Windows 10: Weiterleitung zu Werbungs- oder Achtung-Virus Websiten in Chrome

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-08-2016 01
durchgeführt von Lucio (Administrator) auf DESKTOP-U75B0H9 (13-08-2016 15:08:52)
Gestartet von C:\Users\Lucio\Downloads
Geladene Profile: Lucio (Verfügbare Profile: Lucio)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIPLE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIPLE.EXE
(Google, Inc) C:\Users\Lucio\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe
(Samsung Electronics.) F:\Samsung\Samsung Magician\Samsung Magician.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => F:\iTunes\iTunesHelper.exe [176952 2016-06-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2852128 2016-08-03] (Valve Corporation)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [Spotify Web Helper] => C:\Users\Lucio\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1555056 2016-08-13] (Spotify Ltd)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIPLE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIPLE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [Google Update] => C:\Users\Lucio\AppData\Local\Google\Update\GoogleUpdate.exe [154440 2016-05-01] (Google Inc.)
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Run: [Google Photos Backup] => C:\Users\Lucio\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-02-06]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> F:\Gigabite\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-07-22]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{81784f94-b899-4ee1-823d-a7fd575981b2}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> F:\Java\bin\ssv.dll [2016-02-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> F:\Java\bin\jp2ssv.dll [2016-02-16] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lucio\AppData\Roaming\Mozilla\Firefox\Profiles\raqRcTjP.default
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> F:\Java\bin\dtplugin\npDeployJava1.dll [2016-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> F:\Java\bin\plugin2\npjp2.dll [2016-02-16] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-07-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-07-11] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2714618137-582193082-3059342985-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2714618137-582193082-3059342985-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Extension: Avira Browser Safety - C:\Users\Lucio\AppData\Roaming\Mozilla\Firefox\Profiles\raqRcTjP.default\Extensions\abs@avira.com [2016-02-06]
FF Extension: Avira Browser Safety - C:\Users\Lucio\AppData\Roaming\Mozilla\Firefox\Profiles\raqRcTjP.default\Extensions\abs@avira.com.xpi [2016-02-06]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "","hxxp://battlelog.battlefield.com/bf3","hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-05]
CHR Extension: (Google Docs) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-05]
CHR Extension: (Google Drive) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-05]
CHR Extension: (Earth View from Google Earth) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhloflhklmhfpedakmangadcdofhnnoh [2016-04-22]
CHR Extension: (YouTube) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-05]
CHR Extension: (Google-Suche) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-05]
CHR Extension: (Block site) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2016-05-10]
CHR Extension: (Google Tabellen) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-05]
CHR Extension: (Google Docs Offline) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-07-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-08-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Google Mail) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-05]
CHR Extension: (Chrome Media Router) - C:\Users\Lucio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-13]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [245544 2016-04-10] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-04-15] (Rivet Networks)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3519984 2016-01-27] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-06-20] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1309936 2016-07-17] (Overwolf LTD)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [135800 2016-03-23] (Rivet Networks, LLC.)
R3 KillerEth; C:\Windows\System32\drivers\e2xw10x64.sys [162456 2016-02-12] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [204032 2016-01-19] (Intel Corporation)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-13 15:08 - 2016-08-13 15:09 - 00014781 _____ C:\Users\Lucio\Downloads\FRST.txt
2016-08-13 15:08 - 2016-08-13 15:08 - 02393600 _____ (Farbar) C:\Users\Lucio\Downloads\FRST64.exe
2016-08-13 15:08 - 2016-08-13 15:08 - 00000000 ____D C:\FRST
2016-08-13 14:50 - 2016-08-13 14:50 - 00000000 ___HD C:\OneDriveTemp
2016-08-13 12:24 - 2016-08-13 12:25 - 77404656 _____ (The GIMP Team ) C:\Users\Lucio\Downloads\gimp-2.8.18-setup.exe
2016-08-12 19:38 - 2016-08-12 19:38 - 00000000 ___HD C:\$WINDOWS.~BT
2016-08-12 19:06 - 2016-08-12 19:06 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-12 19:06 - 2016-07-11 00:37 - 00127424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-08-12 19:06 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-08-12 19:06 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-08-12 19:06 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-08-12 19:06 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-07-31 23:03 - 2016-07-11 04:34 - 01887800 _____ (NVIDIA Corporation) C:\Windows\system32\NvCamera64.dll
2016-07-31 23:03 - 2016-07-11 04:34 - 01595840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvCamera32.dll
2016-07-31 23:02 - 2016-07-15 20:15 - 01579976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-07-31 23:02 - 2016-07-15 20:15 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 39977920 _____ C:\Windows\system32\nvcompiler.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 35117112 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 31680568 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 25442240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 17463992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 10700592 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 10656296 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 10243600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 09028360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 08742360 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 08622576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 02868160 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 02497984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 01939000 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436881.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436881.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00999872 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00930360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00909248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00852024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00802816 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00801792 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00694488 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00644184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00642440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00612064 _____ C:\Windows\system32\nvmcumd.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00583920 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00563856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00462904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00444472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00413488 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00393152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00383936 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00348216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00345800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00177952 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00155952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00153232 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-07-31 23:02 - 2016-07-11 04:34 - 00131584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-07-22 21:57 - 2016-07-22 21:59 - 00000000 ____D C:\ProgramData\Killer
2016-07-22 21:57 - 2016-07-22 21:57 - 00002801 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-07-22 21:57 - 2016-07-22 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
2016-07-22 21:57 - 2016-07-22 21:57 - 00000000 ____D C:\Program Files\Killer Networking
2016-07-21 21:12 - 2016-07-21 21:12 - 00000000 ____D C:\Users\Lucio\AppData\LocalLow\Sony Online Entertainment
2016-07-21 21:11 - 2016-07-21 21:11 - 00003806 _____ C:\Windows\System32\Tasks\Overwolf Updater Task
2016-07-21 21:11 - 2016-07-21 21:11 - 00001150 _____ C:\Users\Public\Desktop\Overwolf.lnk
2016-07-21 21:11 - 2016-07-21 21:11 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2016-07-21 21:10 - 2016-07-21 21:11 - 00000002 _____ C:\END
2016-07-21 21:10 - 2016-07-21 21:11 - 00000000 ____D C:\ProgramData\Overwolf
2016-07-21 21:10 - 2016-07-21 21:11 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-07-17 23:47 - 2016-08-13 12:09 - 00001537 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-07-17 23:47 - 2016-07-17 23:47 - 00000000 ____D C:\Riot Games
2016-07-17 23:47 - 2016-07-17 23:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-13 14:58 - 2016-02-05 23:37 - 00001150 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-13 14:51 - 2016-04-10 19:51 - 00000951 _____ C:\Windows\Tasks\EPSON XP-630 Series Update {D819BCEF-F780-4F91-8DD4-7EA5DC23E188}.job
2016-08-13 14:51 - 2016-04-10 19:51 - 00000951 _____ C:\Windows\Tasks\EPSON XP-630 Series Update {1D1E79F9-F07F-4032-B6D0-28661B154C3E}.job
2016-08-13 14:50 - 2016-02-06 14:09 - 00000000 ____D C:\Program Files (x86)\Steam
2016-08-13 14:50 - 2016-02-05 23:37 - 00001146 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-13 14:50 - 2016-02-05 23:15 - 00000000 ___RD C:\Users\Lucio\OneDrive
2016-08-13 12:52 - 2016-02-06 17:25 - 00000000 ____D C:\Users\Lucio\AppData\Local\Spotify
2016-08-13 12:51 - 2016-02-06 17:24 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\Spotify
2016-08-13 12:32 - 2016-05-01 20:12 - 00001152 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001UA.job
2016-08-13 11:38 - 2016-05-01 20:26 - 00000000 ____D C:\Users\Lucio\Desktop\Neuer Ordner
2016-08-13 11:37 - 2016-02-05 23:16 - 01799166 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-13 11:37 - 2015-10-30 20:35 - 00775524 _____ C:\Windows\system32\perfh007.dat
2016-08-13 11:37 - 2015-10-30 20:35 - 00155338 _____ C:\Windows\system32\perfc007.dat
2016-08-13 11:37 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-08-13 11:32 - 2016-05-01 20:12 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001Core.job
2016-08-12 21:40 - 2016-04-19 22:21 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-12 21:40 - 2016-02-05 23:12 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-12 21:40 - 2015-10-30 08:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-08-12 21:39 - 2016-02-06 13:52 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\TS3Client
2016-08-12 21:38 - 2016-03-14 18:10 - 00000000 ____D C:\Users\Lucio\AppData\Local\Battle.net
2016-08-12 21:19 - 2016-03-14 18:09 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-08-12 19:59 - 2016-02-05 23:37 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-12 19:47 - 2016-03-09 17:30 - 00000000 ____D C:\Users\Lucio\AppData\Local\Overwolf
2016-08-12 19:39 - 2016-02-05 23:04 - 00000000 ____D C:\Windows\Panther
2016-08-12 19:21 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-12 19:21 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-08-12 19:14 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2016-08-12 19:12 - 2016-02-06 13:18 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0D293F55-B85A-45CB-83C9-1570E5ABBDEC}
2016-08-12 19:06 - 2016-02-06 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-08-12 19:06 - 2016-02-05 23:41 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-07-31 23:03 - 2016-02-05 23:41 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-07-29 15:36 - 2016-02-18 20:36 - 00000000 ____D C:\Users\Lucio\BrawlhallaReplays
2016-07-29 11:53 - 2016-02-05 23:37 - 00004208 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-29 11:53 - 2016-02-05 23:37 - 00003976 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-07-29 11:27 - 2016-05-01 20:12 - 00004268 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001UA
2016-07-29 11:27 - 2016-05-01 20:12 - 00003892 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001Core
2016-07-27 21:25 - 2016-02-06 01:22 - 00504488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-26 23:13 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\NDF
2016-07-22 21:57 - 2016-02-05 23:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-07-22 21:55 - 2016-02-05 23:37 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-07-22 21:53 - 2016-02-05 23:37 - 00000000 _____ C:\Users\Lucio\AppData\Local\Driver_LOM_8171Present.flag
2016-07-21 21:12 - 2016-02-08 21:21 - 00000000 ____D C:\Users\Lucio\AppData\Local\CrashDumps
2016-07-20 21:45 - 2016-02-06 13:52 - 00000000 ____D C:\Users\Lucio\AppData\Local\TeamSpeak 3 Client
2016-07-19 23:30 - 2016-06-28 15:56 - 00013825 _____ C:\Users\Lucio\AppData\Roaming\SpeedRunnersLog.txt
2016-07-18 08:55 - 2016-04-19 22:20 - 13675584 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-07-18 01:37 - 2016-02-06 14:36 - 00000000 ____D C:\ProgramData\Origin
2016-07-18 01:37 - 2016-02-06 13:40 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\Skype
2016-07-17 23:54 - 2016-05-13 17:19 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2016-07-17 23:48 - 2016-02-06 14:09 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\Riot Games
2016-07-17 21:36 - 2016-02-06 13:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-07-17 21:36 - 2016-02-06 13:40 - 00000000 ____D C:\ProgramData\Skype
2016-07-17 16:19 - 2016-02-09 19:20 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-07-15 21:05 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2016-07-15 20:15 - 2016-04-19 22:20 - 00214592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-07-15 12:53 - 2016-02-25 16:00 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\vlc
2016-07-14 22:21 - 2016-02-05 23:13 - 00000000 ____D C:\Users\Lucio
2016-07-14 22:02 - 2016-02-25 16:00 - 00000000 ____D C:\Users\Lucio\AppData\Roaming\dvdcss
2016-07-14 16:06 - 2016-02-05 23:13 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-07-14 16:05 - 2016-02-05 23:07 - 00194272 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-14 15:37 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\PrintDialog
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\DevicesFlow
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\oobe
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\Provisioning
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\bcastdvr
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-07-14 15:37 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-07-14 13:47 - 2016-02-06 01:21 - 00000000 ____D C:\Windows\system32\MRT
2016-07-14 13:45 - 2016-02-06 01:21 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-06-28 15:56 - 2016-07-19 23:30 - 0013825 _____ () C:\Users\Lucio\AppData\Roaming\SpeedRunnersLog.txt
2016-02-05 23:37 - 2016-07-22 21:53 - 0000000 _____ () C:\Users\Lucio\AppData\Local\Driver_LOM_8171Present.flag
2016-02-08 15:20 - 2016-04-20 12:17 - 0007609 _____ () C:\Users\Lucio\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
C:\Users\Lucio\AppData\Local\Temp\avgnt.exe
C:\Users\Lucio\AppData\Local\Temp\Gw2.exe
C:\Users\Lucio\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Lucio\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Lucio\AppData\Local\Temp\nvStInst.exe
C:\Users\Lucio\AppData\Local\Temp\sonarinst.exe
C:\Users\Lucio\AppData\Local\Temp\Uninstaller-4088.exe
C:\Users\Lucio\AppData\Local\Temp\utils.dll
C:\Users\Lucio\AppData\Local\Temp\vlc-2.2.4-win64.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-08-12 19:16

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 11-08-2016 01
durchgeführt von Lucio (2016-08-13 15:09:12)
Gestartet von C:\Users\Lucio\Downloads
Windows 10 Home Version 1511 (X64) (2016-02-05 21:12:58)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2714618137-582193082-3059342985-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2714618137-582193082-3059342985-503 - Limited - Disabled)
Gast (S-1-5-21-2714618137-582193082-3059342985-501 - Limited - Disabled)
Lucio (S-1-5-21-2714618137-582193082-3059342985-1001 - Administrator - Enabled) => C:\Users\Lucio

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)
Ansel (Version: 368.81 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{C2651553-6CA3-4822-B2E6-BC4ACA6E0EA2}) (Version: 4.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Batman™: Arkham Origins (HKLM\...\Steam App 209000) (Version:  - WB Games Montreal)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brawlhalla (HKLM-x32\...\Steam App 291550) (Version:  - Blue Mammoth Games)
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version:  - )
CPUID HWMonitor 1.29 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Dark Souls: Prepare to Die Edition (HKLM\...\Steam App 211420) (Version:  - FromSoftware)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{C7AA3D65-1F84-4590-AFAA-0777A04B6687}) (Version: 4.4.1 - SEIKO EPSON CORPORATION)
EPSON XP-630 Series Printer Uninstall (HKLM\...\EPSON XP-630 Series) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{15A0F113-BF2C-4C12-8AA8-42AE0D9AE1C9}) (Version: 3.1.2.0 - SEIKO EPSON Corporation)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
FINAL FANTASY VII (HKLM\...\Steam App 39140) (Version:  - Square Enix)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 1.90.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 1.90.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Photos Backup (HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
iTunes (HKLM\...\{9F4BF859-C3A4-4AB6-BDD1-9C5D58188598}) (Version: 12.4.1.6 - Apple Inc.)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
Killer Bandwidth Control Filter Driver (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer E240x Drivers (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer Network Manager (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{75FC89A3-8B23-4609-BF5C-090E58D6B390}) (Version: 1.1.59.1701 - Rivet Networks)
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden
LEGO Batman 2 (HKLM-x32\...\Steam App 213330) (Version:  - TT Games)
Magicka (HKLM\...\Steam App 42910) (Version:  - Arrowhead Game Studios)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.23 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 368.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.81 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 368.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.81 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
Origin (HKLM-x32\...\Origin) (Version: 9.11.5.17432 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.96.218.0 - Overwolf Ltd.)
Overwolf.Setup.VC100CRTx86.Dist (x32 Version: 1.0.0 - Overwolf) Hidden
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
Skyrim Script Extender (SKSE) (HKLM\...\Steam App 365720) (Version:  - The SKSE Team)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\Spotify) (Version: 1.0.34.146.g28f9eda2 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Undertale (HKLM\...\Steam App 391540) (Version:  - tobyfox)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2714618137-582193082-3059342985-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-2714618137-582193082-3059342985-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2714618137-582193082-3059342985-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Lucio\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2714618137-582193082-3059342985-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-2714618137-582193082-3059342985-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Lucio\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0893D643-0E55-45CA-BAF4-7CF920818853} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-07-17] (Overwolf LTD)
Task: {11CCCA93-DC30-412D-8DCD-7690B216445A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001UA => C:\Users\Lucio\AppData\Local\Google\Update\GoogleUpdate.exe [2016-05-01] (Google Inc.)
Task: {43D9D1CC-BAD6-48C9-B7FB-E8C5BEC7DA6E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-07-14] (Microsoft Corporation)
Task: {6AE12FB5-C5A3-456D-BAF7-FE09250A20C2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {711DAC21-1306-44F5-8718-9FF11A63ECE4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001Core => C:\Users\Lucio\AppData\Local\Google\Update\GoogleUpdate.exe [2016-05-01] (Google Inc.)
Task: {7B99BFF3-2678-4151-B5B7-20717A7FF5C2} - System32\Tasks\EPSON XP-630 Series Update {D819BCEF-F780-4F91-8DD4-7EA5DC23E188} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPLE.EXE [Argument = /EXE:"{D819BCEF-F780-4F91-8DD4-7EA5DC23E188}" /F:"Update"]
Task: {7C6AED50-E673-4C70-BA15-7321FB810409} - System32\Tasks\EPSON XP-630 Series Update {1D1E79F9-F07F-4032-B6D0-28661B154C3E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPLE.EXE [Argument = /EXE:"{1D1E79F9-F07F-4032-B6D0-28661B154C3E}" /F:"Update"]
Task: {956E4DA8-031E-45E4-ACC8-03C79C6F91F6} - System32\Tasks\SamsungMagician => F:\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {AE9B0CBB-391E-4158-89ED-3516762BA5E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)
Task: {D46E62DF-738F-48BD-98D7-BDA93893845F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\EPSON XP-630 Series Update {1D1E79F9-F07F-4032-B6D0-28661B154C3E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPLE.EXE:/EXE:{1D1E79F9-F07F-4032-B6D0-28661B154C3E} /F:Update WORKGROUP\DESKTOP-U75B0H9$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-630 Series Update {D819BCEF-F780-4F91-8DD4-7EA5DC23E188}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPLE.EXE:/EXE:{D819BCEF-F780-4F91-8DD4-7EA5DC23E188} /F:Update WORKGROUP\DESKTOP-U75B0H9$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001Core.job => C:\Users\Lucio\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2714618137-582193082-3059342985-1001UA.job => C:\Users\Lucio\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Lucio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> -incognito

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-04-22 01:07 - 2016-04-22 01:07 - 01337144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-21 20:11 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-02-06 13:22 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-02-21 20:11 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-06 13:22 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-07-13 15:04 - 2016-07-01 06:48 - 02656408 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-07-13 15:04 - 2016-07-01 06:48 - 02656408 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-05-24 14:48 - 2016-05-24 14:48 - 00959168 _____ () C:\Users\Lucio\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-02-06 01:18 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-13 15:05 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-19 22:16 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-07-13 15:04 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-13 15:04 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-13 15:04 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-13 15:04 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-02-06 13:10 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-05-24 14:48 - 2016-05-24 14:48 - 00679624 _____ () C:\Users\Lucio\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-05-14 12:43 - 2016-08-03 00:08 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-05-14 12:43 - 2016-08-03 00:10 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-05-14 12:43 - 2016-08-03 02:00 - 02320160 _____ () C:\Program Files (x86)\Steam\video.dll
2016-05-14 12:43 - 2016-02-09 01:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-05-14 12:43 - 2016-02-09 01:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-05-14 12:43 - 2016-02-09 01:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-05-14 12:43 - 2016-02-09 01:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-05-14 12:43 - 2016-02-09 01:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-05-14 12:43 - 2016-08-03 00:09 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-05-14 12:43 - 2016-08-03 00:09 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-05-14 12:43 - 2016-08-03 01:59 - 00831776 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-05-14 12:43 - 2016-07-07 00:00 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-05-14 12:43 - 2016-06-14 21:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-04-09 00:35 - 2016-04-09 00:35 - 03481600 _____ () C:\Users\Lucio\AppData\Local\Programs\Google\Google Photos Backup\gpuploader_i18n.dll
2016-02-06 13:38 - 2014-09-28 18:59 - 00019872 _____ () F:\Samsung\Samsung Magician\SAMSUNG_SSD.dll
2016-08-12 19:59 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-12 19:59 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\amazon.de -> hxxps://amazon.de

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 09:24 - 2015-10-30 09:21 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2714618137-582193082-3059342985-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucio\Desktop\HIMPmJd.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "Killer Network Manager.lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-2714618137-582193082-3059342985-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2B5910E8-FB08-4EF2-ACC9-F1E0199EBD93}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{486E4BEB-DDD4-4D23-9C49-4BA69CDC1AE3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ED355E64-0FDC-495A-80EE-9A9B393952B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{115B7919-D43C-4478-AFCB-45EC1857B29D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{06AE245E-261F-4AE9-A8A5-482F0AF1F2D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{96E6072E-6AD7-4D2F-BB26-28B1CCB274F8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{95A4122B-AF85-4CF2-BCD6-42035ECB98B0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F41A8C21-905D-4D8E-B295-3D71BF9E6A1E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B863A1F4-DC22-4F90-93C4-0A6C33E02F1A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{422C95EA-3313-4003-8E17-F3280699D3CF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3D4172E9-DB89-43F4-89B5-2337828897A0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{AB127237-499F-4F45-A199-726F817D125F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E2D51996-89AE-4E7A-9DA8-1926C22A5A9C}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [{D0A93323-5BAE-4CA4-AB0A-501940703CDE}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [TCP Query User{7A20BBF4-4C64-4A88-8CA7-56AC02CC4D3A}C:\users\lucio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lucio\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{99C263AE-8482-4553-B7F6-AF2B343C3EAA}C:\users\lucio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lucio\appdata\roaming\spotify\spotify.exe
FirewallRules: [{D116FA3A-248A-4714-ADB5-2BFC8AD7D617}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6D9C00EA-9FA2-4AF2-9778-836986FA3D9A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{589644FD-6647-40AE-9273-6575E6FC9B38}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9EE0F57C-FE58-4870-906D-EE3B7C6EDE3B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{7A0FB1E6-ED3A-42DF-ACA9-35A1EBA4F053}F:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) F:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{F8A4AFC4-4E46-428D-9ABB-07D15CEF6082}F:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) F:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{3563D158-3CBE-4521-8702-2FFE97F38C15}F:\origin\bfh\bfh.exe] => (Allow) F:\origin\bfh\bfh.exe
FirewallRules: [UDP Query User{2889A0D6-3F2C-4BE9-AD92-12D291ABA942}F:\origin\bfh\bfh.exe] => (Allow) F:\origin\bfh\bfh.exe
FirewallRules: [{BBDBB955-3F78-4115-B236-FB47D9AB3B16}] => (Allow) F:\Steam\steamapps\common\LEGO Batman 2\LEGOBatman2.exe
FirewallRules: [{ABC65001-C4F5-4F7D-B04D-AF810253EF4F}] => (Allow) F:\Steam\steamapps\common\LEGO Batman 2\LEGOBatman2.exe
FirewallRules: [{065FB32D-036F-452F-8893-BD7B8A0F6246}] => (Allow) F:\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{9E7152CA-F4FF-449F-9753-88A9C09E112D}] => (Allow) F:\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [TCP Query User{C4A570A5-F6B0-406E-892F-32F6610EF981}F:\gta_v\gta5.exe] => (Allow) F:\gta_v\gta5.exe
FirewallRules: [UDP Query User{AE48C3F8-943F-41E7-8304-7CEF4C95A171}F:\gta_v\gta5.exe] => (Allow) F:\gta_v\gta5.exe
FirewallRules: [{394D8661-6BB2-483E-995A-D2C7805EFADB}] => (Allow) F:\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{00595B1A-7055-40CB-B9B5-2701475C328B}] => (Allow) F:\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{AC402669-63F2-4842-8821-F9ABD1E9011D}] => (Allow) C:\Users\Lucio\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup\Data\ENEasyApp.exe
FirewallRules: [{75F98D03-3DEF-43E8-B906-8222F52D303A}] => (Allow) C:\Users\Lucio\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup\Data\ENEasyApp.exe
FirewallRules: [TCP Query User{3832E78D-11A9-4287-8E05-1523172E6D70}F:\battle_net\hearthstone\hearthstone.exe] => (Allow) F:\battle_net\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{9ED7DA25-83C9-47A9-8DFF-BE6D77749172}F:\battle_net\hearthstone\hearthstone.exe] => (Allow) F:\battle_net\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{3926479A-ED9E-4369-A5A0-E96686D8E581}F:\battle_net\overwatch\overwatch.exe] => (Allow) F:\battle_net\overwatch\overwatch.exe
FirewallRules: [UDP Query User{B1D91EEE-224F-4D0D-8835-B3029B3C438B}F:\battle_net\overwatch\overwatch.exe] => (Allow) F:\battle_net\overwatch\overwatch.exe
FirewallRules: [TCP Query User{101D7219-FB26-4F01-AFBC-A7D3EAEE1495}F:\origin\battlefield 4\bf4.exe] => (Allow) F:\origin\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{EDBAC989-AEDC-41DD-BCBE-75EDC82C76A4}F:\origin\battlefield 4\bf4.exe] => (Allow) F:\origin\battlefield 4\bf4.exe
FirewallRules: [{E1F7B6A0-3D43-46CE-8841-3684E5582065}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{093D69DD-196A-489F-A337-4E22416ABB25}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{D59FD0CD-A88A-49A9-BBEB-80F424DDB1EB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1C768B5E-DBE6-44BA-91D3-187FC78FCB2E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F5279D55-E216-4226-88E2-CA2C847A0C75}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{8A107283-06E5-49E0-A686-BA807A021C24}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{96F21424-9272-476C-A33D-5F96E6DD4259}] => (Allow) C:\Spiele\Origin\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{D225B37C-BC23-463D-AEBA-51F4D288DBD1}] => (Allow) C:\Spiele\Origin\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{ECB5010B-5623-42D7-854F-65B6CD3F57D7}] => (Allow) C:\Spiele\Origin\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{786D443C-0CBF-40B8-B041-010C2ADB7A2A}] => (Allow) C:\Spiele\Origin\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [TCP Query User{B4A6A960-04C9-47B7-BF61-19C7391DF34D}C:\spiele\origin\battlefield 4\bf4.exe] => (Allow) C:\spiele\origin\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{2BDE314C-D999-4C9A-9B00-4ED6C12744C7}C:\spiele\origin\battlefield 4\bf4.exe] => (Allow) C:\spiele\origin\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{A1718306-8F35-47D2-870E-B65827B2DD01}F:\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) F:\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{CE8DC70C-BEF8-4596-9736-72508097811C}F:\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) F:\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [{9E554558-1A04-45EC-827B-483715229458}] => (Allow) F:\Steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{5385AF9F-7DD7-4EFA-8C13-BFE3FBF9B1EB}] => (Allow) F:\Steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{69D5A7A1-CD2D-4987-8F4B-1BC377448562}] => (Allow) F:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{7A1C6BB7-C008-4BA1-9DEA-104B373B596F}] => (Allow) F:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{DEF50F17-4107-4B9B-B9A4-468E987C84AB}] => (Allow) F:\Steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{BCB438E6-ADC9-42FE-99DC-47B8782F9795}] => (Allow) F:\Steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{97DDFBFD-D4A0-47DC-89FA-F101D0523DA9}] => (Allow) F:\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\Binaries\Win32\BatmanOrigins.exe
FirewallRules: [{3333BB3A-0F99-4CB0-BB31-E877DB015F71}] => (Allow) F:\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\Binaries\Win32\BatmanOrigins.exe
FirewallRules: [{7EE62CFF-347E-406C-ADD2-773E2280CC44}] => (Allow) F:\Steam\steamapps\common\Batman Arkham Origins\Online\Binaries\Win32\BatmanOriginsOnline.exe
FirewallRules: [{997CE999-0896-485D-8463-911E1C0312B4}] => (Allow) F:\Steam\steamapps\common\Batman Arkham Origins\Online\Binaries\Win32\BatmanOriginsOnline.exe
FirewallRules: [TCP Query User{FDC776EB-DFAF-43D6-9946-E8D8FA2B9CCC}F:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) F:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{677CF9C5-DC45-4960-8035-8B275047C25F}F:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) F:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{B454CFA2-68B4-45FA-936A-560A2F591153}] => (Allow) F:\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{11EDD50A-8639-4C7D-A4A5-19FD97D9EF49}] => (Allow) F:\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{5A72FED4-7CCA-4416-AFC0-4CBA50E20963}] => (Allow) F:\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{08C0AFB4-33ED-4BF8-A797-5D88E4D2D069}] => (Allow) F:\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{C626D36B-685C-43CD-860C-D6B6253BC948}] => (Allow) F:\iTunes\iTunes.exe
FirewallRules: [{E442811C-CBA7-4E72-B1DF-58B4125BE2E3}] => (Allow) F:\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{A90A6F10-A64E-4B9A-916B-9E95FC310E8C}] => (Allow) F:\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{C82EEFD9-6C9F-41AB-ABE5-7FCD5F029F6F}] => (Allow) F:\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{C428D0E3-A7FA-4957-B5C3-5583379EDFE9}] => (Allow) F:\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{76512E26-F4AF-4ADC-8343-2CF3C22AB648}] => (Allow) F:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{0542FC48-75C3-4EFF-BAF2-FFB87DCA6863}] => (Allow) F:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{B1680F57-0AC3-45DD-BE04-62CF70857161}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{9551FF26-2B43-4A87-98E3-935CFC59646E}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{F4F8E91F-F183-4FB3-9C60-078B1EDC9E0B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

08-07-2016 11:35:22 OpenOffice 4.1.2 wird entfernt
14-07-2016 13:44:30 Windows Update
17-07-2016 23:42:17 Removed League of Legends
26-07-2016 19:58:52 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/12/2016 09:40:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.103, Zeitstempel: 0x56a849ab
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000067e3c
ID des fehlerhaften Prozesses: 0x3e4
Startzeit der fehlerhaften Anwendung: 0xdwm.exe0
Pfad der fehlerhaften Anwendung: dwm.exe1
Pfad des fehlerhaften Moduls: dwm.exe2
Berichtskennung: dwm.exe3
Vollständiger Name des fehlerhaften Pakets: dwm.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dwm.exe5

Error: (08/12/2016 09:39:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-U75B0H9)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (08/12/2016 07:47:18 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL4

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\Windows\system32\esentprf.dll4

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (08/12/2016 07:47:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4


Systemfehler:
=============
Error: (08/13/2016 12:55:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_71fde" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2016 12:55:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _71fde" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2016 12:55:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_71fde" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2016 12:55:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_71fde" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2016 12:55:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (08/12/2016 09:40:25 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI5

Error: (08/12/2016 09:40:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_146a4c erreicht.

Error: (08/12/2016 09:40:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdatenspeicher _146a4c erreicht.

Error: (08/12/2016 09:40:03 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Benutzerdatenspeicher _146a4c" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056 = Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (08/12/2016 09:39:57 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-U75B0H9)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca


CodeIntegrity:
===================================
  Date: 2016-08-13 12:04:58.957
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 12:04:58.948
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:59:54.574
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:59:54.565
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:55:11.303
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:55:11.293
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:49:31.434
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-13 11:49:31.425
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-27 15:48:36.342
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-27 15:48:36.335
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 13%
Installierter physikalischer RAM: 16329.52 MB
Verfügbarer physikalischer RAM: 14049.84 MB
Summe virtueller Speicher: 18761.52 MB
Verfügbarer virtueller Speicher: 16403.91 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:232.4 GB) (Free:94 GB) NTFS
Drive d: (System) (Fixed) (Total:0.34 GB) (Free:0.29 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (Alte Kiste) (Fixed) (Total:919.69 GB) (Free:774.6 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: C35A135D)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 128AECD7)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11 GB) - (Type=27)

==================== Ende von Addition.txt ============================