users\Bibi\AppData\Local\Temp\sonarinst.exe
C:\Users\Bibi\AppData\Local\Temp\_isB8A3.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-03-25 11:41

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von Bibi (2016-03-29 16:34:50)
Gestartet von C:\Users\Bibi\Desktop
Windows 8.1 Enterprise (X64) (2015-12-04 03:39:54)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1243987460-10116721-3724635124-500 - Administrator - Disabled)
Bibi (S-1-5-21-1243987460-10116721-3724635124-1001 - Administrator - Enabled) => C:\Users\Bibi
Gast (S-1-5-21-1243987460-10116721-3724635124-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ableton Live 9 Trial (HKLM\...\{92C93482-27F0-4E03-8C4F-9E71A3FE05B1}) (Version: 9.0.0.0 - Ableton)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin’s Creed Unity (HKLM-x32\...\Steam App 289650) (Version:  - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.31 - Ubisoft)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Far Cry 4 (HKLM-x32\...\Far Cry 4_is1) (Version:  - )
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
LEGO® MARVEL Super Heroes (HKLM\...\Steam App 249130) (Version:  - Traveller's Tales)
Metal Gear Solid 5: The Phantom Pain (HKLM-x32\...\Metal Gear Solid 5: The Phantom Pain_is1) (Version:  - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2F750C77-1FEC-44F9-88CC-2CE322EBD61E}) (Version: 1.1.0324 - Microsoft Corporation)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.6568.2036 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 45.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 de)) (Version: 45.0.1 - Mozilla)
Mp3tag v2.75 (HKLM-x32\...\Mp3tag) (Version: v2.75 - Florian Heidenreich)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.9.3.355 - Native Instruments)
Native Instruments Komplete Kontrol Driver (HKLM-x32\...\Native Instruments Komplete Kontrol Driver) (Version:  - Native Instruments)
Native Instruments Komplete Selection (HKLM-x32\...\Native Instruments Komplete Selection) (Version:  - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.2.880 - Native Instruments)
Native Instruments Maschine 2 (HKLM-x32\...\Native Instruments Maschine 2) (Version: 2.4.0.4769 - Native Instruments)
Native Instruments Maschine 2 Factory Library (HKLM-x32\...\Native Instruments Maschine 2 Factory Library) (Version: 1.2.0.4 - Native Instruments)
Native Instruments Maschine Controller Driver (HKLM-x32\...\Native Instruments Maschine Controller Driver) (Version:  - Native Instruments)
Native Instruments Maschine Controller MK2 Driver (HKLM-x32\...\Native Instruments Maschine Controller MK2 Driver) (Version:  - Native Instruments)
Native Instruments Maschine Mikro Driver (HKLM-x32\...\Native Instruments Maschine Mikro Driver) (Version:  - Native Instruments)
Native Instruments Maschine Mikro MK2 Driver (HKLM-x32\...\Native Instruments Maschine Mikro MK2 Driver) (Version:  - Native Instruments)
Native Instruments Maschine Studio Driver (HKLM-x32\...\Native Instruments Maschine Studio Driver) (Version:  - Native Instruments)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.3.1344 - Native Instruments)
Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.1 - Native Instruments)
Native Instruments Scarbee Mark I (HKLM-x32\...\Native Instruments Scarbee Mark I) (Version: 1.3.0.7 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.0.1145 - Native Instruments)
NBA 2K15 (HKLM-x32\...\Steam App 282350) (Version:  - Visual Concepts)
Next Car Game: Wreckfest (HKLM-x32\...\Steam App 228380) (Version:  - Bugbear)
NVIDIA Grafiktreiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 9.11.2.10120 - Electronic Arts, Inc.)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.26.25466 - pdfforge GmbH)
PDF Architect 4 Asian Fonts Pack (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Convert Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Forms Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Insert Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 OCR Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Review Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Secure Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
Pioneer DDJ-SZ Driver (HKLM-x32\...\DDJ-SZ) (Version: 1.000.000.000 - Pioneer Corporation.)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - Slightly Mad Studios)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
rekordbox 4.1.0 (HKLM-x32\...\Pioneer rekordbox 4.1.0) (Version: 4.1.0.0026 - Pioneer DJ)
Remote Mouse version 2.803 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 2.803 - Remote Mouse)
RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder)
ROCCAT Swarm (HKLM-x32\...\InstallShield_{E7E52DE1-B0AD-4527-8E65-275EC03A9530}) (Version: 1.40.201 - ROCCAT GmbH)
ROCCAT Swarm (x32 Version: 1.40.201 - ROCCAT GmbH) Hidden
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Serato DJ  (HKLM-x32\...\{ab17b5e4-8e14-4a3d-ac36-acc329b6ea2e}) (Version: 1.8.2.2041 - )
Serato DJ  (x32 Version: 1.8.2.2041 - Serato) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
Tt eSPORTS Challenger Ultimate (HKLM-x32\...\{D65D9706-6D6D-42E8-A11A-63E3AFECBBC1}) (Version: 2.0.2.0 - Tt eSPORTS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft)
V-Station 2.2 (HKLM-x32\...\{842C6AFC-7856-4fd9-99AF-8900554ACAA2}_is1) (Version: 2.2 - Novation)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (01/27/2014 9.0.0000.00000) (HKLM\...\9CA77E2A8332A0824C54DA611BBE4CA24AB1F750) (Version: 01/27/2014 9.0.0000.00000 - Google, Inc.)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {9B3DFACA-B048-443E-9189-EDEB529D328C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-28] (Microsoft Corporation)
Task: {B49B7DC7-13F0-4448-8007-1192CDBDD011} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-28] (Microsoft Corporation)
Task: {CDBCBBE1-CC9D-47E1-8EBC-F6F70A7CFA67} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2016-01-12] (@ByELDI)
Task: {DD931578-1A49-42D0-9790-0ECF63BD191F} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-12-04] ()
Task: {FF30833E-AF86-415F-BC83-BBAC73D970AE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-09] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-02-13 10:16 - 2016-02-28 03:20 - 00173248 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2016-02-09 20:20 - 2014-01-06 15:33 - 00079856 _____ () C:\Program Files (x86)\Pioneer\DDJ-SZ\DDJ-SZ_AutoSetup.exe
2016-03-14 11:07 - 2016-03-14 11:07 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2016-01-30 13:04 - 2016-01-23 03:04 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1243987460-10116721-3724635124-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Bibi\Pictures\MSI Wallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "ROCCAT Swarm.lnk"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "ChallengerUltimate"
HKLM\...\StartupApproved\Run32: => "ChallengerUltimateOSD"
HKU\S-1-5-21-1243987460-10116721-3724635124-1001\...\StartupApproved\Run: => "Remote Mouse"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B889F6AD-39C3-457E-8716-EFF1DF06C6D8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D9082E1A-61B6-4965-A6D4-8678B1EFB7A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E3A7D40B-79F2-4925-A6C0-DFAD15373587}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4F8C98DA-A1F0-4B65-A36C-D78348CB2295}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8F403D01-2D32-4FB0-87C4-16E90DCFFCA5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{73EC3EF1-5269-41D2-A67E-3A7C85BA8973}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{255F3572-323C-4715-8210-8CD6C2271A27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{565362F7-918C-4A19-A58F-8A3173952A28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{C85A3624-D4AF-4F67-AD44-F9E953CEDCA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{DB328389-2691-4C90-9A73-D2BF02877757}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{DA6F5B39-42C2-46D1-B2B6-7CCF45CB0810}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bugbear Entertainment\Wreckfest_x64.exe
FirewallRules: [{076BA440-8EF3-49FA-89F8-8E172440CB9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bugbear Entertainment\Wreckfest_x64.exe
FirewallRules: [{84CFA86A-FAB3-4FB2-AF01-BA44B42211EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bugbear Entertainment\Wreckfest.exe
FirewallRules: [{BFB0E7B5-3F40-44A5-903A-94D69E1CC743}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bugbear Entertainment\Wreckfest.exe
FirewallRules: [{AD4D885C-E77C-4320-AF0B-F8C97F78804E}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{A4A73A82-CA3A-45E3-91D3-936EAACB7927}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{8337453E-B0BD-457F-B7E3-7E9DC5AC113D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{1FD068D6-D322-4EB2-AB72-45CF1FD54136}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{68D583AA-700A-4E0C-84FF-310F5BCBA197}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{C6CDBFC7-0435-47F6-9F7D-14F5999FA691}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Syndicate\ACS.exe
FirewallRules: [{C3E87E4F-9974-4A91-8A75-0C7CA99773B6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{B217A243-7B08-4DAB-955B-D4D1467EE24D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{8F9043D9-E21A-430F-A0EB-A9C051B81BC8}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe
FirewallRules: [UDP Query User{EAB58F50-6124-4B47-9FA5-F814CB3B9EFB}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe
FirewallRules: [TCP Query User{B9B8CA8A-BDB9-40F3-A3B9-AF2D4B263F40}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe
FirewallRules: [UDP Query User{E73CD1FA-7FE9-4731-8DA3-61A9504666F6}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe
FirewallRules: [TCP Query User{A8A006F1-4164-4DB9-AD61-56C0511B249C}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe
FirewallRules: [UDP Query User{70C35EC4-C1D4-4A7A-8CFC-2702F8175094}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe
FirewallRules: [TCP Query User{2BC50133-0C51-4582-89A0-1D0A68DE21B7}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{5D87AD15-70EF-47AE-850E-AA20EBD59F19}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{025897BA-BA0E-4E39-8F28-2F3B10C51E4E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9D04135E-C0CB-4DED-A73E-79534BD0FDD3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{AE3832E2-60FB-4026-BD7B-396D04DA3EBB}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe
FirewallRules: [UDP Query User{FFFDA4C2-5AB0-444E-B717-49192B75978A}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe
FirewallRules: [TCP Query User{30E6958D-256B-4531-A2D6-FC13AA6C6F1C}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe
FirewallRules: [UDP Query User{D8EF8B9D-B9CA-46D8-AA3C-D2B98DB148D9}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe
FirewallRules: [TCP Query User{147E3D7B-F87A-4189-9DC1-384B7CE7FEF9}C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe
FirewallRules: [UDP Query User{F771C512-18FB-4D55-B614-274E97351587}C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe
FirewallRules: [{E5BA2D15-EBED-44EA-899B-555DB554E1E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{4055F5D4-BFE1-4023-821D-3C474B9F8E6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [TCP Query User{8EB01BC0-0B44-4BF2-A455-A6E3E0E1122F}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{67463CAF-D835-4FE1-8CFF-DDA4F867C5E0}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [{CD5957EE-6133-4E5F-8C7E-DF3DCD548E13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{F93A1C7C-39FE-4C1C-9AE3-E50BF0B6D089}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{2EE4FCB3-93D1-4B5B-ADCF-0D8C9D1B1FE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed Unity\ACU.exe
FirewallRules: [{4D5878F9-7E65-4D3F-8A21-FDA5FA6600CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassin's Creed Unity\ACU.exe
FirewallRules: [{49422C24-F34A-4960-A73B-9A59DD29C812}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{7B099171-1C75-4B1A-979B-52EC73420E60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{024DF375-5A14-4709-A6F1-E60C566079AA}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{68558E3B-2BF0-45E1-8CA0-A119EE90DCD4}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{E8991B06-B23D-41DB-9C4D-87E88C3B57E2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{55F63558-9780-4239-9154-3A847E0B9D05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [TCP Query User{DBD9C9FD-2CBB-4511-95B2-438DD42927CE}C:\program files (x86)\r.g. mechanics\far cry 4\bin\farcry4.exe] => (Block) C:\program files (x86)\r.g. mechanics\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{E32F05AF-6118-4D38-97BF-7AAE0579B1F8}C:\program files (x86)\r.g. mechanics\far cry 4\bin\farcry4.exe] => (Block) C:\program files (x86)\r.g. mechanics\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{187CE1C9-CADC-46F9-B0DE-BE74D06E3F5A}C:\program files (x86)\r.g. mechanics\far cry 4\bin\ige_wpf64.exe] => (Block) C:\program files (x86)\r.g. mechanics\far cry 4\bin\ige_wpf64.exe
FirewallRules: [UDP Query User{A43EFE3D-F945-4374-92F0-6B76F0169DF9}C:\program files (x86)\r.g. mechanics\far cry 4\bin\ige_wpf64.exe] => (Block) C:\program files (x86)\r.g. mechanics\far cry 4\bin\ige_wpf64.exe
FirewallRules: [TCP Query User{1F7356B5-868F-4E5D-AACA-1315C1C390AA}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) C:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{2CD06976-C1B1-4011-934E-48F49082268B}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) C:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{7EE12B00-39F5-4731-B3B5-B5B229C1E3FF}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe
FirewallRules: [UDP Query User{9543AB4E-B1AC-4E1A-95B7-A8F7DD35B66E}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe
FirewallRules: [{641B53EF-F04C-4C2A-997B-C639440BDFF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{2BE0FBAE-C0BC-4DC8-ACBE-A18C608D17FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{ED095489-BAA3-4335-830B-62A66BF5C6F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{0A48B6A0-61AB-4C33-91B5-9D8F957AAD2A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [TCP Query User{E781A4D5-99F5-48EE-8752-1C862F11FD24}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe
FirewallRules: [UDP Query User{5C0CC1F4-2178-45D3-BD4D-BF6C6BDCEC08}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe
FirewallRules: [TCP Query User{C595A9E5-A3E6-4C8E-BF38-F7CF64DBCADC}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe
FirewallRules: [UDP Query User{3DE82DCB-394B-4BCB-8DD8-088700044A15}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe
FirewallRules: [TCP Query User{74956399-FBD8-480F-8CA4-931949A9C348}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe
FirewallRules: [UDP Query User{73158CF2-1B4C-483F-8183-ED2F6FC8A35D}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe
FirewallRules: [TCP Query User{B7E6F569-4821-45F1-B62C-D717DB99FF7E}C:\program files\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files\rekordbox 4.0.6\psvnfsd.exe
FirewallRules: [UDP Query User{AD03CDC8-627B-4E3E-A95D-5DB52B365313}C:\program files\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files\rekordbox 4.0.6\psvnfsd.exe
FirewallRules: [TCP Query User{ACFEF5DA-BB61-41E9-94AC-E785075112BA}C:\program files\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files\rekordbox 4.0.6\psvlinksysmgr.exe
FirewallRules: [UDP Query User{3C892E81-B512-4D2B-8EC7-4DC713082BE2}C:\program files\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files\rekordbox 4.0.6\psvlinksysmgr.exe
FirewallRules: [TCP Query User{BFBCD041-2618-48FB-AD61-BFACA839F2ED}C:\program files\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files\rekordbox 4.0.6\rekordbox.exe
FirewallRules: [UDP Query User{70CB4480-17F1-4A45-8F06-A234BE4A67C8}C:\program files\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files\rekordbox 4.0.6\rekordbox.exe
FirewallRules: [TCP Query User{80954A76-7F47-4045-A422-18FE9C55E6E0}C:\program files (x86)\pioneer\rekordbox 4.0.7\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\psvnfsd.exe
FirewallRules: [UDP Query User{72EF4F5A-791C-4EE9-8316-4BB22D73BAF5}C:\program files (x86)\pioneer\rekordbox 4.0.7\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\psvnfsd.exe
FirewallRules: [TCP Query User{55D17FE5-430D-4B24-B39B-D0E4406B4994}C:\program files (x86)\pioneer\rekordbox 4.0.7\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\psvlinksysmgr.exe
FirewallRules: [UDP Query User{5BB12319-4687-4698-9A63-62CDE0733B82}C:\program files (x86)\pioneer\rekordbox 4.0.7\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\psvlinksysmgr.exe
FirewallRules: [TCP Query User{A5A29F6D-F1B7-4F12-BAD3-5FF82AA7C91B}C:\program files (x86)\pioneer\rekordbox 4.0.7\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\rekordbox.exe
FirewallRules: [UDP Query User{B6E52013-E354-448D-8DA8-A35AF6888F8A}C:\program files (x86)\pioneer\rekordbox 4.0.7\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.7\rekordbox.exe
FirewallRules: [{9F220CD2-7EC9-4CBB-945B-7CCED8CD3E50}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{C5334F4A-7658-46AC-9332-EDED990EB5A5}C:\games\dying light\dyinglightgame.exe] => (Block) C:\games\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{CC0D0719-34BC-4A60-B034-63FBED779793}C:\games\dying light\dyinglightgame.exe] => (Block) C:\games\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{C300CCBE-5FB2-4733-A57E-FA64E80E0866}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe
FirewallRules: [UDP Query User{4DAA3BD2-3286-4C96-A7F3-3E5DB7430A45}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe
FirewallRules: [TCP Query User{E008370E-4DCC-4328-A08E-8DF82CBF1B84}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe
FirewallRules: [UDP Query User{42432D36-6016-49F0-BCF7-6B4B96312FBB}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe
FirewallRules: [TCP Query User{9A92CCD4-F3E7-4651-AC08-6FBBD49020CA}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe
FirewallRules: [UDP Query User{0EAFD097-25CC-4CEC-9F9E-9885552C9557}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe
FirewallRules: [TCP Query User{74656F57-8C8E-4AF7-AB15-C7A0F0D84186}C:\games\dying light the following\dyinglightgame.exe] => (Block) C:\games\dying light the following\dyinglightgame.exe
FirewallRules: [UDP Query User{18867722-1E22-4165-AC98-690DB41BB4DA}C:\games\dying light the following\dyinglightgame.exe] => (Block) C:\games\dying light the following\dyinglightgame.exe
FirewallRules: [{94C9886C-3A34-4063-B46A-32F694F6E6D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{8FB4C67B-F915-4A2C-9DB9-9D11DB3698F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [TCP Query User{FE49524F-CD96-48A6-B630-176973D87A02}C:\program files (x86)\origin games\bfh\bfh.exe] => (Allow) C:\program files (x86)\origin games\bfh\bfh.exe
FirewallRules: [UDP Query User{7E72D3F3-C427-44ED-92EB-500DD415194E}C:\program files (x86)\origin games\bfh\bfh.exe] => (Allow) C:\program files (x86)\origin games\bfh\bfh.exe
FirewallRules: [{82F975F9-6E87-4A30-91BD-6D5BE9840580}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F87B4559-302B-427A-B702-2DA6279C7DC7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{5A2336B1-95F0-43BD-9BB9-2DA5FA55446B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{ADD44792-C6C4-495A-B946-5AE0257B5841}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2AC84CE0-0673-4F18-B7B5-0E29D006150C}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{42956C66-CF4F-480A-A9CD-1A71D9E0EC0A}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{F35C2A4D-277A-4B5B-A934-DE8971119035}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{A8764BD7-F428-4D2C-8C70-3A4C7E153DD9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [TCP Query User{CAE96184-7868-4AAC-B503-9B4B2D0E566B}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{B33709A9-094E-4D50-9E14-503D6700B14D}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [{90DB716C-C266-43E6-9F0C-0AFA133FDB96}] => (Allow) C:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{D2C04680-C6B4-4E6F-B16C-B5076E0942FD}] => (Allow) C:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{AFB76C1D-4E16-4F8A-B9C0-D667748D2AAF}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{C7C2DA64-8B73-4B52-AE72-4A5E6A028A8E}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{3EF310CD-6E61-45B2-9935-14789D3DC1EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LEGO Marvel Super Heroes\LEGOMARVEL.exe
FirewallRules: [{1D076690-4ED0-46D5-9C13-87CE6C6798A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LEGO Marvel Super Heroes\LEGOMARVEL.exe
FirewallRules: [TCP Query User{7D0901C7-F3B1-4A74-AF06-FD7A3F76823C}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe
FirewallRules: [UDP Query User{D45583B4-9AB1-4FE9-AD96-7A46071E0F54}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe
FirewallRules: [TCP Query User{8A20D62A-6746-449D-8DCC-AB920126EC56}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe
FirewallRules: [UDP Query User{3A0E0A8D-31DC-40D3-B542-8054D13EFFE5}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe
FirewallRules: [TCP Query User{37A02C94-2372-4B45-91B5-8985F642487B}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe
FirewallRules: [UDP Query User{B414FA4C-E501-4A39-B875-B3C32AF8F796}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe

==================== Wiederherstellungspunkte =========================

26-03-2016 12:58:43 Geplanter Prüfpunkt
27-03-2016 20:26:47 Installiert Juiced2_HIN
27-03-2016 20:27:05 DirectX wurde installiert

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/27/2016 08:27:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/27/2016 08:26:51 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/26/2016 12:58:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/15/2016 03:01:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (03/15/2016 02:25:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/11/2016 05:24:29 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/09/2016 08:29:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/06/2016 04:55:03 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (03/05/2016 05:06:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/04/2016 12:52:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (03/28/2016 07:33:51 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/28/2016 07:33:21 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (03/28/2016 04:09:30 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (03/28/2016 04:09:00 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/28/2016 03:58:10 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (03/28/2016 03:57:40 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/27/2016 06:30:56 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (03/27/2016 06:30:26 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/26/2016 03:42:11 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/26/2016 03:41:41 PM) (Source: DCOM) (EventID: 10010) (User: i7)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 11%
Installierter physikalischer RAM: 16332.68 MB
Verfügbarer physikalischer RAM: 14463.1 MB
Summe virtueller Speicher: 18764.68 MB
Verfügbarer virtueller Speicher: 16548.86 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.17 GB) (Free:251.2 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B035C5CD)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================