| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: MPC Cleaner lässt sich nicht deinstallierenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
11.05.2016, 15:57
| #1 |
 |  MPC Cleaner lässt sich nicht deinstallieren Hallo, leider hat sich gestern Abend bei der installation eines E-Book Readers die Software NPC Cleaner bei mir auf dem Rechner eingenistet. Daraufhin habe ich versucht diese zu entfernen - das scheitete schon mal daran, dass entgegen der Beschreibungen im Internet, kein neuer Programmeintrag unter deinstallieren/ändern erstellt wurde. Über den "adwcleaner_5.116" hatte ich versucht die Dateien zu entfernen, aber bei Systemstart und manuell die Verknüpfungen mit den Browsern zu entfernen, aber werden nach Systemneustart wieder Prozesse gestartet die eindeutig zu dem Programm gehören. Es befindet sich auch weiterhin unter C:\Program Files (x86)\MPC Cleaner Zusätzlich findet "Avast" bei einem Einzelscan der Dateien, alles mit diesem Programm "vollkommen in Ordnung ist". Ich habe zuästzlich einen komplettscan durchgeführt Avast hat hier auch keine Ergenisse gefunden. - Deshalb hierzu keine Logfile. Über den RevoUnistaller hatte ich somit auch keine Chance, auch nicht über dessen sogenannten "Jagdmodus" war keine Deinstallation möglich. Danke für die Hilfe und Grüße Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
durchgeführt von Liz (Administrator) auf LIZ-PC (11-05-2016 16:35:12)
Gestartet von C:\Users\Liz\Downloads
Geladene Profile: Liz (Verfügbare Profile: Liz)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) D:\Programme\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVAST Software) D:\Programme\AvastUI.exe
(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\AvastUI.exe [7391632 2016-05-11] (AVAST Software)
HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe
HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\ashShA64.dll [2016-05-11] (AVAST Software)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
AutoConfigURL: [S-1-5-21-1654553621-3530598706-921729800-1000] => hxxp://unstops.org/wpad.dat?d6804a85a76645f123e543f4cba709319968704
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
ManualProxies: 0hxxp://unstops.org/wpad.dat?d6804a85a76645f123e543f4cba709319968704
Internet Explorer:
==================
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\aswWebRepIE64.dll [2016-05-11] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\aswWebRepIE.dll [2016-05-11] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-09] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\WebRep\FF
FF Extension: Avast Online Security - D:\Programme\WebRep\FF [2016-05-11]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - D:\Programme\SafePrice\FF
FF Extension: Avast SafePrice - D:\Programme\SafePrice\FF [2016-05-11]
Chrome:
=======
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (Google-Suche) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (CyberGhost VPN - Kostenloser Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]
CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-11]
CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-11]
CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-11]
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-11]
CHR Extension: (Avast SafePrice) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-05-11]
CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-11]
CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-11]
CHR Extension: (Avast Online Security) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-11]
CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-11]
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\WebRep\Chrome\aswWebRepChromeSp.crx [2016-05-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\WebRep\Chrome\aswWebRepChrome.crx [2016-05-11]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; D:\Programme\AvastSvc.exe [243296 2016-05-11] (AVAST Software)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [350688 2016-05-10] (DotC United Inc)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Woheghserverservice; "C:\Program Files (x86)\Wohegh\Woheghserverservice.exe" {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-11] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-05-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-11] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-11] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-11] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-05-11] (AVAST Software)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-05-10] (DotC United Inc)
S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S3 MSICDSetup; \??\G:\CDriver64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-11 16:12 - 2016-05-11 16:12 - 00067119 _____ C:\Users\Liz\Downloads\Addition.txt
2016-05-11 16:11 - 2016-05-11 16:35 - 00017048 _____ C:\Users\Liz\Downloads\FRST.txt
2016-05-11 16:11 - 2016-05-11 16:35 - 00000000 ____D C:\FRST
2016-05-11 16:11 - 2016-05-11 16:11 - 02381312 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe
2016-05-11 15:53 - 2016-05-11 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
2016-05-11 14:13 - 2016-05-11 14:13 - 00000000 ____D C:\Program Files (x86)\hohobnd
2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp
2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe
2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}
2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe
2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-05-11 00:44 - 2016-05-11 01:16 - 00000000 ____D C:\AdwCleaner
2016-05-11 00:43 - 2016-05-11 00:43 - 03640384 _____ C:\Users\Liz\Downloads\adwcleaner_5.116.exe
2016-05-11 00:17 - 2016-05-11 00:17 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-05-11 00:17 - 2016-05-11 00:17 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat
2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe
2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe
2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla
2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss
2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft
2016-05-10 22:53 - 2016-05-10 22:57 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
2016-05-10 22:53 - 2016-05-10 22:53 - 00060136 ____N (DotC United Inc) C:\Windows\system32\Drivers\MPCKpt.sys
2016-05-10 22:52 - 2016-05-11 00:59 - 00000000 ____D C:\Program Files (x86)\Wohegh
2016-05-10 22:52 - 2016-05-10 22:52 - 00008956 _____ C:\Windows\System32\Tasks\Wohegh Server
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk
2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow
2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf
2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf
2016-04-22 22:35 - 2016-04-25 11:41 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify
2016-04-22 22:35 - 2016-04-22 22:35 - 00001797 _____ C:\Users\Liz\Desktop\Spotify.lnk
2016-04-22 22:35 - 2016-04-22 22:35 - 00001783 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-04-22 22:34 - 2016-04-25 11:46 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify
2016-04-22 22:34 - 2016-04-22 22:34 - 00350936 _____ (Spotify Ltd) C:\Users\Liz\Downloads\SpotifySetup.exe
2016-04-12 21:26 - 2016-04-04 20:14 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-04-12 21:26 - 2016-04-04 20:02 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-12 21:26 - 2016-04-02 15:08 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-04-12 21:26 - 2016-03-31 21:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-12 21:26 - 2016-03-31 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-04-12 21:26 - 2016-03-31 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-12 21:26 - 2016-03-31 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-12 21:26 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-12 21:26 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-12 21:26 - 2016-03-31 02:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-12 21:26 - 2016-03-31 02:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-12 21:26 - 2016-03-31 02:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-12 21:26 - 2016-03-31 02:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-12 21:26 - 2016-03-31 02:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-12 21:26 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-12 21:26 - 2016-03-31 02:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-04-12 21:26 - 2016-03-31 02:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-12 21:26 - 2016-03-31 01:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-12 21:26 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-12 21:26 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-04-12 21:26 - 2016-03-31 01:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-12 21:26 - 2016-03-31 01:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-04-12 21:26 - 2016-03-31 01:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-04-12 21:26 - 2016-03-31 01:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-04-12 21:26 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-12 21:26 - 2016-03-31 01:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-04-12 21:26 - 2016-03-31 01:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-04-12 21:26 - 2016-03-31 01:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-04-12 21:26 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-04-12 21:26 - 2016-03-31 01:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-04-12 21:26 - 2016-03-31 01:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-04-12 21:26 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-12 21:26 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-12 21:26 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-12 21:26 - 2016-03-31 01:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-04-12 21:26 - 2016-03-31 01:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-04-12 21:26 - 2016-03-31 01:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-04-12 21:26 - 2016-03-31 01:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-04-12 21:26 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-04-12 21:26 - 2016-03-31 01:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-04-12 21:26 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-04-12 21:26 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-04-12 21:26 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-04-12 21:26 - 2016-03-31 01:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-04-12 21:26 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-12 21:26 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-12 21:26 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-12 21:26 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-04-12 21:26 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-04-12 21:26 - 2016-03-29 19:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-12 21:26 - 2016-03-23 16:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-12 21:26 - 2016-03-18 01:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-12 21:26 - 2016-03-18 01:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-12 21:26 - 2016-03-18 01:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-12 21:26 - 2016-03-18 01:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-12 21:26 - 2016-03-18 01:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-12 21:26 - 2016-03-18 01:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-12 21:26 - 2016-03-18 00:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-12 21:26 - 2016-03-18 00:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-04-12 21:26 - 2016-03-18 00:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-12 21:26 - 2016-03-18 00:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-12 21:26 - 2016-03-18 00:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-04-12 21:26 - 2016-03-18 00:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-04-12 21:26 - 2016-03-18 00:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-12 21:26 - 2016-03-18 00:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-12 21:26 - 2016-03-18 00:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-04-12 21:26 - 2016-03-18 00:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-12 21:26 - 2016-03-18 00:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-12 21:26 - 2016-03-18 00:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-12 21:26 - 2016-03-18 00:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-12 21:26 - 2016-03-18 00:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-12 21:26 - 2016-03-18 00:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-12 21:26 - 2016-03-18 00:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-12 21:26 - 2016-03-18 00:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-04-12 21:26 - 2016-03-18 00:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-04-12 21:26 - 2016-03-18 00:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-04-12 21:26 - 2016-03-18 00:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-04-12 21:26 - 2016-03-18 00:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-04-12 21:26 - 2016-03-18 00:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-12 21:26 - 2016-03-18 00:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-04-12 21:26 - 2016-03-18 00:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-04-12 21:26 - 2016-03-18 00:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-04-12 21:26 - 2016-03-18 00:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-04-12 21:26 - 2016-03-18 00:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-04-12 21:26 - 2016-03-18 00:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-04-12 21:26 - 2016-03-18 00:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-04-12 21:26 - 2016-03-18 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-04-12 21:26 - 2016-03-18 00:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-04-12 21:26 - 2016-03-18 00:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-04-12 21:26 - 2016-03-18 00:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-04-12 21:26 - 2016-03-18 00:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-04-12 21:26 - 2016-03-18 00:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-04-12 21:26 - 2016-03-18 00:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-12 21:26 - 2016-03-18 00:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-12 21:26 - 2016-03-17 23:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-04-12 21:26 - 2016-03-17 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-04-12 21:26 - 2016-03-17 23:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-04-12 21:26 - 2016-03-17 23:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-12 21:26 - 2016-03-17 23:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-12 21:26 - 2016-03-17 23:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-12 21:26 - 2016-03-17 23:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-04-12 21:26 - 2016-03-17 23:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-12 21:26 - 2016-03-17 23:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-12 21:26 - 2016-03-17 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-12 21:26 - 2016-03-17 23:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-12 21:26 - 2016-03-17 23:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-12 21:26 - 2016-03-17 23:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-04-12 21:26 - 2016-03-17 23:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-04-12 21:26 - 2016-03-17 23:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-04-12 21:26 - 2016-03-17 23:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-04-12 21:26 - 2016-03-17 23:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-04-12 21:26 - 2016-03-17 23:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-12 21:26 - 2016-03-17 23:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-12 21:26 - 2016-03-17 23:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-12 21:26 - 2016-03-17 23:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-12 21:26 - 2016-03-17 20:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-04-12 21:26 - 2016-03-17 20:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-04-12 21:26 - 2016-03-17 20:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-04-12 21:26 - 2016-03-17 20:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-04-12 21:26 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-04-12 21:26 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-04-12 21:26 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-04-12 21:26 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-12 21:26 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-12 21:26 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-12 21:26 - 2016-03-11 20:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-12 21:26 - 2016-03-11 20:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-04-12 21:26 - 2016-03-06 20:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-12 21:26 - 2016-03-06 20:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-04-12 21:26 - 2016-03-06 20:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-12 21:26 - 2016-03-06 20:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-04-12 21:26 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-04-12 21:26 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-04-12 21:26 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2016-04-12 21:26 - 2016-02-02 20:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-04-12 21:26 - 2016-01-21 02:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-04-12 21:26 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-04-12 21:25 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-12 21:25 - 2016-03-31 02:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-12 21:25 - 2016-03-31 02:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-12 21:25 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-12 21:25 - 2016-03-31 02:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-12 21:25 - 2016-03-31 02:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-12 21:25 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-12 21:25 - 2016-03-31 02:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-12 21:25 - 2016-03-31 02:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-12 21:25 - 2016-03-31 02:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-12 21:25 - 2016-03-31 01:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-12 21:25 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-12 21:25 - 2016-03-31 01:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-04-12 21:25 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-12 21:25 - 2016-03-31 01:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-12 21:25 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-12 21:25 - 2016-03-31 01:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-04-12 21:25 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-04-12 21:25 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-12 21:25 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-11 16:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-11 16:07 - 2015-06-07 21:49 - 00000000 ____D C:\Steam
2016-05-11 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-11 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-11 15:59 - 2011-04-12 09:43 - 03608530 _____ C:\Windows\system32\perfh007.dat
2016-05-11 15:59 - 2011-04-12 09:43 - 01053368 _____ C:\Windows\system32\perfc007.dat
2016-05-11 15:59 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-11 15:58 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx
2016-05-11 15:53 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-11 15:53 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll
2016-05-11 15:53 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-11 15:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-11 15:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 00:57 - 2015-06-21 20:52 - 00004132 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-05-11 00:47 - 2016-03-23 20:03 - 00003908 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458756190
2016-05-11 00:46 - 2016-03-23 20:03 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-05-11 00:46 - 2016-03-23 20:03 - 00000948 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-05-11 00:46 - 2015-06-21 19:12 - 00001295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-11 00:46 - 2015-06-21 19:12 - 00001283 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-11 00:17 - 2016-03-23 20:03 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00465792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00287528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00166432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-05-11 00:17 - 2015-06-21 20:52 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz
2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc
2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-09 23:36 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-03 00:08 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx
2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics
2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-04-22 22:07 - 2015-06-22 20:27 - 00000080 _____ C:\Users\Liz\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2016-04-22 22:06 - 2015-06-22 20:26 - 00000000 ____D C:\Program Files\Rockstar Games
2016-04-22 22:06 - 2015-06-21 23:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-04-21 15:05 - 2010-11-21 05:27 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-18 21:03 - 2015-06-21 19:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Ajort
2016-04-17 22:46 - 2015-08-06 20:04 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Raptr
2016-04-14 20:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-04-13 20:06 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-13 00:16 - 2015-06-23 21:37 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-04-13 00:16 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
Einige Dateien in TEMP:
====================
C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe
C:\Users\Liz\AppData\Local\Temp\270.tmp.exe
C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe
C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe
C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe
C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe
C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe
C:\Users\Liz\AppData\Local\Temp\Cleanup.dll
C:\Users\Liz\AppData\Local\Temp\devcon64.exe
C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe
C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\Gw2.exe
C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe
C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Liz\AppData\Local\Temp\libeay32.dll
C:\Users\Liz\AppData\Local\Temp\msvcm80.dll
C:\Users\Liz\AppData\Local\Temp\msvcp80.dll
C:\Users\Liz\AppData\Local\Temp\msvcr120.dll
C:\Users\Liz\AppData\Local\Temp\msvcr80.dll
C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe
C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe
C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe
C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe
C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe
C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe
C:\Users\Liz\AppData\Local\Temp\sqlite3.dll
C:\Users\Liz\AppData\Local\Temp\tmp8075.exe
C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe
C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe
C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Liz\AppData\Local\Temp\ytb.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-05-10 19:17
==================== Ende von FRST.txt ============================
|
|
11.05.2016, 15:58
| #2 |
| | 2tes LogfileCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016
durchgeführt von Liz (2016-05-11 16:35:22)
Gestartet von C:\Users\Liz\Downloads
Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)
Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)
Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version: - Triumph Studios)
AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)
Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version: - Blue Byte)
Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version: - Blue Byte)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Avast Pro Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Borderlands (HKLM-x32\...\Steam App 8980) (Version: - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version: - 2K Australia)
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox Development Studio)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.)
Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version: - Double Fine Productions)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version: - Rising Star Games)
Dear Esther (HKLM-x32\...\Steam App 203810) (Version: - thechineseroom & Robert Briscoe)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version: - SQUARE ENIX)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.94 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
H1Z1 (HKLM-x32\...\Steam App 295110) (Version: - Daybreak Games)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version: - Telltale Games)
Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version: - )
King's Quest (HKLM-x32\...\Steam App 345390) (Version: - The Odd Gentlemen)
Layers of Fear (HKLM-x32\...\Steam App 391720) (Version: - Bloober Team SA)
Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version: - Almost Human Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version: - Animation Arts)
Magicka 2 (HKLM-x32\...\Steam App 238370) (Version: - Pieces Interactive)
Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version: - Forever Entertainment S. A.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version: - Rogue Factor)
MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version: - Airtight Games)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version: - Ndemic Creations)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version: - Abbey Games)
Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version: - Capcom)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version: - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden
Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version: - 8th Floor Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)
STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version: - Stoic)
The Detail (HKLM-x32\...\Steam App 319970) (Version: - Rival Games Ltd)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lab (HKLM\...\Steam App 450390) (Version: - Valve)
The Lost Crown (HKLM-x32\...\Steam App 291710) (Version: - Darkling Room)
The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version: - Telltale Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version: - Rebellion)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"
Task: {297F3776-0AD7-41BC-A2A9-96A8A70D21D5} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-24] (Microsoft Corporation)
Task: {3BF2E5AA-6852-44AB-84BE-C83F45B91553} - System32\Tasks\Wohegh Server => C:\Program Files (x86)\Wohegh\Woheghservertask.exe [2016-05-10] ()
Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()
Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"
Task: {710770D0-CB56-4B15-A68C-B1D8229D0946} - System32\Tasks\avast! Emergency Update => D:\Programme\AvastEmUpdate.exe [2016-05-11] (AVAST Software)
Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()
Task: {A3036338-26A9-42D0-AB49-2FAFAB1E8DB1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)
Task: {B79AE05D-C3EB-495D-B597-570412341958} - System32\Tasks\SafeZone scheduled Autoupdate 1458756190 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-04-15] (Avast Software)
Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"
Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)
Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)
Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-09] (Adobe Systems Incorporated)
Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)
Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll
2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
2016-05-11 00:17 - 2016-05-11 00:17 - 00123344 _____ () D:\Programme\log.dll
2016-05-11 00:17 - 2016-05-11 00:17 - 00135816 _____ () D:\Programme\JsonRpcServer.dll
2016-05-11 14:04 - 2016-05-11 14:04 - 02902528 _____ () D:\Programme\defs\16051100\algo.dll
2016-05-11 00:17 - 2016-05-11 00:17 - 00479680 _____ () D:\Programme\ffl2.dll
2015-12-07 00:04 - 2015-12-07 00:04 - 40539648 _____ () D:\Programme\libcef.dll
2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll
2015-06-21 19:12 - 2016-05-11 15:53 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll
2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll
2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll
2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-04-30 00:56 - 2016-04-28 01:25 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libglesv2.dll
2016-04-30 00:56 - 2016-04-28 01:25 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup
MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe
FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{447A8060-8D55-42D7-9D90-1522C492AE1B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{98AFBDB6-0491-4940-9D8C-8E5DCAA1295D}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{C2B8F7E9-64E9-415E-9D07-28F580DF4430}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
==================== Wiederherstellungspunkte =========================
19-04-2016 20:12:27 Windows Update
23-04-2016 11:34:07 Windows Update
27-04-2016 18:39:26 Windows Update
09-05-2016 19:49:22 Windows Update
09-05-2016 23:36:04 Windows Update
11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4
11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0
11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/11/2016 03:53:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/11/2016 02:03:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/11/2016 01:23:54 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/11/2016 01:23:54 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Systemfehler:
=============
Error: (05/11/2016 03:55:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/11/2016 03:53:10 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/11/2016 02:05:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/11/2016 02:03:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/11/2016 01:19:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/11/2016 01:17:00 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 22%
Installierter physikalischer RAM: 16326.84 MB
Verfügbarer physikalischer RAM: 12651.85 MB
Summe virtueller Speicher: 32651.88 MB
Verfügbarer virtueller Speicher: 28871.87 MB
==================== Laufwerke ================================
Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:276.28 GB) NTFS
Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.22 GB) NTFS
Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.98 GB) NTFS
Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS
Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
==================== Ende von Addition.txt ============================
|
|
11.05.2016, 16:30
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | MPC Cleaner lässt sich nicht deinstallieren Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog
__________________Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel. Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!
__________________ |
|
11.05.2016, 16:47
| #4 |
| | gesagt getan. ist deinstalliert. |
|
11.05.2016, 17:01
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | MPC Cleaner lässt sich nicht deinstallieren Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
11.05.2016, 17:30
| #6 |
| | mbar-logCode:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.05.11.04
rootkit: v2016.05.06.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18282
Liz :: LIZ-PC [administrator]
11.05.2016 18:25:28
mbar-log-2016-05-11 (18-25-28).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 289158
Time elapsed: 3 minute(s), 56 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
12.05.2016, 07:23
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | MPC Cleaner lässt sich nicht deinstallieren Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
15.05.2016, 17:34
| #8 |
| | MPC Cleaner lässt sich nicht deinstallierenCode:
ATTFilter # AdwCleaner v5.116 - Bericht erstellt am 15/05/2016 um 18:26:18
# Aktualisiert am 09/05/2016 von Xplode
# Datenbank : 2016-05-15.2 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)
# Benutzername : Liz - LIZ-PC
# Gestartet von : C:\Users\Liz\Desktop\AdwCleaner_5.116.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
[-] Dienst gelöscht : MPCProtectService
[-] Dienst gelöscht : MPCKpt
[-] Dienst gelöscht : Woheghserverservice
***** [ Ordner ] *****
[-] Ordner gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
[-] Ordner gelöscht : C:\Program Files (x86)\MPC Cleaner
[-] Ordner gelöscht : C:\Program Files (x86)\hohobnd
[-] Ordner gelöscht : C:\Program Files (x86)\Wohegh
***** [ Dateien ] *****
[-] Datei gelöscht : C:\Users\Public\Desktop\MPC Cleaner.lnk
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
[-] Geplante Aufgabe gelöscht : Wohegh Server
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MPC
[-] Schlüssel gelöscht : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mpc.am
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\search.mpc.am
***** [ Internetbrowser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Einstellungen zurückgesetzt : C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [3479 Bytes] - [11/05/2016 00:46:17]
C:\AdwCleaner\AdwCleaner[C2].txt - [2023 Bytes] - [11/05/2016 00:55:40]
C:\AdwCleaner\AdwCleaner[C3].txt - [1701 Bytes] - [11/05/2016 01:16:13]
C:\AdwCleaner\AdwCleaner[C4].txt - [2159 Bytes] - [15/05/2016 18:26:18]
C:\AdwCleaner\AdwCleaner[S1].txt - [4239 Bytes] - [11/05/2016 00:44:16]
C:\AdwCleaner\AdwCleaner[S2].txt - [1866 Bytes] - [11/05/2016 00:52:23]
C:\AdwCleaner\AdwCleaner[S3].txt - [1485 Bytes] - [11/05/2016 01:15:13]
C:\AdwCleaner\AdwCleaner[S4].txt - [2251 Bytes] - [15/05/2016 18:25:59]
########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [2524 Bytes] ##########
JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Professional x64
Ran by Liz (Administrator) on 15.05.2016 at 18:27:47,26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 32
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\198YJ4X0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XX0BRED (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WPXJEOI (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ALPAUJ47 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9MUZRC0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIJAGAFX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0EYS63M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LR8K4TCS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1NDXTSA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0LZ5NY7 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1VSQO51 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YA689WP6 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\198YJ4X0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XX0BRED (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WPXJEOI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ALPAUJ47 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9MUZRC0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIJAGAFX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0EYS63M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LR8K4TCS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1NDXTSA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0LZ5NY7 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1VSQO51 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YA689WP6 (Temporary Internet Files Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.05.2016 at 18:28:27,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
16.05.2016, 06:43
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | MPC Cleaner lässt sich nicht deinstallieren Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
16.05.2016, 09:24
| #10 |
| | MPC Cleaner lässt sich nicht deinstallierenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
durchgeführt von Liz (Administrator) auf LIZ-PC (16-05-2016 10:20:28)
Gestartet von C:\Users\Liz\Downloads
Geladene Profile: Liz (Verfügbare Profile: Liz)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)
HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe
HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (Google Search) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (CyberGhost VPN - Free Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]
CHR Extension: (Gmail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-15]
CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-15]
CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-15]
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-15]
CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-15]
CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]
CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-15]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-07-02] (ASUSTeK Computer Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
S3 MSICDSetup; \??\G:\CDriver64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-15 18:28 - 2016-05-15 18:28 - 00005769 _____ C:\Users\Liz\Desktop\JRT.txt
2016-05-15 18:27 - 2016-05-15 18:27 - 00002610 _____ C:\Users\Liz\Desktop\AdwCleaner[C4].txt
2016-05-15 18:27 - 2014-07-02 11:41 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2016-05-15 18:19 - 2016-05-15 18:19 - 01610816 _____ (Malwarebytes) C:\Users\Liz\Downloads\JRT.exe
2016-05-15 18:17 - 2016-05-15 18:17 - 03640384 _____ C:\Users\Liz\Desktop\AdwCleaner_5.116.exe
2016-05-11 18:12 - 2016-05-12 19:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-11 18:12 - 2016-05-11 18:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-11 18:12 - 2016-05-11 18:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-11 18:10 - 2016-05-11 18:29 - 00000000 ____D C:\Users\Liz\Desktop\mbar
2016-05-11 18:10 - 2016-05-11 18:25 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-11 18:06 - 2016-05-11 18:06 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Liz\Downloads\mbar-1.09.3.1001.exe
2016-05-11 17:01 - 2016-05-11 17:01 - 00205152 _____ C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren.html
2016-05-11 17:01 - 2016-05-11 17:01 - 00000000 ____D C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren_files
2016-05-11 16:24 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 16:24 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 16:24 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 16:24 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-11 16:24 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 16:24 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-11 16:24 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-11 16:24 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-11 16:24 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-11 16:24 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-11 16:24 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-11 16:24 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 16:24 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 16:24 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-11 16:24 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 16:24 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-11 16:24 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-11 16:24 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-11 16:24 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-11 16:24 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-11 16:24 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-11 16:24 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 16:24 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-11 16:24 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 16:24 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-11 16:24 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-11 16:24 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-11 16:24 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 16:24 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 16:24 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 16:24 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-11 16:24 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-11 16:24 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 16:24 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-11 16:24 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 16:24 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-11 16:24 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-11 16:24 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-11 16:24 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-11 16:24 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-11 16:24 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-11 16:24 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 16:24 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-11 16:24 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 16:24 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 16:24 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 16:24 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 16:24 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-11 16:24 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 16:24 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 16:24 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 16:24 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 16:24 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 16:24 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 16:24 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 16:24 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 16:24 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 16:24 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 16:24 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 16:24 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 16:24 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 16:24 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 16:24 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 16:24 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 16:24 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 16:24 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 16:23 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 16:23 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 16:23 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 16:23 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 16:23 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 16:23 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 16:23 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 16:23 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 16:23 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 16:23 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 16:23 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 16:23 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 16:23 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 16:23 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 16:23 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 16:23 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 16:23 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 16:23 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 16:23 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 16:23 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 16:23 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 16:23 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-11 16:12 - 2016-05-11 16:35 - 00067083 _____ C:\Users\Liz\Downloads\Addition.txt
2016-05-11 16:11 - 2016-05-16 10:20 - 00013764 _____ C:\Users\Liz\Downloads\FRST.txt
2016-05-11 16:11 - 2016-05-16 10:20 - 00000000 ____D C:\FRST
2016-05-11 16:11 - 2016-05-11 16:11 - 02381312 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe
2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp
2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe
2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}
2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe
2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-05-11 00:44 - 2016-05-15 18:26 - 00000000 ____D C:\AdwCleaner
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat
2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe
2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe
2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla
2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss
2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk
2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow
2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf
2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf
2016-04-22 22:35 - 2016-04-25 11:41 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify
2016-04-22 22:35 - 2016-04-22 22:35 - 00001797 _____ C:\Users\Liz\Desktop\Spotify.lnk
2016-04-22 22:35 - 2016-04-22 22:35 - 00001783 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-04-22 22:34 - 2016-04-25 11:46 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify
2016-04-22 22:34 - 2016-04-22 22:34 - 00350936 _____ (Spotify Ltd) C:\Users\Liz\Downloads\SpotifySetup.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-16 10:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-16 10:19 - 2011-04-12 09:43 - 03710324 _____ C:\Windows\system32\perfh007.dat
2016-05-16 10:19 - 2011-04-12 09:43 - 01084994 _____ C:\Windows\system32\perfc007.dat
2016-05-16 10:19 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-16 10:15 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-16 10:15 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll
2016-05-16 10:15 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-16 10:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-15 23:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-15 23:04 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-15 23:04 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-15 19:52 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx
2016-05-15 19:22 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx
2016-05-15 18:48 - 2015-06-07 21:49 - 00000000 ____D C:\Steam
2016-05-15 18:20 - 2015-06-21 19:12 - 00002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-15 18:20 - 2015-06-21 19:12 - 00002180 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-15 18:05 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-12 22:59 - 2015-06-21 19:59 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-12 22:59 - 2015-06-21 19:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-12 22:50 - 2015-07-19 00:27 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-12 22:50 - 2015-07-19 00:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-12 22:50 - 2015-07-19 00:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-12 19:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-05-12 19:15 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-12 19:14 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 22:47 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 22:44 - 2015-06-23 21:37 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-11 17:44 - 2015-06-21 20:52 - 00000000 ____D C:\Program Files\avast software
2016-05-11 17:44 - 2015-06-21 20:21 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz
2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc
2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics
2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-04-22 22:07 - 2015-06-22 20:27 - 00000080 _____ C:\Users\Liz\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2016-04-22 22:06 - 2015-06-22 20:26 - 00000000 ____D C:\Program Files\Rockstar Games
2016-04-22 22:06 - 2015-06-21 23:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-04-21 15:05 - 2010-11-21 05:27 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-18 21:03 - 2015-06-21 19:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Ajort
2016-04-17 22:46 - 2015-08-06 20:04 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Raptr
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
Einige Dateien in TEMP:
====================
C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe
C:\Users\Liz\AppData\Local\Temp\270.tmp.exe
C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe
C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe
C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe
C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe
C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe
C:\Users\Liz\AppData\Local\Temp\Cleanup.dll
C:\Users\Liz\AppData\Local\Temp\devcon64.exe
C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe
C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\Gw2.exe
C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe
C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Liz\AppData\Local\Temp\libeay32.dll
C:\Users\Liz\AppData\Local\Temp\msvcm80.dll
C:\Users\Liz\AppData\Local\Temp\msvcp80.dll
C:\Users\Liz\AppData\Local\Temp\msvcr120.dll
C:\Users\Liz\AppData\Local\Temp\msvcr80.dll
C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe
C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe
C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe
C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe
C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe
C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe
C:\Users\Liz\AppData\Local\Temp\sqlite3.dll
C:\Users\Liz\AppData\Local\Temp\tmp8075.exe
C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe
C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe
C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Liz\AppData\Local\Temp\ytb.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-05-10 19:17
==================== Ende von FRST.txt ============================
|
|
16.05.2016, 09:25
| #11 |
| | MPC Cleaner lässt sich nicht deinstallierenCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016
durchgeführt von Liz (2016-05-16 10:20:39)
Gestartet von C:\Users\Liz\Downloads
Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)
Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)
Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version: - Triumph Studios)
AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)
Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version: - Blue Byte)
Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version: - Blue Byte)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Borderlands (HKLM-x32\...\Steam App 8980) (Version: - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version: - 2K Australia)
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox Development Studio)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.)
Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version: - Double Fine Productions)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version: - Rising Star Games)
Dear Esther (HKLM-x32\...\Steam App 203810) (Version: - thechineseroom & Robert Briscoe)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version: - SQUARE ENIX)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
H1Z1 (HKLM-x32\...\Steam App 295110) (Version: - Daybreak Games)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version: - Telltale Games)
Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version: - )
King's Quest (HKLM-x32\...\Steam App 345390) (Version: - The Odd Gentlemen)
Layers of Fear (HKLM-x32\...\Steam App 391720) (Version: - Bloober Team SA)
Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version: - Almost Human Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version: - Animation Arts)
Magicka 2 (HKLM-x32\...\Steam App 238370) (Version: - Pieces Interactive)
Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version: - Forever Entertainment S. A.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version: - Rogue Factor)
MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version: - Airtight Games)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version: - Ndemic Creations)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version: - Abbey Games)
Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version: - Capcom)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version: - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version: - 8th Floor Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)
STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version: - Stoic)
The Detail (HKLM-x32\...\Steam App 319970) (Version: - Rival Games Ltd)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lab (HKLM\...\Steam App 450390) (Version: - Valve)
The Lost Crown (HKLM-x32\...\Steam App 291710) (Version: - Darkling Room)
The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version: - Telltale Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version: - Rebellion)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"
Task: {297F3776-0AD7-41BC-A2A9-96A8A70D21D5} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-24] (Microsoft Corporation)
Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()
Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"
Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()
Task: {AB2C19BA-8B48-412B-B768-AE8F0B5AE4A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)
Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"
Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)
Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)
Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-12] (Adobe Systems Incorporated)
Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)
Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll
2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
2015-06-21 19:12 - 2016-05-16 10:15 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll
2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll
2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2015-06-21 19:37 - 2014-07-17 11:42 - 04095488 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll
2015-06-21 19:37 - 2014-02-25 16:53 - 01138176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00827392 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll
2015-06-21 19:37 - 2014-07-02 11:41 - 00053248 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Exeio.dll
2015-06-21 19:37 - 2014-07-02 11:41 - 00278528 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Vender.dll
2015-06-21 19:30 - 2014-04-25 00:03 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMLib.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\IccHelper.dll
2015-06-21 19:38 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll
2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll
2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2016-05-15 18:20 - 2016-05-11 13:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll
2016-05-15 18:20 - 2016-05-11 13:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll
2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup
MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe
FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{38838EB8-7122-43A6-A0CC-576BD4CA0C27}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2AB4B2BC-A047-4EA7-93D7-5D7BB096D424}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{4D5FED67-5627-4EBB-8DE1-602C286D6EDB}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
==================== Wiederherstellungspunkte =========================
09-05-2016 19:49:22 Windows Update
09-05-2016 23:36:04 Windows Update
11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4
11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0
11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95
11-05-2016 18:16:33 Malwarebytes Anti-Rootkit Restore Point
11-05-2016 18:24:04 Malwarebytes Anti-Rootkit Restore Point
11-05-2016 22:43:49 Windows Update
15-05-2016 18:05:16 Windows Update
15-05-2016 18:27:47 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/16/2016 10:15:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/15/2016 06:26:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/15/2016 06:06:35 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/15/2016 06:06:35 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Systemfehler:
=============
Error: (05/16/2016 10:15:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/15/2016 06:27:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2016 06:26:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Integrated Clock Controller Service - Intel(R) ICCS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 12%
Installierter physikalischer RAM: 16326.84 MB
Verfügbarer physikalischer RAM: 14205.28 MB
Summe virtueller Speicher: 32651.87 MB
Verfügbarer virtueller Speicher: 30338.54 MB
==================== Laufwerke ================================
Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:275.75 GB) NTFS
Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.78 GB) NTFS
Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.98 GB) NTFS
Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS
Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
==================== Ende von Addition.txt ============================
|
|
22.05.2016, 21:06
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | MPC Cleaner lässt sich nicht deinstallieren sry dein thread ist untergegangen. Nach einer fast Woche sind die Logs zu alt, mach bitte neue FRST-Logs
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.05.2016, 20:13
| #13 |
| | MPC Cleaner lässt sich nicht deinstallierenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:23-05-2016
durchgeführt von Liz (Administrator) auf LIZ-PC (23-05-2016 21:09:14)
Gestartet von C:\Users\Liz\Downloads\FRST-OlderVersion
Geladene Profile: Liz (Verfügbare Profile: Liz)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)
HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe
HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (Google Search) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (CyberGhost VPN - Free Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]
CHR Extension: (Gmail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-15]
CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-15]
CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-15]
CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-15]
CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-15]
CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]
CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-15]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)
S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S3 MSICDSetup; \??\G:\CDriver64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-23 21:07 - 2016-05-23 21:09 - 00000000 ____D C:\Users\Liz\Downloads\FRST-OlderVersion
2016-05-15 18:28 - 2016-05-15 18:28 - 00005769 _____ C:\Users\Liz\Desktop\JRT.txt
2016-05-15 18:27 - 2016-05-15 18:27 - 00002610 _____ C:\Users\Liz\Desktop\AdwCleaner[C4].txt
2016-05-15 18:19 - 2016-05-15 18:19 - 01610816 _____ (Malwarebytes) C:\Users\Liz\Downloads\JRT.exe
2016-05-15 18:17 - 2016-05-15 18:17 - 03640384 _____ C:\Users\Liz\Desktop\AdwCleaner_5.116.exe
2016-05-11 18:12 - 2016-05-12 19:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-11 18:12 - 2016-05-11 18:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-11 18:12 - 2016-05-11 18:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-11 18:10 - 2016-05-11 18:29 - 00000000 ____D C:\Users\Liz\Desktop\mbar
2016-05-11 18:10 - 2016-05-11 18:25 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-11 18:06 - 2016-05-11 18:06 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Liz\Downloads\mbar-1.09.3.1001.exe
2016-05-11 17:01 - 2016-05-11 17:01 - 00205152 _____ C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren.html
2016-05-11 17:01 - 2016-05-11 17:01 - 00000000 ____D C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren_files
2016-05-11 16:24 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 16:24 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 16:24 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 16:24 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-11 16:24 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 16:24 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-11 16:24 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-11 16:24 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-11 16:24 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-11 16:24 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-11 16:24 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-11 16:24 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-11 16:24 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-11 16:24 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 16:24 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 16:24 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-11 16:24 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 16:24 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-11 16:24 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-11 16:24 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-11 16:24 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-11 16:24 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-11 16:24 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-11 16:24 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 16:24 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-11 16:24 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-11 16:24 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 16:24 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-11 16:24 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-11 16:24 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-11 16:24 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 16:24 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 16:24 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 16:24 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-11 16:24 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-11 16:24 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 16:24 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-11 16:24 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-11 16:24 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 16:24 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-11 16:24 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-11 16:24 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-11 16:24 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-11 16:24 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-11 16:24 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-11 16:24 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 16:24 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-11 16:24 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 16:24 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 16:24 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 16:24 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 16:24 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-11 16:24 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 16:24 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 16:24 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 16:24 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 16:24 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 16:24 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 16:24 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 16:24 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 16:24 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 16:24 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 16:24 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 16:24 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 16:24 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 16:24 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 16:24 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 16:24 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 16:24 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 16:24 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 16:23 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 16:23 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 16:23 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 16:23 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 16:23 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 16:23 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 16:23 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 16:23 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 16:23 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 16:23 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 16:23 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 16:23 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 16:23 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 16:23 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 16:23 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 16:23 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 16:23 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 16:23 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 16:23 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 16:23 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 16:23 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 16:23 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 16:23 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 16:23 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 16:23 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-11 16:12 - 2016-05-16 10:20 - 00067852 _____ C:\Users\Liz\Downloads\Addition.txt
2016-05-11 16:11 - 2016-05-23 21:09 - 00000000 ____D C:\FRST
2016-05-11 16:11 - 2016-05-23 21:07 - 02383360 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe
2016-05-11 16:11 - 2016-05-16 10:20 - 00052825 _____ C:\Users\Liz\Downloads\FRST.txt
2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp
2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe
2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}
2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe
2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-05-11 00:44 - 2016-05-15 18:26 - 00000000 ____D C:\AdwCleaner
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr
2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat
2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe
2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe
2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla
2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss
2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk
2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk
2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow
2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf
2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf
2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-23 20:59 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-23 20:59 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-23 20:56 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx
2016-05-23 20:54 - 2011-04-12 09:43 - 03753950 _____ C:\Windows\system32\perfh007.dat
2016-05-23 20:54 - 2011-04-12 09:43 - 01098548 _____ C:\Windows\system32\perfc007.dat
2016-05-23 20:54 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-23 20:51 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll
2016-05-23 20:50 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-23 20:50 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-23 20:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-23 00:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-23 00:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-22 21:55 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx
2016-05-22 19:10 - 2015-06-21 19:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-16 23:45 - 2015-06-07 21:49 - 00000000 ____D C:\Steam
2016-05-15 18:20 - 2015-06-21 19:12 - 00002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-15 18:20 - 2015-06-21 19:12 - 00002180 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-15 18:05 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-12 22:59 - 2015-06-21 19:59 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-12 22:50 - 2015-07-19 00:27 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-12 22:50 - 2015-07-19 00:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-12 22:50 - 2015-07-19 00:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-12 19:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-05-12 19:15 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-12 19:14 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 22:47 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 22:44 - 2015-06-23 21:37 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-11 17:44 - 2015-06-21 20:52 - 00000000 ____D C:\Program Files\avast software
2016-05-11 17:44 - 2015-06-21 20:21 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz
2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc
2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics
2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-04-25 11:46 - 2016-04-22 22:34 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify
2016-04-25 11:41 - 2016-04-22 22:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
Einige Dateien in TEMP:
====================
C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe
C:\Users\Liz\AppData\Local\Temp\270.tmp.exe
C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe
C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe
C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe
C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe
C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe
C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe
C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe
C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe
C:\Users\Liz\AppData\Local\Temp\Cleanup.dll
C:\Users\Liz\AppData\Local\Temp\devcon64.exe
C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe
C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe
C:\Users\Liz\AppData\Local\Temp\Gw2.exe
C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe
C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Liz\AppData\Local\Temp\libeay32.dll
C:\Users\Liz\AppData\Local\Temp\msvcm80.dll
C:\Users\Liz\AppData\Local\Temp\msvcp80.dll
C:\Users\Liz\AppData\Local\Temp\msvcr120.dll
C:\Users\Liz\AppData\Local\Temp\msvcr80.dll
C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe
C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe
C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe
C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe
C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe
C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe
C:\Users\Liz\AppData\Local\Temp\sqlite3.dll
C:\Users\Liz\AppData\Local\Temp\tmp8075.exe
C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe
C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe
C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Liz\AppData\Local\Temp\ytb.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-05-10 19:17
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:23-05-2016
durchgeführt von Liz (2016-05-23 21:09:35)
Gestartet von C:\Users\Liz\Downloads\FRST-OlderVersion
Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)
Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)
Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version: - Triumph Studios)
AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)
Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version: - Blue Byte)
Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version: - Blue Byte)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Borderlands (HKLM-x32\...\Steam App 8980) (Version: - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version: - 2K Australia)
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox Development Studio)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.)
Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version: - Double Fine Productions)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version: - Rising Star Games)
Dear Esther (HKLM-x32\...\Steam App 203810) (Version: - thechineseroom & Robert Briscoe)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version: - SQUARE ENIX)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
H1Z1 (HKLM-x32\...\Steam App 295110) (Version: - Daybreak Games)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version: - Telltale Games)
Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version: - )
King's Quest (HKLM-x32\...\Steam App 345390) (Version: - The Odd Gentlemen)
Layers of Fear (HKLM-x32\...\Steam App 391720) (Version: - Bloober Team SA)
Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version: - Almost Human Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version: - Animation Arts)
Magicka 2 (HKLM-x32\...\Steam App 238370) (Version: - Pieces Interactive)
Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version: - Forever Entertainment S. A.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version: - Rogue Factor)
MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version: - Airtight Games)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version: - Ndemic Creations)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version: - Abbey Games)
Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version: - Capcom)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version: - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version: - 8th Floor Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)
STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version: - Stoic)
The Detail (HKLM-x32\...\Steam App 319970) (Version: - Rival Games Ltd)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lab (HKLM\...\Steam App 450390) (Version: - Valve)
The Lost Crown (HKLM-x32\...\Steam App 291710) (Version: - Darkling Room)
The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version: - Telltale Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version: - Rebellion)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"
Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()
Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"
Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()
Task: {AB2C19BA-8B48-412B-B768-AE8F0B5AE4A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)
Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"
Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)
Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)
Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-12] (Adobe Systems Incorporated)
Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)
Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll
2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
2015-06-21 19:12 - 2016-05-23 20:50 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll
2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll
2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2015-06-21 19:37 - 2014-07-17 11:42 - 04095488 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll
2015-06-21 19:37 - 2014-02-25 16:53 - 01138176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00827392 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll
2015-06-21 19:37 - 2014-07-02 11:41 - 00053248 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Exeio.dll
2015-06-21 19:37 - 2014-07-02 11:41 - 00278528 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Vender.dll
2015-06-21 19:30 - 2014-04-25 00:03 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMLib.dll
2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\IccHelper.dll
2015-06-21 19:38 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll
2015-06-21 19:37 - 2014-04-25 06:03 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll
2015-06-21 19:38 - 2010-09-23 11:51 - 00114688 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\AsIdxParser.dll
2015-06-21 19:38 - 2010-02-25 14:01 - 00139264 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\Aszip.dll
2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll
2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-05-15 18:20 - 2016-05-11 13:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll
2016-05-15 18:20 - 2016-05-11 13:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll
2016-05-15 18:20 - 2016-05-11 13:48 - 17565848 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup
MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe
FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe
FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe
FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe
FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe
FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe
FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe
FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe
FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe
FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe
FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe
FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe
FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe
FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe
FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe
FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe
FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe
FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe
FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe
FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe
FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe
FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe
FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe
FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe
FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe
FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe
FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe
FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe
FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe
FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe
FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe
FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{38838EB8-7122-43A6-A0CC-576BD4CA0C27}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{5446A5C8-1C5E-4DFD-9C39-11283D04E384}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{8E952004-EE05-4CB2-B77A-89ECD5CD6012}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
==================== Wiederherstellungspunkte =========================
09-05-2016 19:49:22 Windows Update
09-05-2016 23:36:04 Windows Update
11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4
11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0
11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95
11-05-2016 18:16:33 Malwarebytes Anti-Rootkit Restore Point
11-05-2016 18:24:04 Malwarebytes Anti-Rootkit Restore Point
11-05-2016 22:43:49 Windows Update
15-05-2016 18:05:16 Windows Update
15-05-2016 18:27:47 JRT Pre-Junkware Removal
22-05-2016 19:01:38 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/23/2016 08:50:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/22/2016 06:57:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/17/2016 10:05:36 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/17/2016 10:05:36 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Systemfehler:
=============
Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CyberGhost 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost 5 Client Service erreicht.
Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CyberGhost 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost 5 Client Service erreicht.
Error: (05/17/2016 10:01:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
Error: (05/16/2016 09:10:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/16/2016 09:10:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (05/16/2016 10:15:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
RzFilter
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 13%
Installierter physikalischer RAM: 16326.84 MB
Verfügbarer physikalischer RAM: 14175.73 MB
Summe virtueller Speicher: 32651.87 MB
Verfügbarer virtueller Speicher: 30290.02 MB
==================== Laufwerke ================================
Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:274.98 GB) NTFS
Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.78 GB) NTFS
Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.95 GB) NTFS
Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS
Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
==================== Ende von Addition.txt ============================
|
|
23.05.2016, 22:05
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | MPC Cleaner lässt sich nicht deinstallieren FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
C:\Users\Liz\AppData\Roaming\Ajort
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.05.2016, 20:01
| #15 |
| | MPC Cleaner lässt sich nicht deinstallierenCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:24-05-2016 01
durchgeführt von Liz (2016-05-24 20:55:44) Run:1
Gestartet von C:\Users\Liz\Downloads
Geladene Profile: Liz (Verfügbare Profile: Liz)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
C:\Users\Liz\AppData\Roaming\Ajort
emptytemp:
*****************
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\Aj-DriverV2 => Wert erfolgreich entfernt
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden.
"C:\Users\Liz\AppData\Roaming\Ajort" => nicht gefunden.
EmptyTemp: => 4.3 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 20:55:48 ====
|
|
| Themen zu MPC Cleaner lässt sich nicht deinstallieren |
| .dll, antivirus, avast, browser, computer, defender, desktop, dnsapi.dll, entfernen, esgscanner.sys, explorer, flash player, google, helper, installation, internet, mpc cleaner, prozesse, realtek, registry, revo uninstaller, security, services.exe, software, svchost.exe, temp, usb, windows, wlan |
Linear-Darstellung
