Zahlreiche Fenster öffnen sich plötzlich, eines Fullscreen vorne, TaskManager geht nicht

construct · 09.09.2016, 03:13

OKAY

Win7
Intel i7
Radeon R 390
16GB RAM
SSD Samsung EVO 850
HHD Western Digital 1TB

- Aktuell nichts neues installiert
- keine dubiosen Addons im Firefox 48.0.2 (NoScript, ABP, WOT,HTTPS-Everywhere, FoxyProxy,Trashmail)

Ich versuche das man zu beschreiben...

um etwa 02:40, heute den 09.09.2016_

Es ist bis jetz nur ein Mal passiert!

Ich mache gerade Musik in Bitwig.
Geöffnet ist der Firefox mit Soundcloud, Youtube, Ebay-Kleinanzeigen
Im Hintergrund GlassWire, Jing, CCleaner, ProzessExplorer (eventuell mehr)

Aus einem mir nicht ganz nachvollziehbaren Grund öffnet sich plötzlich ein Fenster und drängt sich in den Vordergrund über das Musikprogramm Bitwig, ich sehe nur weißes...beim genaueren Hinschauen ist unten links ein Icon von einem Wecker oder einer Uhr.

Ich dachte kurz es sei die FreeAlarmClock die ich evtl mit einer Tastencombi geöffnet habe, welches mir jedoch nicht bekannt wäre. Das Fenster war nicht zu schließen, kein Mausklick hat was gebracht.
Fullscreen, keine Icons zum weg x-en.

Mit Win+TAB konnte ich die offnen Fenster switchen. Das war sehr gruselig.
geöffnet waren diverse Fenster, einige leer, 5x Taschenrechner, paar mal die FreeAlarmClock, einige Fenster mit komischer Bezeichnung (NI$NS oder so?), Die AMD-Radeon-Einstellungssoftware, irgend ein graues Icon mit roter Schrift (MQ irgendwas).
Auch der ProzessHacker war geöfnet und ich konnte beim scollen der offenen Fenster erkenn das kein Prozess ganz oben stand außer Firefox und Bitwig, andere Prozesse konnt eich kaum erkennen auf der Ansicht.

Die Fenster ließen sich alle nicht schließen, mit einer der F-Tasten konnteich einige dennoch beenden.
Aber der Rest blieb, und immer wieder kommt das weiße Fenster nach vorne.

Taskbar war mit Win-Taste zu holen, man sieht alles voller Fenster und einige auch doppelt und 3-fach geöffnet, aber ich kann auf der Task-Bar nicht anklicken. Mit einer anderen Taste konnte ich die Miniaturansicht öffnen und diese zeigte mich auch rund 20-25 Fenster an.

Task-Manager geöffnet aber auch hier kommt das gleiche weiße Fenster nach vorne.

Habe mich abgemeldet da ich meine Musikprojekt nicht gespeichert habe und gehofft habe dass es nicht verschwindet.
Nach der Neuanmeldung war nichts mehr von den Fehlern zu sehen.

__
Avast gibt keine Fehler nach dem Scan
Malwarebytes zeigt keine Fehler
HighJack-Log lade ich hoch (Anhang)
__
Ich möchte Wissen was der Fehler war.
Wer hat eine Idee?

_

Letzte Probleme mit dem System:
Diverse Bluescreens:
- https://www.computerbase.de/forum/showthread.php?t=1606577
(scheinbar gefixt durch entfernen von ASIO-4-ALL-Treiber)

Microsoft Mouse:
gab den Geist auf, bekamkeinen Strommehr, hatte willkürlich geblinkt und warzeitweise aus...im vollen betrieb

cosinus · 09.09.2016, 08:46

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

construct · 09.09.2016, 14:41

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von coy (Administrator) auf USER1111 (09-09-2016 15:13:27)
Gestartet von T:\My-Folder\Downloads
Geladene Profile: coy (Verfügbare Profile: coy)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\runSW.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Comfort Software Group) C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Jing\Jing.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GlassWire.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek) C:\Windows\SwUSB.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6625672 2016-08-11] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7408312 2016-06-27] (AVAST Software)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [FreeAC] => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [Jing] => C:\Program Files (x86)\TechSmith\Jing\Jing.exe [2911224 2015-09-11] (TechSmith Corporation)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [Process Hacker 2] => C:\Program Files\Process Hacker 2\ProcessHacker.exe [1721888 2016-02-26] (wj32)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [GlassWire] => C:\Program Files (x86)\GlassWire\glasswire.exe [5770192 2016-08-05] (SecureMix LLC)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {1911d85f-9ee4-11e5-8780-b04e58a100a3} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {1911d8dc-9ee4-11e5-8780-b04e58a100a3} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {ff3dbed7-a9d6-11e5-9bce-85ca1d8cd514} - G:\setup_vmb_lite.exe /checkApplicationPresence
IFEO\taskmgr.exe: [Debugger] "C:\Program Files\Process Hacker 2\ProcessHacker.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-06-15] (AVAST Software)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.102.1
Tcpip\..\Interfaces\{251F104E-10FE-40D6-B45C-7B106746BA2F}: [DhcpNameServer] 192.168.102.1
Tcpip\..\Interfaces\{2BB04CC1-AAC0-4F0D-B99D-878528CCFE7B}: [DhcpNameServer] 192.168.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-06-15] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-05] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-06-15] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-05] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default
FF NewTab: about:newtab
FF DefaultSearchEngine: Avast Search
FF DefaultSearchUrl: hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Avast Search
FF SelectedSearchEngine: Avast Search
FF Homepage: hxxps://duckduckgo.com
FF Keyword.URL: hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-13] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-14] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-14] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-05] (Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF SearchPlugin: C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\searchplugins\avast-search.xml [2016-06-10]
FF Extension: (WOT) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-01-02]
FF Extension: (TrashMail.com) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\spam@trashmail.net.xpi [2016-04-16]
FF Extension: (Google Translator for Firefox) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\translator@zoli.bod.xpi [2016-04-28]
FF Extension: (Cookie Controller) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{ac2cfa60-bc96-11e0-962b-0800200c9a66}.xpi [2016-07-15]
FF Extension: (NoScript) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-08-09]
FF Extension: (Lazarus: Form Recovery) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\lazarus@interclue.com.xpi [2016-08-21]
FF Extension: (TinEye Reverse Image Search) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\tineye@ideeinc.com.xpi [2016-09-02]
FF Extension: (FoxyProxy Standard) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\foxyproxy@eric.h.jung [2016-09-02]
FF Extension: (HTTPS Everywhere) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\https-everywhere@eff.org.xpi [2016-09-08]
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2016-08-25]
FF Extension: (Video DownloadHelper) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-03]
FF Extension: (Adblock Plus) - C:\Users\coy\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-30]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-06-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-06-15]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-06-15]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-12-01] (Adobe Systems) [Datei ist nicht signiert]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-06-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2013-08-01] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-06-15] (AVAST Software)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-11-24] () [Datei ist nicht signiert]
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [4351440 2016-08-05] (SecureMix LLC)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2015-12-30] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-05-29] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-05-31] (Intel Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [506960 2015-12-26] (Sony Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RunSwUSB; C:\Windows\runSW.exe [48856 2015-03-19] ()
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [305032 2016-07-19] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-28] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-06-15] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-06-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-06-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-06-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-06-15] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-06-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-06-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-06-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software)
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx64.sys [34512 2016-03-04] ()
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [127280 2014-03-17] (Focusrite Audio Engineering Limited.)
R1 gwdrv; C:\Windows\System32\DRIVERS\gwdrv.sys [33248 2015-05-29] (SecureMix LLC)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2016-02-14] (REALiX(tm))
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [112408 2015-12-15] ()
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13512 2015-12-09] ()
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2978520 2015-01-15] (Realtek Semiconductor Corporation                           )
R3 USBPcap; C:\Windows\System32\DRIVERS\USBPcap.sys [38888 2014-02-19] (USBPcap)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [121248 2016-08-16] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [195936 2016-08-16] (Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [135824 2016-08-16] (Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [195416 2016-01-26] (IDRIX)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-09 15:13 - 2016-09-09 15:13 - 00000000 ____D C:\FRST
2016-09-09 04:09 - 2016-09-09 04:09 - 00008085 _____ C:\Users\coy\Desktop\hijackthis-09-16.txt
2016-09-05 09:11 - 2016-09-05 09:11 - 00000022 _____ C:\Windows\S.dirmngr
2016-09-03 06:21 - 2016-09-03 06:21 - 00002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitwig Studio.lnk
2016-09-03 06:21 - 2016-09-03 06:21 - 00000000 ____D C:\Program Files (x86)\Bitwig Studio
2016-09-03 01:14 - 2016-09-03 01:14 - 00001286 _____ C:\Users\Public\Desktop\Scarlett MixControl.lnk
2016-09-03 00:25 - 2016-09-03 00:25 - 00222926 _____ C:\Users\coy\Downloads\b3a solo - Pornhub.com.htm
2016-09-02 21:54 - 2016-09-02 21:54 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\Windows\PCHEALTH
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2016-09-02 21:51 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-02 21:51 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-30 21:51 - 2016-08-30 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2016-08-28 10:44 - 2016-08-28 10:44 - 00001211 _____ C:\Users\coy\Desktop\Mint64.lnk
2016-08-27 15:52 - 2016-08-27 16:06 - 1571815424 _____ C:\Users\coy\Downloads\linuxmint-18-cinnamon-32bit.iso
2016-08-27 13:05 - 2016-08-27 13:05 - 00001085 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2016-08-27 13:05 - 2016-08-27 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2016-08-27 13:05 - 2016-08-16 20:18 - 00920168 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2016-08-27 13:05 - 2016-08-16 20:18 - 00149256 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2016-08-24 16:01 - 2016-08-24 16:01 - 00002092 _____ C:\Users\coy\Documents\082016.txt
2016-08-16 20:18 - 2016-08-16 20:18 - 00195936 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2016-08-16 20:18 - 2016-08-16 20:18 - 00135824 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSB.sys
2016-08-16 20:18 - 2016-08-16 20:18 - 00121248 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2016-08-14 07:50 - 2016-08-14 07:50 - 00003156 _____ C:\Windows\System32\Tasks\{7476B4B9-F9F5-4227-A7EB-B7B0D1323EB9}
2016-08-14 05:25 - 2016-08-14 05:25 - 03893719 _____ C:\Users\coy\Downloads\4.wmv
2016-08-12 20:04 - 2016-08-12 20:04 - 00015297 _____ C:\Users\coy\AppData\Local\recently-used.xbel
2016-08-12 06:04 - 2016-08-12 06:04 - 00000000 ____D C:\Users\coy\Documents\iZotope
2016-08-12 06:04 - 2016-08-12 06:04 - 00000000 ____D C:\Users\coy\AppData\Roaming\iZotope
2016-08-12 01:31 - 2016-08-12 01:31 - 00002265 _____ C:\Users\coy\Desktop\FL Studio 12 (64bit).lnk
2016-08-12 01:31 - 2016-08-12 01:31 - 00002249 _____ C:\Users\coy\Desktop\FL Studio 12.lnk
2016-08-12 00:59 - 2016-08-12 00:59 - 00000000 ____D C:\Program Files\Focusrite
2016-08-12 00:59 - 2014-03-17 11:38 - 00022832 _____ (Focusrite Audio Engineering Limited.) C:\Windows\system32\ffusb2audio_coinst.dll
2016-08-11 21:10 - 2016-08-11 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZ Wipe
2016-08-11 21:10 - 2016-08-11 21:10 - 00000000 ____D C:\Program Files (x86)\EZ Wipe
2016-08-11 20:33 - 2016-08-11 21:16 - 00000000 ____D C:\Users\coy\Output-Signal-Demo
2016-08-11 20:31 - 2016-08-11 20:31 - 00001185 _____ C:\Users\coy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Output Hub.lnk
2016-08-11 20:31 - 2016-08-11 20:31 - 00001155 _____ C:\Users\coy\Desktop\Output Hub.lnk
2016-08-11 20:31 - 2016-08-11 20:31 - 00000000 ____D C:\Users\coy\AppData\Local\Output Hub
2016-08-11 20:31 - 2016-08-11 20:31 - 00000000 ____D C:\Users\coy\AppData\Local\Crashpad
2016-08-11 20:31 - 2016-08-11 20:31 - 00000000 ____D C:\Program Files (x86)\Output
2016-08-11 09:41 - 2016-08-11 09:41 - 00001910 _____ C:\Users\Public\Desktop\GlassWire.lnk
2016-08-11 09:41 - 2016-08-11 09:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GlassWire
2016-08-11 09:41 - 2016-08-11 09:41 - 00000000 ____D C:\Program Files (x86)\GlassWire
2016-08-11 09:41 - 2015-05-29 06:30 - 00008657 _____ C:\Windows\system32\Drivers\gwdrv.cat
2016-08-11 09:41 - 2015-05-29 06:15 - 00033248 _____ (SecureMix LLC) C:\Windows\system32\Drivers\gwdrv.sys
2016-08-11 09:37 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-11 09:37 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-11 09:37 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-11 09:37 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-11 09:37 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-11 09:37 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-11 09:37 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-11 09:37 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-11 09:37 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-11 09:37 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-11 09:37 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-11 09:37 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-11 09:37 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-11 09:37 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-11 09:37 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-11 09:37 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-11 09:37 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-11 09:37 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-11 09:37 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-11 09:37 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-11 09:37 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-11 09:37 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-11 09:37 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-11 09:37 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-11 09:37 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-11 09:37 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-11 09:37 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-11 09:37 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-11 09:37 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-11 09:37 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-11 09:37 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-11 09:37 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-11 09:37 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-11 09:37 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-11 09:37 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-11 09:37 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-11 09:37 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-11 09:37 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-11 09:37 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-11 09:37 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-11 09:37 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-11 09:37 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-11 09:37 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-11 09:37 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-11 09:37 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-11 09:37 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-11 09:37 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-11 09:37 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-11 09:37 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-11 09:37 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-11 09:37 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-11 09:37 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-11 09:37 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-11 09:37 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-11 09:37 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-11 09:37 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-11 09:37 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-11 09:37 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-11 09:37 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-11 09:37 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-11 09:37 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-11 09:37 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-11 09:37 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-11 09:37 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-11 09:37 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-11 09:37 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-11 09:36 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-11 09:36 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-11 09:36 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-11 09:36 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-11 09:36 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-11 09:36 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-11 09:36 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-11 09:36 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-11 09:36 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-11 09:36 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-11 09:36 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-11 09:36 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-11 09:36 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-11 09:36 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-11 09:36 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-11 09:17 - 2016-08-11 09:17 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-08-11 04:43 - 2016-08-11 04:43 - 02412544 _____ C:\Windows\system32\amdacpusl.pdb
2016-08-11 04:34 - 2016-08-11 04:34 - 00364544 _____ (Advanced Micro Devices) C:\Windows\system32\amdacpusl.dll
2016-08-11 04:34 - 2016-08-11 04:34 - 00306176 _____ C:\Windows\system32\amdacpusl.pdb.pub
2016-08-11 04:34 - 2016-08-11 04:34 - 00248832 _____ (Advanced Micro Devices) C:\Windows\SysWOW64\amdacpusl.dll
2016-08-10 08:09 - 2016-08-10 08:13 - 00000000 ____D C:\Users\coy\AppData\Roaming\Wise Data Recovery
2016-08-10 08:09 - 2016-08-10 08:09 - 00001225 _____ C:\Users\Public\Desktop\Wise Data Recovery.lnk
2016-08-10 08:09 - 2016-08-10 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Data Recovery
2016-08-10 08:09 - 2016-08-10 08:09 - 00000000 ____D C:\Program Files (x86)\Wise
2016-08-10 08:07 - 2016-08-10 08:07 - 00001331 _____ C:\Users\coy\Desktop\PC Inspector File Recovery.lnk
2016-08-10 08:07 - 2016-08-10 08:07 - 00000000 ____D C:\Users\coy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
2016-08-10 08:07 - 2016-08-10 08:07 - 00000000 ____D C:\Program Files (x86)\Convar
2016-08-10 08:04 - 2016-08-10 08:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Inspector File Recovery
2016-08-10 08:04 - 2016-08-10 08:04 - 00000000 ____D C:\Program Files (x86)\PC Inspector File Recovery

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-09 14:35 - 2016-04-04 18:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-09 05:11 - 2015-10-23 22:06 - 00000000 ____D C:\Users\coy\AppData\Local\Bitwig Studio
2016-09-09 03:18 - 2011-04-12 09:43 - 00699092 _____ C:\Windows\system32\perfh007.dat
2016-09-09 03:18 - 2011-04-12 09:43 - 00149232 _____ C:\Windows\system32\perfc007.dat
2016-09-09 03:18 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-09 03:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-09 03:08 - 2016-07-26 23:34 - 00000000 ____D C:\Users\coy\AppData\Roaming\Tokyo Dawn Labs
2016-09-09 03:06 - 2016-02-13 22:48 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-09 02:56 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-09 02:56 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-08 22:21 - 2015-11-04 18:52 - 00000000 ____D C:\Users\coy\AppData\Local\Battle.net
2016-09-08 19:25 - 2015-11-04 18:51 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-08 17:59 - 2015-10-26 01:32 - 00000000 ____D C:\Users\coy\AppData\Roaming\vlc
2016-09-08 08:25 - 2015-10-31 12:43 - 00000000 ____D C:\Users\coy\.VirtualBox
2016-09-07 07:14 - 2016-01-29 10:38 - 00003872 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1454056698
2016-09-07 07:14 - 2016-01-29 10:36 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-05 17:25 - 2015-10-25 22:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-09-05 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-09-05 09:11 - 2016-02-13 11:20 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-09-05 09:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-05 01:00 - 2015-10-25 15:27 - 00000000 ____D C:\Users\coy\AppData\Local\ElevatedDiagnostics
2016-09-04 13:16 - 2015-11-02 08:40 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-03 01:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-03 01:18 - 2015-11-09 08:20 - 00000000 ____D C:\Program Files\Everything
2016-09-03 01:14 - 2015-11-07 06:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite
2016-09-03 00:59 - 2015-10-23 20:39 - 00074048 _____ C:\Users\coy\AppData\Local\GDIPFONTCACHEV1.DAT
2016-09-03 00:45 - 2016-06-14 11:44 - 00000000 ____D C:\Users\coy\AppData\Local\CrashDumps
2016-09-03 00:45 - 2015-10-27 03:07 - 00000000 ____D C:\Windows\Minidump
2016-09-03 00:39 - 2009-07-14 06:45 - 00320000 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-02 21:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-09-02 21:28 - 2016-05-12 22:32 - 00000000 ____D C:\Users\coy\AppData\Roaming\uTorrent
2016-08-30 21:51 - 2016-02-12 01:20 - 00000000 ____D C:\Program Files\AMD
2016-08-30 21:51 - 2015-11-22 18:26 - 00000000 ____D C:\Program Files (x86)\AMD
2016-08-30 21:48 - 2016-02-12 01:18 - 00000000 ____D C:\AMD
2016-08-30 13:13 - 2016-02-13 22:48 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-08-30 13:13 - 2016-02-13 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-08-30 13:13 - 2016-02-13 22:48 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-08-27 17:54 - 2015-11-22 06:25 - 00000000 ____D C:\Users\coy\AppData\Roaming\Audacity
2016-08-27 16:05 - 2015-10-31 12:57 - 00000000 ____D C:\Users\coy\VirtualBox VMs
2016-08-27 15:44 - 2015-10-31 09:32 - 00000000 ____D C:\Program Files\Oracle
2016-08-27 15:10 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-27 15:09 - 2016-08-02 02:59 - 1350646107 _____ C:\Users\coy\Downloads\alss.16.07.27.shalina.devine.going.in.and.coming.out[et].mp4
2016-08-25 21:12 - 2016-02-07 20:49 - 00012485 _____ C:\Users\coy\Documents\Serien-View-Status.odt
2016-08-25 13:32 - 2015-12-19 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-24 13:05 - 2015-10-23 21:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-23 17:01 - 2016-01-24 13:02 - 00000000 ____D C:\Users\coy\Documents\GEZ
2016-08-17 08:50 - 2016-03-04 09:43 - 00000000 ____D C:\Users\coy\AppData\Roaming\obs-studio
2016-08-17 07:01 - 2016-03-04 09:43 - 00001207 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2016-08-16 06:58 - 2016-02-29 00:55 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-08-12 03:55 - 2016-01-28 12:19 - 01249792 _____ (hxxp://www.ruby-lang.org/) C:\Users\coy\AppData\Roaming\msvcr90-ruby191.dll
2016-08-12 03:05 - 2016-01-16 10:21 - 00000000 ___RD C:\Users\coy\Documents\MAGIX
2016-08-12 03:05 - 2016-01-16 10:21 - 00000000 ____D C:\ProgramData\MAGIX
2016-08-12 03:05 - 2016-01-16 10:21 - 00000000 ____D C:\Program Files\VSTPlugins
2016-08-12 03:05 - 2015-11-22 11:20 - 00000000 ____D C:\Program Files (x86)\VSTPlugins
2016-08-12 03:03 - 2015-11-06 05:42 - 00000000 ____D C:\Users\coy\Downloads\Arturia
2016-08-12 02:59 - 2016-03-08 19:55 - 00000000 ____D C:\Program Files (x86)\Arturia
2016-08-12 01:31 - 2015-10-23 22:02 - 00000000 ____D C:\Users\coy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-08-12 01:31 - 2015-10-23 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-08-12 01:31 - 2015-10-23 22:02 - 00000000 ____D C:\Program Files\Image-Line
2016-08-12 01:31 - 2015-10-23 21:55 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-08-11 20:33 - 2015-10-23 20:28 - 00000000 ____D C:\Users\coy
2016-08-11 11:02 - 2016-08-07 00:58 - 00000000 ____D C:\Windows\system32\MRT
2016-08-11 10:59 - 2016-08-07 00:58 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 10:30 - 2016-07-18 23:31 - 00865792 _____ (AMD) C:\Windows\system32\SET42F0.tmp
2016-08-11 10:11 - 2016-01-16 10:23 - 00000000 ____D C:\Users\coy\AppData\Roaming\MAGIX
2016-08-11 09:30 - 2016-06-05 07:39 - 00000975 _____ C:\Users\coy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cyclop.lnk
2016-08-11 09:30 - 2016-06-05 07:39 - 00000000 ____D C:\ProgramData\Sugar Bytes
2016-08-11 09:21 - 2015-11-30 10:22 - 00000946 _____ C:\Users\Public\Desktop\Kontakt 3.lnk
2016-08-10 08:06 - 2015-11-22 18:26 - 00000000 ____D C:\Users\coy\AppData\Local\Downloaded Installations
2016-08-10 08:04 - 2015-11-13 17:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-28 01:19 - 2016-07-31 16:52 - 0000016 _____ () C:\Users\coy\AppData\Roaming\msregsvv.dll
2016-01-28 12:19 - 2016-08-12 03:55 - 1249792 _____ (hxxp://www.ruby-lang.org/) C:\Users\coy\AppData\Roaming\msvcr90-ruby191.dll
2016-03-04 08:38 - 2016-03-04 08:38 - 0001181 _____ () C:\Users\coy\AppData\Roaming\trace_FilterInstaller.txt
2016-03-04 08:38 - 2016-03-04 08:38 - 0000000 _____ () C:\Users\coy\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-08-12 20:04 - 2016-08-12 20:04 - 0015297 _____ () C:\Users\coy\AppData\Local\recently-used.xbel
2015-11-01 08:16 - 2015-11-01 08:16 - 0007611 _____ () C:\Users\coy\AppData\Local\Resmon.ResmonCfg
2016-01-28 01:19 - 2016-07-31 16:52 - 0000016 _____ () C:\ProgramData\autobk.inc

Einige Dateien in TEMP:
====================
C:\Users\coy\AppData\Local\Temp\sqlite-3.8.0-x86-sqlitejdbc.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-05 00:50

==================== Ende von FRST.txt ============================

Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von coy (09-09-2016 15:13:40)
Gestartet von T:\My-Folder\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2015-10-23 18:28:58)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3869482132-2802206346-888328520-500 - Administrator - Disabled)
coy (S-1-5-21-3869482132-2802206346-888328520-1000 - Administrator - Enabled) => C:\Users\coy
Gast (S-1-5-21-3869482132-2802206346-888328520-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.)
7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
7-Zip 16.02 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1602-000001000000}) (Version: 16.02.00.0 - Igor Pavlov)
ACP Application (Version: 2016.0811.0433.30 - Advanced Micro Devices, Inc.) Hidden
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ARIA Engine v1.8.4.4 (HKLM\...\ARIA Engine_is1) (Version: v1.8.4.4 - Plogue Art et Technologie, Inc)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bitwig Studio (HKLM-x32\...\{6886A1CD-C6C0-435F-B33D-EA674D43EA86}) (Version: 1.3.13.43068 - Bitwig GmbH)
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broforce (HKLM-x32\...\Steam App 274190) (Version:  - Free Lives)
BumBer Deluxe 1.0 (HKLM-x32\...\BumBer_0) (Version: 1.0 - beatassist.eu)
CamAlert II (HKLM-x32\...\CamAlert_is1) (Version:  - hxxp://www.coderonline.de/)
CamSpy V.5.1.2 (HKLM-x32\...\CamSpy_is1) (Version:  - (c.) André Münsterberg)
Catalyst Control Center Next Localization BR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
ConfrontaPDF (HKLM-x32\...\ConfrontaPDF) (Version:  - )
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CPUID ROG CPU-Z 1.75 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.75 - CPUID, Inc.)
CreditMovie1 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CreditMovie2 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CreditMovie3 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CrypTool 1.4.30 (HKLM-x32\...\CrypTool) (Version: 1.4.30 - )
Custom Shop version 1.7.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.7.0 - IK Multimedia)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)
DaVinci Resolve (HKLM\...\{5BE8D9B2-D7B5-4059-B9F3-BA984FD2E552}) (Version: 12.5.0052 - Blackmagic Design)
Debut Videorekorder (HKLM-x32\...\Debut) (Version: 2.17 - NCH Software)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Everything 1.3.4.686 (x64) (HKLM\...\Everything) (Version:  - )
EZ Wipe 2.9.5 (HKLM-x32\...\EZ Wipe_is1) (Version:  - XCRYSoft)
f.lux (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Flux) (Version:  - )
Firebird v2.1 (HKLM-x32\...\Tone2 Firebird_is1) (Version:  - Tone2)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio 12.3 (HKLM-x32\...\FL Studio 12.3) (Version:  - Image-Line)
FluxCenter-32-bit (HKLM-x32\...\{694A585C-15F2-4B79-BC19-AF8D290E0E58}) (Version: 1.1.15.43404 - Flux:: sound and picture development)
Focusrite Scarlett Plug-in Suite 1.1 (HKLM-x32\...\{D7F912D4-C237-4079-966A-5044A5025CBF}}_is1) (Version: 1.1 - Focusrite Audio Engineering Ltd.)
Focusrite USB 2.0 Audio Driver 2.5.1 (HKLM\...\Focusrite USB 2.0 Audio Driver_is1) (Version: 2.5.1 - Focusrite Audio Engineering Limited.)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.73 - SecureMix LLC)
Gpg4win (2.3.0) (HKLM-x32\...\GPG4Win) (Version: 2.3.0 - The Gpg4win Project)
HFSExplorer 0.23.1 (HKLM-x32\...\HFSExplorer) (Version: 0.23.1 - Catacombae Software)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HWiNFO64 Version 5.20 (HKLM\...\HWiNFO64_is1) (Version: 5.20 - Martin Malík - REALiX)
IK Multimedia Authorization Manager version 1.0.15 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.15 - IK Multimedia)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
IL Harmor (HKLM-x32\...\IL Harmor) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
Intel Driver Update Utility (HKLM-x32\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel)
Intel(R) Driver Update Utility 2.2.0.5 (x32 Version: 2.2.0.1 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4222 - Intel Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Jing (HKLM-x32\...\{8C784F8B-89D0-4A59-A000-7EEF129E1574}) (Version: 2.9.15255.1 - TechSmith Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LUXONIX LFX-1310 (HKLM-x32\...\LUXONIX_LFX-1310) (Version: 1.4 - LUXONIX)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MergeModule_x64 (Version: 9.3.00 - Sony Corporation) Hidden
MergeModule_x86 (x32 Version: 9.3.00 - Sony Corporation) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.12 - Native Instruments)
Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments)
Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments)
Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.11.0.465 - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.6 - Native Instruments)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.2.8 - Native Instruments)
Native Instruments Guitar Rig Factory Selection for Maschine (HKLM-x32\...\Native Instruments Guitar Rig Factory Selection for Maschine) (Version:  - Native Instruments)
Native Instruments Komplete 10 (HKLM-x32\...\Native Instruments Komplete 10) (Version: 10.0.0.0 - Native Instruments)
Native Instruments Komplete 8 Players (HKLM-x32\...\Native Instruments Komplete 8 Players) (Version:  - Native Instruments)
Native Instruments Komplete Kontrol (HKLM-x32\...\Native Instruments Komplete Kontrol) (Version: 1.6.2.5 - Native Instruments)
Native Instruments Komplete Kontrol Driver (HKLM-x32\...\Native Instruments Komplete Kontrol Driver) (Version:  - Native Instruments)
Native Instruments Kontakt 3 (HKLM-x32\...\Native Instruments Kontakt 3) (Version:  - Native Instruments)
Native Instruments Kontakt 3 Factory Content (HKLM-x32\...\Native Instruments Kontakt 3 Factory Content) (Version:  - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.2.880 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Kontakt Factory Selection (HKLM-x32\...\Native Instruments Kontakt Factory Selection) (Version:  - Native Instruments)
Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.1 - Native Instruments)
Native Instruments Kore Player (HKLM-x32\...\Native Instruments Kore Player) (Version:  - Native Instruments)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
Native Instruments Mikro Prism (HKLM-x32\...\Native Instruments Mikro Prism) (Version:  - Native Instruments)
Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.3 - Native Instruments)
Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.3 - Native Instruments)
Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.5 - Native Instruments)
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.4.1512 - Native Instruments)
Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.1.1526 - Native Instruments)
Native Instruments Reaktor Blocks Wired (HKLM-x32\...\Native Instruments Reaktor Blocks Wired) (Version: 1.0.0.3 - Native Instruments)
Native Instruments Reaktor Factory Selection (HKLM-x32\...\Native Instruments Reaktor Factory Selection) (Version:  - Native Instruments)
Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.2 - Native Instruments)
Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.4 - Native Instruments)
Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.4 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.6 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: 1.1.0.1 - Native Instruments)
Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: 1.3.0.1 - Native Instruments)
Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.13 - Native Instruments)
Native Instruments Supercharger (HKLM-x32\...\Native Instruments Supercharger) (Version: 1.3.1.45 - Native Instruments)
Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.1 - Native Instruments)
Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.3 - Native Instruments)
Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.3 - Native Instruments)
Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.6 - Native Instruments)
Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.3 - Native Instruments)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version:  - )
NVIDIA PhysX v8.10.29 (HKLM-x32\...\{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}) (Version: 8.10.29 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.15.4 - OBS Project)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Opera Stable 39.0.2256.71 (HKLM-x32\...\Opera 39.0.2256.71) (Version: 39.0.2256.71 - Opera Software)
Oracle VM VirtualBox 5.1.4 (HKLM\...\{4EF3FBF6-697D-440A-AADA-7F5D39B73E62}) (Version: 5.1.4 - Oracle Corporation)
PA Free Bundle V1 1.0.1 (HKLM\...\PA Free Bundle V1_is1) (Version:  - Plugin Alliance)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{DF91FC8F-0D43-415b-BB5D-22533FC1CC1A}) (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.) Hidden
PC Inspector File Recovery (HKLM-x32\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
Personal Backup 5.8.3.1 (HKLM-x32\...\Personal Backup 5_is1) (Version: 5.8.3.1 - Dr. J. Rathlev)
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Daybreak Games)
PlanetSide 2 (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\DG0-PlanetSide 2) (Version:  - Sony Online Entertainment)
PlayMemories Home (HKLM-x32\...\{94F4815B-755A-4FFA-AFDC-EE8FE776981E}) (Version: 5.1.00.12260 - Sony Corporation)
Plogue sforzando v1.845 (HKLM\...\__ARIA_1014___is1) (Version: v1.845 - Plogue)
PMB_ModeEditor_ACMC (x32 Version: 10.1.00 - Sony Corporation) Hidden
PMB_ServiceUploader (x32 Version: 10.1.00 - Sony Corporation) Hidden
Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Process Hacker 2.38 (r343) (HKLM\...\Process_Hacker2_is1) (Version: 2.38.0.343 - wj32)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder)
SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden
SampleTank 3 version 3.6.3 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.6.3 - IK Multimedia)
SampleTank FREE (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.5 - IK Multimedia)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Scarlett MixControl 1.8 (HKLM-x32\...\Saffire USB 26_is1) (Version: 1.8 - Focusrite Audio Engineering Limited)
Shotcut (HKLM-x32\...\Shotcut) (Version:  - )
Sonigen Modular version  (HKLM-x32\...\Sonigen Modular_is1) (Version:  - )
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sugar Bytes Consequence 1.5.1 (HKLM\...\Consequence_is1) (Version: 1.5.1 - Sugar Bytes)
Sugar Bytes Consequence Library 1.0 (HKLM\...\Consequence Library_is1) (Version: 1.0 - Sugar Bytes)
Sugar Bytes Cyclop 1.2.0 (HKLM\...\Cyclop_is1) (Version: 1.2.0 - Sugar Bytes)
Sugar Bytes Turnado 1.6.1 (HKLM\...\Turnado_is1) (Version: 1.6.1 - Sugar Bytes)
SynthMaster 2.6 FREE Player VST/VSTi/RTAS/AAX Software Synthesizer version 2.6.16 (HKLM-x32\...\{C7E3DF86-9608-4133-898D-84F49781B0D7}_is1) (Version: 2.6.16 - KV331 Audio)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Tom Clancy's The Division Beta (HKLM-x32\...\Uplay Install 2036) (Version:  - Ubisoft)
TP-LINK Archer T4U Driver (HKLM-x32\...\{58F414FE-74CC-42A0-9D86-A089849C510A}) (Version: 1.3.1 - TP-LINK)
Uplay (HKLM-x32\...\Uplay) (Version: 10.0 - Ubisoft)
USBPcap 1.0.0.7 (HKLM\...\USBPcap) (Version:  - )
UVI Workstation x64 2.6.2 (HKLM\...\UVI Workstation x64_is1) (Version: 2.6.2 - UVI)
Vengeance Producer Suite - Scope 1.0.4 (HKLM-x32\...\{8BB53BA8-F9CC-4A53-A498-1AF91D040F63}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.16 - IDRIX)
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 4.02 - NCH Software)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.3 - VideoLAN)
Voxengo MSED (HKLM\...\Voxengo MSED_is1) (Version: 2.9 - Voxengo)
Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 2.9 - Voxengo)
Voxengo Stereo Touch (HKLM\...\Voxengo Stereo Touch_is1) (Version: 2.8.1 - Voxengo)
Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0-2) (Version: 1.0.17.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.17.0 (Version: 1.0.17.0 - LunarG, Inc.) Hidden
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows-Treiberpaket - Focusrite USB 2.0 Audio Driver (03/17/2014 2.5.128.1) (HKLM\...\D86E353566ECB4A7ADA159C02FE46D0BACC4FA6B) (Version: 03/17/2014 2.5.128.1 - Focusrite)
WinHTTrack Website Copier 3.48-21 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.21 - HTTrack)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Wise Data Recovery 3.84 (HKLM-x32\...\Wise Data Recovery_is1) (Version: 3.84 - WiseCleaner.com, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01244CD2-DBF2-48E1-81DC-F60B80EEE392} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {03F920C6-176B-4700-9E50-08D5840C4166} - System32\Tasks\Process Explorer-USER1111-coy => /t
Task: {075A64BD-9634-4175-A1DE-5E2E064FA999} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-03] (AVAST Software)
Task: {0EA96307-8DAE-44A1-A2A3-D458155E23ED} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-08-11] (Advanced Micro Devices, Inc.)
Task: {1069660B-6FC5-4CE6-AFE7-3786642ED336} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {14C02CA1-F88F-4C59-8F41-CFAC350FD451} - System32\Tasks\{0811E0DB-12EE-44C5-A4D8-D55DD584F3C5} => pcalua.exe -a T:\My-Folder\Downloads\jxpiinstall.exe -d T:\My-Folder\Downloads
Task: {160384B2-06DE-47AC-BCC7-1F03CA7BADAE} - System32\Tasks\Opera scheduled Autoupdate 1454056698 => C:\Program Files (x86)\Opera\launcher.exe [2016-09-05] (Opera Software)
Task: {4381E764-24C9-4867-8805-ABCB2A0CB9AF} - System32\Tasks\{0C1634C6-C250-4E27-A142-2F29C3222992} => pcalua.exe -a "T:\My-Folder\Downloads\Kilohearts Installer [9fWsNErBk_i8x5l9ypGT].exe" -d T:\My-Folder\Downloads
Task: {5D18CDE8-3944-4BC3-AD76-8EF70632951F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-13] (Adobe Systems Incorporated)
Task: {8B78B8B8-3FE2-4422-9723-1F17EF47FE78} - System32\Tasks\SafeZone scheduled Autoupdate 1466231385 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-04-15] (Avast Software)
Task: {8EDC83D7-53F0-44F6-B328-F893CBF2A114} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {D2F7A975-9505-4299-8CD2-33556D356874} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D4B25374-61A3-48AA-BFEC-F796411ECD2B} - System32\Tasks\{CA0F6697-59F4-4AAE-A353-26AF764EBAEB} => pcalua.exe -a T:\My-Folder\Production\grizzly-v1.1b-se1.160.exe -d T:\My-Folder\Production
Task: {DC35CD34-092D-4CA0-840A-353ECDEEB877} - System32\Tasks\{7476B4B9-F9F5-4227-A7EB-B7B0D1323EB9} => pcalua.exe -a T:\My-Folder\Downloads\VirtualBox-5.0.26-108824-Win.exe -d T:\My-Folder\Downloads
Task: {E95B1BAA-1B66-4A43-9F29-F4E2DDC90DB6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-06-15] (AVAST Software)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\coy\Favorites\Downloadseite von NCH Software.lnk -> hxxp://www.nchsoftware.com/de/index.html

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2013-06-04 11:41 - 2013-06-04 11:41 - 00936728 ____R () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2015-11-24 20:32 - 2015-11-24 20:32 - 00216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2015-11-13 17:05 - 2015-03-19 09:41 - 00048856 _____ () C:\Windows\runSW.exe
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-06-25 17:39 - 2015-06-25 17:39 - 00191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2016-01-15 22:44 - 2016-01-15 22:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-06-15 05:16 - 2016-06-15 05:16 - 00123344 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-06-15 05:16 - 2016-06-15 05:16 - 00135816 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-04 18:34 - 2016-09-04 18:34 - 03080312 _____ () C:\Program Files\AVAST Software\Avast\defs\16090400\algo.dll
2016-06-15 05:16 - 2016-06-15 05:16 - 00309912 _____ () C:\Program Files\AVAST Software\Avast\browser_pass.dll
2016-06-15 05:16 - 2016-06-15 05:16 - 00479680 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-09-05 17:02 - 2016-09-05 17:02 - 03080312 _____ () C:\Program Files\AVAST Software\Avast\defs\16090500\algo.dll
2016-09-06 07:08 - 2016-09-06 07:08 - 03080312 _____ () C:\Program Files\AVAST Software\Avast\defs\16090502\algo.dll
2016-09-08 19:10 - 2016-09-08 19:10 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090801\algo.dll
2016-09-08 23:11 - 2016-09-08 23:11 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090802\algo.dll
2016-09-09 11:20 - 2016-09-09 11:20 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090900\algo.dll
2015-10-24 00:23 - 2016-09-05 09:11 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2015-10-24 00:23 - 2013-06-04 11:41 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2015-11-24 20:20 - 2015-11-24 20:20 - 00221696 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2015-11-24 20:14 - 2015-11-24 20:14 - 00087552 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2015-11-24 20:09 - 2015-11-24 20:09 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2015-11-24 20:20 - 2015-11-24 20:20 - 00073728 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2015-11-24 20:22 - 2015-11-24 20:22 - 00751104 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
2015-11-03 09:18 - 2013-05-14 00:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-12-14 17:13 - 2015-12-14 17:13 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C [217]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Software\Classes\regfile: regedit.exe "%1" <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\coy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.102.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^coy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: f.lux => "C:\Users\coy\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: MobileBroadband => C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent
MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun
MSCONFIG\startupreg: Process Hacker 2 => "C:\Program Files\Process Hacker 2\ProcessHacker.exe" -hide
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

construct · 09.09.2016, 14:44

Der Rest von Addition:

Code:

ATTFilter

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C3A6188C-8842-4337-8196-6554C4770664}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FAE7D3F1-ED42-47BF-96C3-4A1F15CE7A12}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{2DA271D6-F2A9-4367-BCDC-2CB0F40E254B}C:\program files (x86)\bitwig studio\bitwig studio.exe] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [UDP Query User{D23A57CF-BEF7-4C7F-ABBB-FD70367F66BC}C:\program files (x86)\bitwig studio\bitwig studio.exe] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{493D06BA-205E-4192-AAA4-4CDC43C3BAD3}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{39577B13-C2BF-42F6-8DD1-626ABA61A103}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{A19DBD2B-2346-45F9-AC47-B6290D634603}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{F2C6E828-9132-4891-8A0D-EFE3C0F1A602}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{3F69C447-E05B-4240-B286-710F3FEC3B4F}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{A2EC08E4-9983-46B8-8388-280AB8DDC794}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{EC50B221-6994-49F6-87EA-B58302480FAF}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{4300CCD0-0470-4C9E-8708-C8BC2FBBDB86}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{92BA41E0-BDF1-4F98-9890-AA84AC8139E8}] => (Block) c:\windows\explorer.exe
FirewallRules: [{991DC183-0220-4793-AEF8-BC654937F852}] => (Block) c:\windows\explorer.exe
FirewallRules: [{5821C074-04CA-4BCD-B403-56308A0467BF}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{86E32DAC-7355-4430-950E-787E48E3B312}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [TCP Query User{596502F1-B727-4D89-8B89-C18804B4CC8C}C:\program files\oracle\virtualbox\virtualbox.exe] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [UDP Query User{842D2CA0-D46B-457D-90C3-045CD604521D}C:\program files\oracle\virtualbox\virtualbox.exe] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{86C55116-5ACB-431D-82D0-D47E68E88319}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{723FE0CD-0846-4B04-85EC-CCDC1FD55824}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{A0DEE8B2-901C-4D00-AA8D-67F57FC91A7A}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{FCC6019A-869A-46CE-9DA6-4281BABE8793}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{045D30C3-D3D2-4989-B17B-A77E1D1E92F6}] => (Block) c:\windows\explorer.exe
FirewallRules: [{4A5A520A-7EE9-4A9A-B19B-1CD057D19F4B}] => (Block) c:\windows\explorer.exe
FirewallRules: [{C46567DF-BAF2-42CB-9BC4-4EF77F9EC6A0}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{CC5F943F-B8F3-4D45-86C5-C24F9A9DDA65}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{48D855F8-83E4-4C71-B29E-458BAE6C3029}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{CE0D6764-8463-46F2-ABEC-F73C4D44C1BB}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{0E15D599-0F63-4F6F-8F86-F0EEEDDFAF96}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{F3F009CC-1018-4C3A-8EE9-8E6A7F1170F0}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{68E770B0-2D19-4ACF-B321-CAC68B5781A9}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{BECFE731-8BF1-4D48-A591-D7285D163518}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{4C90B2D8-113C-449B-B827-DC969F3150A4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AC4E0757-F905-4DF6-9261-53E4CBFB04FD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{00595824-C993-4CAA-AEE2-0874EE366B59}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{406CCA19-5605-40F0-ACB8-C0AAD5EC3BEF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{657BC9BB-6239-4FC9-AB10-A306A0E5A6FD}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{07E55D7D-01DA-4FEC-AD19-4030DE18EA53}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{C04F8D32-BCA3-4E67-AB4E-D09E0D695F2B}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{B20877F0-7C4B-458F-BF59-A595E168446E}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{7445B4E8-D3EF-4301-8F8D-93981066BCBB}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{2496DD43-9C3A-4EDC-B704-24D3F5E5849B}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{DABF5E7A-C07C-4E73-88CD-7CAE58449412}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{D8CA5855-C813-469A-A120-55E60E7D1C59}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{88433252-BE13-4CD9-A2A1-2AD1B6059648}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{E58B7AEA-D5B9-4678-AEF7-C966C15F9708}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{C96E6619-A8C0-4036-85EB-362751684EC5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0A42A8EB-4585-4726-9EBD-B2361FCB5152}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3D13964E-2A1B-4E31-AEB0-1B061BEB8A2B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C0911A94-E92A-4167-93D0-4696CAA2E23E}] => (Allow) D:\Portal\Steam.exe
FirewallRules: [{40952C2F-0260-4C28-A6C5-B10AFC2B0F52}] => (Allow) D:\Portal\Steam.exe
FirewallRules: [{CC9679C3-9CB5-4D4B-8D34-D4D8CE628CE6}] => (Allow) D:\Portal\bin\steamwebhelper.exe
FirewallRules: [{AA89BA58-B189-49AB-A110-46598B1FA524}] => (Allow) D:\Portal\bin\steamwebhelper.exe
FirewallRules: [{1CCEBFB9-AC2E-4310-9A49-5C2F2B5E7DBA}] => (Allow) D:\Portal\SteamApps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{5899ACCC-58DC-4297-8D5B-D9A2FD25EE64}] => (Allow) D:\Portal\SteamApps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{E0697F28-0AE5-4434-A117-6D44DC7490AE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{677E225B-35BE-4AAD-8497-05C28E762C55}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{448194E1-1BD9-4CAF-AC1A-D36E4FE700DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{C908C4E8-783E-4034-B1F7-1D8E39831C54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{2C3392FB-636E-4A3D-AFD5-3C38C4A79027}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{3A694F5C-8C27-430D-892E-9EB6BF4138A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [TCP Query User{F39A3CBE-679E-483A-A82C-C86D5E3DEEAB}D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [UDP Query User{ADBC0FD8-795F-42D9-8229-C4B48A494A89}D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [{7DB09F01-E0F3-4D3F-B686-C57EB2F894AA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{AE6D1BA3-FFF8-479D-8E20-3E7B67DF27B2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{017548E2-9991-43C7-9990-D60AEC41A61E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B1D3669-748A-4CB9-A698-FF582A4E6390}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{8FA121E9-248E-4CC1-814E-52C8D1B62755}T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe] => (Allow) T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe
FirewallRules: [UDP Query User{A5129F5D-72DA-46BB-95E4-E97B17E7F9EC}T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe] => (Allow) T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe
FirewallRules: [TCP Query User{3587A4AB-3920-4A36-A6F6-463FAF3E91EA}D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [UDP Query User{A4134721-0B5B-4D0D-AF7D-F3AB80EB6BF3}D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [{CF175089-4BEF-42FA-944E-E87C25652FA5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{434410F5-AAA8-4CB8-8D22-4CE50581C350}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{739B148E-C52B-49F4-9A67-E23167810D41}] => (Allow) D:\DEUS-EX\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{17843533-279B-42A1-984A-180AF88CA4A8}] => (Allow) D:\DEUS-EX\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{6ABBC854-CA02-44BB-8EA4-714A30D9210B}] => (Allow) D:\DEUS-EX\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D1D5B487-641D-4392-93B4-E76D60748C0B}] => (Allow) D:\DEUS-EX\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [TCP Query User{C5FD3490-54F5-4F86-BD67-05DF0A43ED78}D:\steam\steamapps\portal 2\portal2.exe] => (Allow) D:\steam\steamapps\portal 2\portal2.exe
FirewallRules: [UDP Query User{109CD390-02C9-419A-82B2-A79D92EFEB20}D:\steam\steamapps\portal 2\portal2.exe] => (Allow) D:\steam\steamapps\portal 2\portal2.exe
FirewallRules: [{830C1790-1C16-4BEA-B86B-A6A9B0A3120D}] => (Allow) D:\DEUS-EX\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{727C5FA4-825B-4EA3-B24B-A812A78AB439}] => (Allow) D:\DEUS-EX\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{83EE34BD-005C-4A3F-B7BF-A5DE6DABF2EF}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{BCDD5400-52E5-4EDB-8F22-4EDE6DA6D447}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{8BCCC1D9-5AEF-4DBD-9428-35245A666DB6}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0AACF4AC-50E4-48AF-AD55-87CD528E4D60}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C2D1886C-3880-4D51-B35B-A3C52AF983F5}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{84CEE5E1-F6A3-4A26-8498-5D97FACD6B5A}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{72CD5C87-68B7-4231-AAB0-8B5DA3B6D91C}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{7A946F76-D8CC-4C9A-AF93-8DE859160F41}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{10D0493F-F465-4365-B455-FA0BB521E8E5}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{97242202-04A9-4EB0-8F15-1D1EF1F8CB3F}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BFD4F44F-066F-4439-A8EF-89010BE33F88}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{678BBC95-1B69-4ABE-8730-C1F1824D6B32}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{E059F920-0E69-4379-82DF-31A93DD7EF01}] => (Block) c:\program files\cpuid\hwmonitor\hwmonitor.exe
FirewallRules: [{5E1A1DF9-F0E9-4492-91D8-BCD98FA5D357}] => (Block) c:\program files\cpuid\hwmonitor\hwmonitor.exe
FirewallRules: [{3B67F209-1CCA-439C-8978-C86F7D55A4AF}] => (Block) t:\my-folder\production\plugins\sforzando\sforzando x64.exe
FirewallRules: [{9409E26C-BAC3-4228-9E1C-ECF1141C5016}] => (Block) t:\my-folder\production\plugins\sforzando\sforzando x64.exe
FirewallRules: [{D0DFC248-C299-43B7-BB3C-D908320963D7}] => (Block) c:\windows\system32\msiexec.exe
FirewallRules: [{BE5403EE-1D66-4E97-90F1-D2C31F937471}] => (Block) c:\windows\system32\msiexec.exe
FirewallRules: [{392B8BED-16E1-4D3E-883F-7E3A158BFD1E}] => (Block) c:\program files (x86)\steam\steamapps\common\moon base alpha\binaries\win32\moonbasealphagame.exe
FirewallRules: [{C7BFF11C-74AC-4D99-A770-40411FEB8198}] => (Block) c:\program files (x86)\steam\steamapps\common\moon base alpha\binaries\win32\moonbasealphagame.exe
FirewallRules: [{5AE84138-ADFF-4E0A-BA0E-FCF294F37731}] => (Block) c:\program files (x86)\adobe\adobe photoshop cs2\photoshop.exe
FirewallRules: [{39C15C43-C741-41A2-9B91-9120C6763173}] => (Block) c:\program files (x86)\adobe\adobe photoshop cs2\photoshop.exe
FirewallRules: [{3A091528-134F-4F4C-9E78-7EF9B16915D5}] => (Allow) D:\Anno2205\Ubisoft Game Launcher\games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [TCP Query User{FDF2A2A1-7E99-408C-B3B4-085228CD89E0}D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{9A941200-FB57-4FEF-9EA8-648E2E0E3F02}D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [TCP Query User{A74FE850-0EAF-4AF6-9126-9CFBF0B57E3C}D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{97507771-F560-43BD-B319-A38B7817E82C}D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
FirewallRules: [{C9E4EE16-1A71-4281-A751-29BE01FBA983}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{36CC0EFE-6BDC-4965-BE3B-E3EC19051CA6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{98379970-05E8-4C67-9C7C-D5EB8193E4C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7C08BFC-17EB-4F07-87A3-4D95E63E2088}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9EED2BA0-29BE-45C7-A115-13A90DB3FA19}] => (Block) c:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{14A92DD3-04A0-4496-BA4D-B8306FB47243}] => (Block) c:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{A3AE046F-4844-4DEA-B9B2-51B437A4A518}] => (Block) c:\program files\internet explorer\iexplore.exe
FirewallRules: [{94048BCB-D255-4830-A7ED-F3FA6950BF17}] => (Block) c:\program files\internet explorer\iexplore.exe
FirewallRules: [{486B1671-98F0-4AD5-AF00-5FAF79EB535C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B1968E0A-2C9B-4B8F-9140-216811EDFBE9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DEF6512F-B1D4-4FB7-A979-BA1A60F4ABBC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D81AE651-6E5C-428E-855A-174C44BDA4B8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{FA87F2CE-9CFD-42BD-9192-E3F338006BCA}C:\program files (x86)\jack\jackd.exe] => (Block) C:\program files (x86)\jack\jackd.exe
FirewallRules: [UDP Query User{08C8D19A-6383-4CC0-94A2-4495ED1DC099}C:\program files (x86)\jack\jackd.exe] => (Block) C:\program files (x86)\jack\jackd.exe
FirewallRules: [TCP Query User{ED7F5783-3085-4C19-899F-6C9AE4418E83}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [UDP Query User{5A4E8E57-8DEE-4A9C-BD14-B8731AD1A4BD}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [{3511FB65-7CF3-4F8C-A979-413943939BD6}] => (Allow) D:\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{CEB8DC44-42CB-4CF5-985A-88FAE92172AF}] => (Allow) D:\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{C5BC2D0F-A28F-4607-9B6C-CD9225F9A405}] => (Allow) D:\Tom Clancy's The Division Beta\TheDivision.exe
FirewallRules: [TCP Query User{0070FF0F-083B-4246-96D2-60263FA34574}C:\program files\winhttrack\winhttrack.exe] => (Block) C:\program files\winhttrack\winhttrack.exe
FirewallRules: [UDP Query User{8F1CC8A6-5A98-4B95-AB16-57908E9E3F29}C:\program files\winhttrack\winhttrack.exe] => (Block) C:\program files\winhttrack\winhttrack.exe
FirewallRules: [TCP Query User{535F3417-7A56-496D-8B68-D141E0485919}D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{D41AA536-8189-47C6-AC2A-C644D46D609B}D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe
FirewallRules: [{E2B8ACC0-A30C-4FCD-A1CE-CEF53D295E1E}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{555DCD98-7381-4B12-8D58-FAD9AB202851}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{196DEC98-69B5-4E02-8E96-687F2CB18854}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{4403C2CB-E0BA-4C98-9CFF-37A5C14836BD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{BDD75092-4A4A-4C40-9E9D-F6A22687E815}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{6F5C46B3-C5B3-4F31-9AC8-C9CE9A2EE0EB}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{F9DE5C74-ADA3-4FB8-ACAB-C33E5EA63C65}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{81613F4A-CBA5-4189-B0AE-CA3D9BF86D7B}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{014FDA46-CF4B-4D8B-B49D-8C2BAADE0BDD}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{01679B92-96DA-4CCE-9F09-9D5A0E58E6AF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{95C31838-61D3-488C-891E-8B66E624450B}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{1CFAC638-F0F2-4789-AFB2-6404BF3E88DC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{E8A96067-F7D3-4658-99A9-0AD56A7B7A5D}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{616B969C-CCF0-4659-865A-7D5189784773}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [TCP Query User{1754B268-65A7-42E4-9DCE-C8F92F20DBBE}D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [UDP Query User{382A7195-B50A-4ABA-B89E-0D711C044A91}D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [TCP Query User{67BE5B7E-F4C2-4981-9933-E07320D8DFAB}D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [UDP Query User{CF3A183B-C34E-4964-B2A5-E0DFFDCADE25}D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [{2C0367E1-2295-40D0-8C1D-F2B1DA58E4F3}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{18581CA1-C791-47CE-9943-121BCC571C07}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5AACFCDD-9AB4-4417-A19D-D74D74B5AABF}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4A8205F1-07E4-40C7-8756-65E79391C62A}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1FDD8FE3-F1F2-4A16-9663-7150B0717BCB}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0EE44A6E-E381-41A5-B24A-E31EB30A0E58}] => (Allow) C:\Users\coy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{F999A344-A1CC-4A59-B5C6-C62103532408}D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [UDP Query User{6FCF8948-BDC5-4328-B42B-928CCD8031F5}D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [{6DDEA35B-6D8D-4332-801B-B7B685C1F99F}] => (Block) c:\windows\system32\gwx\gwxux.exe
FirewallRules: [{934A41EE-42E8-416E-8C0C-0788A85B2EBD}] => (Block) c:\windows\system32\gwx\gwxux.exe
FirewallRules: [{840AF8CE-2DDE-47F8-8B04-4885E0D611F9}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{78194FBB-870B-4B1C-83B3-60B17148B13A}] => (Allow) C:\Program Files\DaVinci Resolve\Resolve.exe
FirewallRules: [{6AFF3A2A-E89E-4E56-AA70-FA0D2C9A7C2D}] => (Allow) C:\Program Files\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{BFCF23D5-F0EC-4750-99AE-7179067C7218}] => (Allow) C:\Program Files\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{8F24DA1F-1CBF-4793-90FD-EF9950CDDFB9}] => (Allow) C:\Program Files\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{57ADCFCA-1460-45CD-8834-325C1DA31F04}] => (Allow) C:\Program Files\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{3AED76FB-9BC3-4A88-8D39-47CC5052AF4F}] => (Allow) C:\Program Files\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{6AAF9014-E299-4B18-90B9-80EF2D6A9BE4}] => (Allow) C:\Program Files\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{74A142BB-B2EE-42E4-8A8F-FE6718D6AD81}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [TCP Query User{3BCAF9D9-DC8B-4F12-9EC8-0616D8113074}C:\program files\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\davinci resolve\dpdecoder.exe
FirewallRules: [UDP Query User{9D9A4E60-9A57-41EC-AA33-FA768960F3C6}C:\program files\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\davinci resolve\dpdecoder.exe
FirewallRules: [TCP Query User{9E172FA9-F958-4DB8-A275-1B021F049F09}D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [UDP Query User{A956E397-6711-405F-9324-D4058DF0D4DE}D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [TCP Query User{91532847-6FB3-4DD8-B6DD-8B6BB2F77D25}D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe
FirewallRules: [UDP Query User{214D4CB9-7F48-436B-AB48-8B4BC81573DA}D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe
FirewallRules: [TCP Query User{C69F3AC8-8F68-406A-A4FB-3EB2B5140D8B}D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [UDP Query User{A06DCEC0-2374-44EA-A034-F709A0E1493E}D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [{DDEEBFE5-D1CB-46EE-988F-A3AEFD16C290}] => (Block) t:\my-folder\production\plugins\buzz\buzz.exe
FirewallRules: [{19279FF8-5F54-4F27-895A-86C6AE0A6218}] => (Block) t:\my-folder\production\plugins\buzz\buzz.exe
FirewallRules: [{C2FE1182-8FD1-4167-9D52-BBDB32C28056}] => (Block) c:\windows\system32\gwx\gwxdetector.exe
FirewallRules: [{DCE587E7-5B9B-4C25-815D-BFA1CDAE99B6}] => (Block) c:\windows\system32\gwx\gwxdetector.exe
FirewallRules: [{CD1EC1E3-B016-4B55-A2C9-B3779BC427F1}] => (Block) c:\windows\system32\gwx\gwxconfigmanager.exe
FirewallRules: [{A79E73D7-968D-44DE-A6EB-4CF5751F216B}] => (Block) c:\windows\system32\gwx\gwxconfigmanager.exe
FirewallRules: [{ECDCDE9D-4EC0-4554-9D19-047C2F0D5FE9}] => (Block) c:\program files (x86)\image-line\fl studio 12\fl.exe
FirewallRules: [{FB2F30B7-D8B9-4ABB-ABC6-BB4B23F81879}] => (Block) c:\program files (x86)\image-line\fl studio 12\fl.exe
FirewallRules: [TCP Query User{CE2427D8-8DE7-451F-BA02-CA4DDF790262}C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe] => (Block) C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe
FirewallRules: [UDP Query User{06197F7D-EDF6-42B9-B07A-3EE6272FDD4F}C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe] => (Block) C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe

==================== Wiederherstellungspunkte =========================

30-08-2016 21:50:36 Gerätetreiber-Paketinstallation: Advanced Micro Devices, Inc. Grafikkarte
01-09-2016 19:00:15 Windows-Sicherung
02-09-2016 21:24:43 Windows Update
02-09-2016 21:51:32 Windows Update
03-09-2016 06:20:36 Installed Bitwig Studio
08-09-2016 18:29:04 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/05/2016 09:11:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/03/2016 05:22:39 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SC2_x64.exe, Version 3.5.3.45737 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 50c

Startzeit: 01d205810f565001

Endzeit: 259

Anwendungspfad: D:\Battle.net\Starcraft\StarCraft II\Versions\Base44983\SC2_x64.exe

Berichts-ID: a88769c3-7185-11e6-852d-87bb82005224

Error: (09/03/2016 01:23:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/03/2016 01:13:48 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/03/2016 01:04:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/03/2016 12:49:33 AM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3869482132-2802206346-888328520-1000}/">.

Error: (09/03/2016 12:45:02 AM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3869482132-2802206346-888328520-1000}/">.

Error: (09/03/2016 12:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/02/2016 10:57:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 48.0.2.6079, Zeitstempel: 0x57bd3628
Name des fehlerhaften Moduls: mozglue.dll, Version: 48.0.2.6079, Zeitstempel: 0x57bd2857
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000efe5
ID des fehlerhaften Prozesses: 0x2e8
Startzeit der fehlerhaften Anwendung: 0x01d2055637c2eaa0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\mozglue.dll
Berichtskennung: e06798ad-714f-11e6-b3f2-60e32713d0cb

Error: (09/02/2016 09:27:55 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3869482132-2802206346-888328520-1000}/">.


Systemfehler:
=============
Error: (09/09/2016 02:53:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (09/05/2016 09:11:44 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/05/2016 09:11:44 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Computerstandard) wird der SID (S-1-5-19) für Benutzer NT-AUTORITÄT\LOKALER DIENST von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Aktivierung (Lokal) für die COM-Serveranwendung mit CLSID 
{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}
 und APPID 
{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (09/05/2016 09:11:37 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (09/04/2016 02:50:34 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (09/04/2016 02:50:34 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 552.

Error: (09/04/2016 02:50:00 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (09/04/2016 02:50:00 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 552.

Error: (09/04/2016 02:49:27 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (09/04/2016 02:49:27 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 552.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 16321.48 MB
Verfügbarer physikalischer RAM: 12986.2 MB
Summe virtueller Speicher: 32641.15 MB
Verfügbarer virtueller Speicher: 21762.96 MB

==================== Laufwerke ================================

Drive c: (SSD-Alpha) (Fixed) (Total:238.47 GB) (Free:115.61 GB) NTFS
Drive d: (Games) (Fixed) (Total:232.88 GB) (Free:89.24 GB) NTFS
Drive e: (Backup) (Fixed) (Total:465.76 GB) (Free:21.7 GB) NTFS
Drive f: () (Removable) (Total:1.9 GB) (Free:1.86 GB) FAT
Drive r: (Bkupfiles) (Fixed) (Total:232.88 GB) (Free:139.42 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive t: (SWAP) (Fixed) (Total:931.51 GB) (Free:696.31 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B162B162)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FD1A7096)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 99D2C736)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: A1E3F745)
Partition 1: (Not Active) - (Size=238.5 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 465.8 GB) (Disk ID: EBBBAA60)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 1.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

construct · 13.09.2016, 18:24

Bump*

Passiert hier irgendwann noch was?

Wollte nur mal Fragen kein Stress.

Mitunter kommt es vor dass der Firefox 48.0.2, wen dieser 8 Stunden läuft 2.500.000 K verbraucht (sind vermutlich kilobytes) das ist ganz schön viel, meiner Meinung nach. Was dann passiert ist, dass ich keine Rückmeldung bekomme vom Browser, ich kann dann keine Streams auf Facebook schauen, ich komme dann auch nicht in die Taskbar, ich kann keine Tabs schließen, es bleibt dann irgendwann so ohne Fehlermeldung.
Tabs sind schon einige offen 8-12.

Was bleibt ist den Prozess zu beenden und ihn neu zu starten.
Der Prozess hat dann ca. 366.000 K

cosinus · 13.09.2016, 20:10

Du bist hier nicht der einzige der nach Hilfe schreit, aber kein Stress man

Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

construct · 14.09.2016, 18:30

Danke fürs Feedback.
Ich schreie doch nich.

Wenn Avast so schlecht ist dann hätte ich dazu gerne Fakten und Alternativen.
Diese werde ich auch selber zusätzlich suchen.

Ein direkten Zusammenhang zu dem Problem kann ich nicht erkennen.
Falls es keinen gibt sondern nur eben weil es nicht empfohlen wird, würde ich gerne explizit wissen was daran nicht stimmt. Ich weiß das Freeware nie ganz umsonst ist. Wenn es aber bekannt ist dass AVAST eindeutig etwas tut was verschleiert wird, möchte ich und die ganze Welt das wissen.
Ich kann mit so "pauschalisierten Aussagen" wenig anfangen.

Ich gehe ja auch nicht in den Krieg weil mir der General sagt der Gegner sei böse.

Nun, mal sehen was AVAST so versteckt und wie weit mein System dadurch benachteiligt wird.

Danke für eure Hilfe und Anteilnahme.

Ich werde nichts weiter installieren, ab jetzt.

Hoppla den Link musss ich noch lesen, Sorry.

Jumpshot? Ach du scheiße...

Ist deinstalliert.

Nochmal FRST?

cosinus · 14.09.2016, 20:27

Ist Avast jetzt runter?!

construct · 16.09.2016, 01:27

Yes Sir.
nun bin ich "schutzlos"

cosinus · 16.09.2016, 08:27

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

construct · 16.09.2016, 23:25

Nichts gefunden, daher auch kein Neustart

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.09.16.10
  rootkit: v2016.08.15.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18426
coy :: USER1111 [administrator]

17.09.2016 00:13:36
mbar-log-2016-09-17 (00-13-36).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 362976
Time elapsed: 5 minute(s), 18 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 17.09.2016, 03:07

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

construct · 17.09.2016, 07:31

Eine Frage, aber eher OT, außer wegen JRT welcher in IE was gefunden hat, wie auch der CCleaner. Wieso dammeln sich immer Daten im Internet Explorer an, obwohl ich den nicht nutze?

___

Außer der Firewall hab ich ja kein Schutz, diese blieb aber an, weil is ja kein Virenscanner.

ADW-Cleaner

Code:

ATTFilter

# AdwCleaner v6.020 - Bericht erstellt am 17/09/2016 um 08:11:04
# Aktualisiert am 14/09/2016 von ToolsLib
# Datenbank : 2016-09-17.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : coy - USER1111
# Gestartet von : T:\My-Folder\Downloads\AdwCleaner_6.020.exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\OCS
[-] Schlüssel gelöscht: HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Software\OCS
[-] Schlüssel gelöscht: HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Software\Solvusoft
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\OCS
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\OCS
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Solvusoft
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\OCS
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Solvusoft


***** [ Browser ] *****

*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [2260 Bytes] - [17/09/2016 08:11:04]
C:\AdwCleaner\AdwCleaner[S0].txt - [2443 Bytes] - [17/09/2016 08:08:23]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2406 Bytes] ##########

Für JRT habe ich die Firewall deaktiviert, nachdem ich offline gegangen bin, weil es eine Schutzsoftware ist.
Sonst kein Schutz aktiv.

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Windows 7 Home Premium x64 
Ran by coy (Administrator) on 17.09.2016 at  8:22:22,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 6 

Successfully deleted: C:\Users\cox\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IBHTLYMA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\cox\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PNNCWUF9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\cox\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XIIJVS1U (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IBHTLYMA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PNNCWUF9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XIIJVS1U (Temporary Internet Files Folder) 

Registry: 0 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.09.2016 at  8:23:07,64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Doch bisschen was gefunden. Was hat er denn genau gefunden?

cosinus · 17.09.2016, 17:51

Was hat er GENAU gefunden hat steht doch fein säuberlich im Log!

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

construct · 18.09.2016, 04:19

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-09-2016
durchgeführt von box (Administrator) auf USERxyz (18-09-2016 04:07:41)
Gestartet von T:\My-Folder\Downloads
Geladene Profile: box (Verfügbare Profile: box)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\runSW.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Comfort Software Group) C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe
(wj32) C:\Program Files\Process Hacker 2\ProcessHacker.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GlassWire.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek) C:\Windows\SwUSB.exe
(Sysinternals - www.sysinternals.com) C:\Program Files\process-explorer\procexp.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(Sysinternals - www.sysinternals.com) C:\Users\box\AppData\Local\Temp\PROCEXP64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Everything\Everything.exe
() C:\Program Files\Everything\Everything.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6625672 2016-08-11] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [FreeAC] => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [Process Hacker 2] => C:\Program Files\Process Hacker 2\ProcessHacker.exe [1721888 2016-02-26] (wj32)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Run: [GlassWire] => C:\Program Files (x86)\GlassWire\glasswire.exe [5770192 2016-08-05] (SecureMix LLC)
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {1911d85f-9ee4-11e5-8780-b04e58a100a3} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {1911d8dc-9ee4-11e5-8780-b04e58a100a3} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\MountPoints2: {ff3dbed7-a9d6-11e5-9bce-85ca1d8cd514} - G:\setup_vmb_lite.exe /checkApplicationPresence
IFEO\taskmgr.exe: [Debugger] "C:\Program Files\Process Hacker 2\ProcessHacker.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.102.1
Tcpip\..\Interfaces\{251F104E-10FE-40D6-B45C-7B106746BA2F}: [DhcpNameServer] 192.168.102.1
Tcpip\..\Interfaces\{2BB04CC1-AAC0-4F0D-B99D-878528CCFE7B}: [DhcpNameServer] 192.168.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-05] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-05] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default
FF NewTab: about:newtab
FF DefaultSearchEngine: Avast Search
FF DefaultSearchUrl: hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Avast Search
FF SelectedSearchEngine: Avast Search
FF Homepage: hxxps://duckduckgo.com
FF Keyword.URL: hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-14] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-14] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-05] (Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Extension: (WOT) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-01-02]
FF Extension: (TrashMail.com) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\spam@trashmail.net.xpi [2016-04-16]
FF Extension: (Google Translator for Firefox) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\translator@zoli.bod.xpi [2016-04-28]
FF Extension: (Cookie Controller) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{ac2cfa60-bc96-11e0-962b-0800200c9a66}.xpi [2016-07-15]
FF Extension: (NoScript) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-08-09]
FF Extension: (TinEye Reverse Image Search) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\tineye@ideeinc.com.xpi [2016-09-02]
FF Extension: (FoxyProxy Standard) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\foxyproxy@eric.h.jung [2016-09-02]
FF Extension: (HTTPS Everywhere) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\extensions\https-everywhere@eff.org.xpi [2016-09-08]
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2016-08-25]
FF Extension: (Lazarus: Form Recovery) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\lazarus@interclue.com.xpi [2016-08-21]
FF Extension: (Video DownloadHelper) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-09-17]
FF Extension: (Adblock Plus) - C:\Users\box\AppData\Roaming\Mozilla\Firefox\Profiles\xcyvelqu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-30]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-12-01] (Adobe Systems) [Datei ist nicht signiert]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-06-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2013-08-01] (ASUSTeK Computer Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-11-24] () [Datei ist nicht signiert]
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [4351440 2016-08-05] (SecureMix LLC)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2015-12-30] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-05-29] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-05-31] (Intel Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [506960 2015-12-26] (Sony Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RunSwUSB; C:\Windows\runSW.exe [48856 2015-03-19] ()
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [305032 2016-07-19] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-28] ()
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx64.sys [34512 2016-03-04] ()
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [127280 2014-03-17] (Focusrite Audio Engineering Limited.)
R1 gwdrv; C:\Windows\System32\DRIVERS\gwdrv.sys [33248 2015-05-29] (SecureMix LLC)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2016-02-14] (REALiX(tm))
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-18] (Malwarebytes)
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [112408 2015-12-15] ()
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13512 2015-12-09] ()
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2978520 2015-01-15] (Realtek Semiconductor Corporation                           )
R3 USBPcap; C:\Windows\System32\DRIVERS\USBPcap.sys [38888 2014-02-19] (USBPcap)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [121248 2016-08-16] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [195936 2016-08-16] (Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [135824 2016-08-16] (Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [195416 2016-01-26] (IDRIX)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-18 02:15 - 2016-09-18 02:15 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-09-17 08:05 - 2016-09-18 03:09 - 00000000 ____D C:\AdwCleaner
2016-09-17 00:13 - 2016-09-17 00:22 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-17 00:12 - 2016-09-17 00:22 - 00000000 ____D C:\Users\box\Desktop\mbar
2016-09-16 09:52 - 2016-09-16 09:52 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2016-09-16 09:52 - 2016-09-16 09:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-09-14 20:15 - 2015-10-24 15:29 - 58068818 _____ C:\Users\box\Desktop\creaplex.wav
2016-09-13 11:39 - 2016-09-13 11:40 - 00000000 ____D C:\Users\box\Downloads\Ebook-pics
2016-09-13 11:29 - 2016-09-13 11:29 - 00008306 _____ C:\Users\box\Downloads\Testseite Ebookinside.htm
2016-09-13 11:29 - 2016-09-13 11:29 - 00000000 ____D C:\Users\box\Downloads\Testseite Ebookinside-Dateien
2016-09-13 05:19 - 2016-09-13 11:54 - 00024617 _____ C:\Users\box\Documents\Rundfunkrecht.odt
2016-09-12 22:37 - 2016-09-12 22:37 - 00001006 _____ C:\Users\box\Desktop\Sundog.lnk
2016-09-12 09:07 - 2016-09-12 21:58 - 00009058 _____ C:\Users\box\Documents\Filme to watch.odt
2016-09-12 05:14 - 2016-09-12 05:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sundog
2016-09-12 05:14 - 2016-09-12 05:14 - 00000000 ____D C:\Program Files (x86)\Sundog
2016-09-11 02:35 - 2016-09-11 02:41 - 00340952 _____ C:\Users\box\Desktop\wrapper improve.psd
2016-09-11 02:27 - 2016-09-11 02:27 - 01398604 _____ C:\Users\box\Desktop\Browser improve.psd
2016-09-09 15:13 - 2016-09-18 04:07 - 00000000 ____D C:\FRST
2016-09-05 09:11 - 2016-09-18 03:08 - 00000022 _____ C:\Windows\S.dirmngr
2016-09-03 06:21 - 2016-09-03 06:21 - 00002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitwig Studio.lnk
2016-09-03 06:21 - 2016-09-03 06:21 - 00000000 ____D C:\Program Files (x86)\Bitwig Studio
2016-09-03 01:14 - 2016-09-03 01:14 - 00001310 _____ C:\Users\box\Desktop\Scarlett MixControl.lnk
2016-09-03 01:14 - 2016-09-03 01:14 - 00001286 _____ C:\Users\Public\Desktop\Scarlett MixControl.lnk
2016-09-03 00:25 - 2016-09-03 00:25 - 00222926 _____ C:\Users\box\Downloads\b3a solo - Pornhub.com.htm
2016-09-02 21:54 - 2016-09-02 21:54 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\Windows\PCHEALTH
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse
2016-09-02 21:54 - 2016-09-02 21:54 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2016-09-02 21:51 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-02 21:51 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-30 21:51 - 2016-08-30 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2016-08-28 10:44 - 2016-08-28 10:44 - 00001211 _____ C:\Users\box\Desktop\Mint64.lnk
2016-08-27 15:52 - 2016-08-27 16:06 - 1571815424 _____ C:\Users\box\Downloads\linuxmint-18-cinnamon-32bit.iso
2016-08-27 13:05 - 2016-08-27 13:05 - 00001085 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2016-08-27 13:05 - 2016-08-27 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2016-08-27 13:05 - 2016-08-16 20:18 - 00920168 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2016-08-27 13:05 - 2016-08-16 20:18 - 00149256 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2016-08-24 16:01 - 2016-08-24 16:01 - 00002092 _____ C:\Users\box\Documents\082016.txt

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-18 04:02 - 2015-11-09 08:20 - 00000000 ____D C:\Program Files\Everything
2016-09-18 03:35 - 2016-04-04 18:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-18 03:16 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-18 03:16 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-18 03:13 - 2011-04-12 09:43 - 00699092 _____ C:\Windows\system32\perfh007.dat
2016-09-18 03:13 - 2011-04-12 09:43 - 00149232 _____ C:\Windows\system32\perfc007.dat
2016-09-18 03:13 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-18 03:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-18 03:08 - 2016-02-13 11:20 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-09-18 03:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-18 03:08 - 2009-07-14 06:45 - 00320000 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-18 03:00 - 2016-02-13 22:48 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-18 02:47 - 2016-06-14 11:44 - 00000000 ____D C:\Users\box\AppData\Local\CrashDumps
2016-09-18 02:39 - 2015-12-06 05:14 - 00000000 ____D C:\Users\box\AppData\Local\Ubisoft Game Launcher
2016-09-18 02:17 - 2015-10-23 20:39 - 00074048 _____ C:\Users\box\AppData\Local\GDIPFONTCACHEV1.DAT
2016-09-18 02:11 - 2015-11-22 18:26 - 00000000 ____D C:\Users\box\AppData\Local\Downloaded Installations
2016-09-17 19:09 - 2015-10-26 01:32 - 00000000 ____D C:\Users\box\AppData\Roaming\vlc
2016-09-17 09:02 - 2015-11-02 08:40 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-17 00:12 - 2016-02-13 22:48 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-17 00:09 - 2015-11-04 18:52 - 00000000 ____D C:\Users\box\AppData\Local\Battle.net
2016-09-16 21:38 - 2015-11-04 18:51 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-16 09:52 - 2016-06-14 11:09 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-09-14 05:35 - 2016-04-04 18:24 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-14 05:35 - 2015-11-06 03:37 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-14 05:35 - 2015-11-06 03:37 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-14 05:35 - 2015-11-06 03:37 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-14 05:35 - 2015-11-06 03:37 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-12 09:45 - 2015-10-25 15:27 - 00000000 ____D C:\Users\box\AppData\Local\ElevatedDiagnostics
2016-09-11 23:27 - 2016-02-07 20:49 - 00011968 _____ C:\Users\box\Documents\Serien-View-Status.odt
2016-09-10 07:31 - 2015-10-31 20:07 - 00000189 _____ C:\Users\box\Documents\SongenModularErrorLog.txt
2016-09-09 05:11 - 2015-10-23 22:06 - 00000000 ____D C:\Users\box\AppData\Local\Bitwig Studio
2016-09-09 03:08 - 2016-07-26 23:34 - 00000000 ____D C:\Users\box\AppData\Roaming\Tokyo Dawn Labs
2016-09-08 08:25 - 2015-10-31 12:43 - 00000000 ____D C:\Users\box\.VirtualBox
2016-09-07 07:14 - 2016-01-29 10:38 - 00003872 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1454056698
2016-09-07 07:14 - 2016-01-29 10:36 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-05 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-09-03 01:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-03 01:14 - 2015-11-07 06:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite
2016-09-03 00:45 - 2015-10-27 03:07 - 00000000 ____D C:\Windows\Minidump
2016-09-02 21:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-09-02 21:28 - 2016-05-12 22:32 - 00000000 ____D C:\Users\box\AppData\Roaming\uTorrent
2016-08-30 21:51 - 2016-02-12 01:20 - 00000000 ____D C:\Program Files\AMD
2016-08-30 21:51 - 2015-11-22 18:26 - 00000000 ____D C:\Program Files (x86)\AMD
2016-08-30 21:48 - 2016-02-12 01:18 - 00000000 ____D C:\AMD
2016-08-30 13:13 - 2016-02-13 22:48 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-08-30 13:13 - 2016-02-13 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-08-30 13:13 - 2016-02-13 22:48 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-08-27 17:54 - 2015-11-22 06:25 - 00000000 ____D C:\Users\box\AppData\Roaming\Audacity
2016-08-27 16:05 - 2015-10-31 12:57 - 00000000 ____D C:\Users\box\VirtualBox VMs
2016-08-27 15:44 - 2015-10-31 09:32 - 00000000 ____D C:\Program Files\Oracle
2016-08-27 15:10 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-27 15:09 - 2016-08-02 02:59 - 1350646107 _____ C:\Users\box\Downloads\alss.16.07.27.shalina.devine.going.in.and.coming.out[et].mp4
2016-08-25 13:32 - 2015-12-19 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-24 13:05 - 2015-10-23 21:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-23 17:01 - 2016-01-24 13:02 - 00000000 ____D C:\Users\box\Documents\GEZ

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-28 01:19 - 2016-07-31 16:52 - 0000016 _____ () C:\Users\box\AppData\Roaming\msregsvv.dll
2016-01-28 12:19 - 2016-08-12 03:55 - 1249792 _____ (hxxp://www.ruby-lang.org/) C:\Users\box\AppData\Roaming\msvcr90-ruby191.dll
2016-03-04 08:38 - 2016-03-04 08:38 - 0001181 _____ () C:\Users\box\AppData\Roaming\trace_FilterInstaller.txt
2016-03-04 08:38 - 2016-03-04 08:38 - 0000000 _____ () C:\Users\box\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-08-12 20:04 - 2016-08-12 20:04 - 0015297 _____ () C:\Users\box\AppData\Local\recently-used.xbel
2015-11-01 08:16 - 2015-11-01 08:16 - 0007611 _____ () C:\Users\box\AppData\Local\Resmon.ResmonCfg
2016-01-28 01:19 - 2016-07-31 16:52 - 0000016 _____ () C:\ProgramData\autobk.inc

Einige Dateien in TEMP:
====================
C:\Users\box\AppData\Local\Temp\PROCEXP64.exe
C:\Users\box\AppData\Local\Temp\Uninstaller-4628.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-15 09:11

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-09-2016
durchgeführt von boy (18-09-2016 04:07:58)
Gestartet von T:\My-Folder\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2015-10-23 18:28:58)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3869482132-2802206346-888328520-500 - Administrator - Disabled)
boy (S-1-5-21-3869482132-2802206346-888328520-1000 - Administrator - Enabled) => C:\Users\boy
Gast (S-1-5-21-3869482132-2802206346-888328520-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.)
7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
7-Zip 16.02 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1602-000001000000}) (Version: 16.02.00.0 - Igor Pavlov)
ACP Application (Version: 2016.0811.0433.30 - Advanced Micro Devices, Inc.) Hidden
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ARIA Engine v1.8.4.4 (HKLM\...\ARIA Engine_is1) (Version: v1.8.4.4 - Plogue Art et Technologie, Inc)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bitwig Studio (HKLM-x32\...\{6886A1CD-C6C0-435F-B33D-EA674D43EA86}) (Version: 1.3.13.43068 - Bitwig GmbH)
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broforce (HKLM-x32\...\Steam App 274190) (Version:  - Free Lives)
BumBer Deluxe 1.0 (HKLM-x32\...\BumBer_0) (Version: 1.0 - beatassist.eu)
CamAlert II (HKLM-x32\...\CamAlert_is1) (Version:  - hxxp://www.coderonline.de/)
CamSpy V.5.1.2 (HKLM-x32\...\CamSpy_is1) (Version:  - (c.) André Münsterberg)
Catalyst Control Center Next Localization BR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0811.443.6667 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
ConfrontaPDF (HKLM-x32\...\ConfrontaPDF) (Version:  - )
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CPUID ROG CPU-Z 1.75 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.75 - CPUID, Inc.)
CreditMovie1 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CreditMovie2 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CreditMovie3 (x32 Version: 10.1.00 - Sony Corporation) Hidden
CrypTool 1.4.30 (HKLM-x32\...\CrypTool) (Version: 1.4.30 - )
Custom Shop version 1.7.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.7.0 - IK Multimedia)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)
DaVinci Resolve (HKLM\...\{5BE8D9B2-D7B5-4059-B9F3-BA984FD2E552}) (Version: 12.5.0052 - Blackmagic Design)
Debut Videorekorder (HKLM-x32\...\Debut) (Version: 2.17 - NCH Software)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Everything 1.3.4.686 (x64) (HKLM\...\Everything) (Version:  - )
EZ Wipe 2.9.5 (HKLM-x32\...\EZ Wipe_is1) (Version:  - XCRYSoft)
f.lux (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\Flux) (Version:  - )
Firebird v2.1 (HKLM-x32\...\Tone2 Firebird_is1) (Version:  - Tone2)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio 12.3 (HKLM-x32\...\FL Studio 12.3) (Version:  - Image-Line)
FluxCenter-32-bit (HKLM-x32\...\{694A585C-15F2-4B79-BC19-AF8D290E0E58}) (Version: 1.1.15.43404 - Flux:: sound and picture development)
Focusrite Scarlett Plug-in Suite 1.1 (HKLM-x32\...\{D7F912D4-C237-4079-966A-5044A5025CBF}}_is1) (Version: 1.1 - Focusrite Audio Engineering Ltd.)
Focusrite USB 2.0 Audio Driver 2.5.1 (HKLM\...\Focusrite USB 2.0 Audio Driver_is1) (Version: 2.5.1 - Focusrite Audio Engineering Limited.)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.73 - SecureMix LLC)
Gpg4win (2.3.0) (HKLM-x32\...\GPG4Win) (Version: 2.3.0 - The Gpg4win Project)
HFSExplorer 0.23.1 (HKLM-x32\...\HFSExplorer) (Version: 0.23.1 - Catacombae Software)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HWiNFO64 Version 5.20 (HKLM\...\HWiNFO64_is1) (Version: 5.20 - Martin Malík - REALiX)
IK Multimedia Authorization Manager version 1.0.15 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.15 - IK Multimedia)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
IL Harmor (HKLM-x32\...\IL Harmor) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
Intel Driver Update Utility (HKLM-x32\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel)
Intel(R) Driver Update Utility 2.2.0.5 (x32 Version: 2.2.0.1 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4222 - Intel Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Jing (HKLM-x32\...\{8C784F8B-89D0-4A59-A000-7EEF129E1574}) (Version: 2.9.15255.1 - TechSmith Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LUXONIX LFX-1310 (HKLM-x32\...\LUXONIX_LFX-1310) (Version: 1.4 - LUXONIX)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MergeModule_x64 (Version: 9.3.00 - Sony Corporation) Hidden
MergeModule_x86 (x32 Version: 9.3.00 - Sony Corporation) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.12 - Native Instruments)
Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments)
Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments)
Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.11.0.465 - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.6 - Native Instruments)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.2.8 - Native Instruments)
Native Instruments Guitar Rig Factory Selection for Maschine (HKLM-x32\...\Native Instruments Guitar Rig Factory Selection for Maschine) (Version:  - Native Instruments)
Native Instruments Komplete 10 (HKLM-x32\...\Native Instruments Komplete 10) (Version: 10.0.0.0 - Native Instruments)
Native Instruments Komplete 8 Players (HKLM-x32\...\Native Instruments Komplete 8 Players) (Version:  - Native Instruments)
Native Instruments Komplete Kontrol (HKLM-x32\...\Native Instruments Komplete Kontrol) (Version: 1.6.2.5 - Native Instruments)
Native Instruments Komplete Kontrol Driver (HKLM-x32\...\Native Instruments Komplete Kontrol Driver) (Version:  - Native Instruments)
Native Instruments Kontakt 3 (HKLM-x32\...\Native Instruments Kontakt 3) (Version:  - Native Instruments)
Native Instruments Kontakt 3 Factory Content (HKLM-x32\...\Native Instruments Kontakt 3 Factory Content) (Version:  - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.2.880 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Kontakt Factory Selection (HKLM-x32\...\Native Instruments Kontakt Factory Selection) (Version:  - Native Instruments)
Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.1 - Native Instruments)
Native Instruments Kore Player (HKLM-x32\...\Native Instruments Kore Player) (Version:  - Native Instruments)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
Native Instruments Mikro Prism (HKLM-x32\...\Native Instruments Mikro Prism) (Version:  - Native Instruments)
Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.3 - Native Instruments)
Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.3 - Native Instruments)
Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.5 - Native Instruments)
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.4.1512 - Native Instruments)
Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.1.1526 - Native Instruments)
Native Instruments Reaktor Blocks Wired (HKLM-x32\...\Native Instruments Reaktor Blocks Wired) (Version: 1.0.0.3 - Native Instruments)
Native Instruments Reaktor Factory Selection (HKLM-x32\...\Native Instruments Reaktor Factory Selection) (Version:  - Native Instruments)
Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.2 - Native Instruments)
Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.4 - Native Instruments)
Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.4 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.6 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: 1.1.0.1 - Native Instruments)
Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: 1.3.0.1 - Native Instruments)
Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.13 - Native Instruments)
Native Instruments Supercharger (HKLM-x32\...\Native Instruments Supercharger) (Version: 1.3.1.45 - Native Instruments)
Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.1 - Native Instruments)
Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.3 - Native Instruments)
Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.3 - Native Instruments)
Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.6 - Native Instruments)
Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.3 - Native Instruments)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version:  - )
NVIDIA PhysX v8.10.29 (HKLM-x32\...\{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}) (Version: 8.10.29 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.15.4 - OBS Project)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Opera Stable 39.0.2256.71 (HKLM-x32\...\Opera 39.0.2256.71) (Version: 39.0.2256.71 - Opera Software)
Oracle VM VirtualBox 5.1.4 (HKLM\...\{4EF3FBF6-697D-440A-AADA-7F5D39B73E62}) (Version: 5.1.4 - Oracle Corporation)
PA Free Bundle V1 1.0.1 (HKLM\...\PA Free Bundle V1_is1) (Version:  - Plugin Alliance)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{DF91FC8F-0D43-415b-BB5D-22533FC1CC1A}) (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.) Hidden
PC Inspector File Recovery (HKLM-x32\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
Personal Backup 5.8.3.1 (HKLM-x32\...\Personal Backup 5_is1) (Version: 5.8.3.1 - Dr. J. Rathlev)
PlanetSide 2 (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\DG0-PlanetSide 2) (Version:  - Sony Online Entertainment)
PlayMemories Home (HKLM-x32\...\{94F4815B-755A-4FFA-AFDC-EE8FE776981E}) (Version: 5.1.00.12260 - Sony Corporation)
Plogue sforzando v1.845 (HKLM\...\__ARIA_1014___is1) (Version: v1.845 - Plogue)
PMB_ModeEditor_ACMC (x32 Version: 10.1.00 - Sony Corporation) Hidden
PMB_ServiceUploader (x32 Version: 10.1.00 - Sony Corporation) Hidden
Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Process Hacker 2.38 (r343) (HKLM\...\Process_Hacker2_is1) (Version: 2.38.0.343 - wj32)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder)
SampleTank 3 version 3.6.3 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.6.3 - IK Multimedia)
SampleTank FREE (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.5 - IK Multimedia)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Scarlett MixControl 1.8 (HKLM-x32\...\Saffire USB 26_is1) (Version: 1.8 - Focusrite Audio Engineering Limited)
Shotcut (HKLM-x32\...\Shotcut) (Version:  - )
Sonigen Modular version  (HKLM-x32\...\Sonigen Modular_is1) (Version:  - )
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sugar Bytes Consequence 1.5.1 (HKLM\...\Consequence_is1) (Version: 1.5.1 - Sugar Bytes)
Sugar Bytes Consequence Library 1.0 (HKLM\...\Consequence Library_is1) (Version: 1.0 - Sugar Bytes)
Sugar Bytes Cyclop 1.2.0 (HKLM\...\Cyclop_is1) (Version: 1.2.0 - Sugar Bytes)
Sugar Bytes Turnado 1.6.1 (HKLM\...\Turnado_is1) (Version: 1.6.1 - Sugar Bytes)
Sundog 2.5.1 (HKLM-x32\...\Sundog) (Version: 2.5.1 - Hauke Menges)
SynthMaster 2.6 FREE Player VST/VSTi/RTAS/AAX Software Synthesizer version 2.6.16 (HKLM-x32\...\{C7E3DF86-9608-4133-898D-84F49781B0D7}_is1) (Version: 2.6.16 - KV331 Audio)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-3869482132-2802206346-888328520-1000\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
TP-LINK Archer T4U Driver (HKLM-x32\...\{58F414FE-74CC-42A0-9D86-A089849C510A}) (Version: 1.3.1 - TP-LINK)
Uplay (HKLM-x32\...\Uplay) (Version: 10.0 - Ubisoft)
USBPcap 1.0.0.7 (HKLM\...\USBPcap) (Version:  - )
UVI Workstation x64 2.6.2 (HKLM\...\UVI Workstation x64_is1) (Version: 2.6.2 - UVI)
Vengeance Producer Suite - Scope 1.0.4 (HKLM-x32\...\{8BB53BA8-F9CC-4A53-A498-1AF91D040F63}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.16 - IDRIX)
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 4.02 - NCH Software)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.3 - VideoLAN)
Voxengo MSED (HKLM\...\Voxengo MSED_is1) (Version: 2.9 - Voxengo)
Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 2.9 - Voxengo)
Voxengo Stereo Touch (HKLM\...\Voxengo Stereo Touch_is1) (Version: 2.8.1 - Voxengo)
Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0-2) (Version: 1.0.17.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.17.0 (Version: 1.0.17.0 - LunarG, Inc.) Hidden
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows-Treiberpaket - Focusrite USB 2.0 Audio Driver (03/17/2014 2.5.128.1) (HKLM\...\D86E353566ECB4A7ADA159C02FE46D0BACC4FA6B) (Version: 03/17/2014 2.5.128.1 - Focusrite)
WinHTTrack Website Copier 3.48-21 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.21 - HTTrack)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Wise Data Recovery 3.84 (HKLM-x32\...\Wise Data Recovery_is1) (Version: 3.84 - WiseCleaner.com, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3869482132-2802206346-888328520-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01244CD2-DBF2-48E1-81DC-F60B80EEE392} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {03F920C6-176B-4700-9E50-08D5840C4166} - System32\Tasks\Process Explorer-User11-boy => /t
Task: {075A64BD-9634-4175-A1DE-5E2E064FA999} - \AVAST Software\Avast settings backup -> Keine Datei <==== ACHTUNG
Task: {0AEC350F-0667-4D55-94A7-F058AF78AFAD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {0EA96307-8DAE-44A1-A2A3-D458155E23ED} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-08-11] (Advanced Micro Devices, Inc.)
Task: {1069660B-6FC5-4CE6-AFE7-3786642ED336} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {14C02CA1-F88F-4C59-8F41-CFAC350FD451} - System32\Tasks\{0811E0DB-12EE-44C5-A4D8-D55DD584F3C5} => pcalua.exe -a T:\My-Folder\Downloads\jxpiinstall.exe -d T:\My-Folder\Downloads
Task: {160384B2-06DE-47AC-BCC7-1F03CA7BADAE} - System32\Tasks\Opera scheduled Autoupdate 1454056698 => C:\Program Files (x86)\Opera\launcher.exe [2016-09-05] (Opera Software)
Task: {4381E764-24C9-4867-8805-ABCB2A0CB9AF} - System32\Tasks\{0C1634C6-C250-4E27-A142-2F29C3222992} => pcalua.exe -a "T:\My-Folder\Downloads\Kilohearts Installer [9fWsNErBk_i8x5l9ypGT].exe" -d T:\My-Folder\Downloads
Task: {5D18CDE8-3944-4BC3-AD76-8EF70632951F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14] (Adobe Systems Incorporated)
Task: {8EDC83D7-53F0-44F6-B328-F893CBF2A114} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {D4B25374-61A3-48AA-BFEC-F796411ECD2B} - System32\Tasks\{CA0F6697-59F4-4AAE-A353-26AF764EBAEB} => pcalua.exe -a T:\My-Folder\Production\grizzly-v1.1b-se1.160.exe -d T:\My-Folder\Production
Task: {DC35CD34-092D-4CA0-840A-353ECDEEB877} - System32\Tasks\{7476B4B9-F9F5-4227-A7EB-B7B0D1323EB9} => pcalua.exe -a T:\My-Folder\Downloads\VirtualBox-5.0.26-108824-Win.exe -d T:\My-Folder\Downloads

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\boy\Favorites\Downloadseite von NCH Software.lnk -> hxxp://www.nchsoftware.com/de/index.html

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2013-06-04 11:41 - 2013-06-04 11:41 - 00936728 ____R () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2015-11-24 20:32 - 2015-11-24 20:32 - 00216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2015-11-13 17:05 - 2015-03-19 09:41 - 00048856 _____ () C:\Windows\runSW.exe
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-01-15 22:44 - 2016-01-15 22:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-11-09 08:20 - 2014-08-06 03:04 - 01441792 _____ () C:\Program Files\Everything\Everything.exe
2015-10-24 00:23 - 2016-09-18 03:08 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2015-10-24 00:23 - 2013-06-04 11:41 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2015-11-24 20:20 - 2015-11-24 20:20 - 00221696 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2015-11-24 20:14 - 2015-11-24 20:14 - 00087552 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2015-11-24 20:09 - 2015-11-24 20:09 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2015-11-24 20:20 - 2015-11-24 20:20 - 00073728 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2015-11-24 20:22 - 2015-11-24 20:22 - 00751104 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
2015-11-03 09:18 - 2013-05-14 00:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\Users\boy\Desktop\creaplex.wav:AFP_AfpInfo [130]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Software\Classes\regfile: regedit.exe "%1" <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3869482132-2802206346-888328520-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\boy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.102.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^boy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: f.lux => "C:\Users\boy\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: MobileBroadband => C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent
MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun
MSCONFIG\startupreg: Process Hacker 2 => "C:\Program Files\Process Hacker 2\ProcessHacker.exe" -hide
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C3A6188C-8842-4337-8196-6554C4770664}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FAE7D3F1-ED42-47BF-96C3-4A1F15CE7A12}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{2DA271D6-F2A9-4367-BCDC-2CB0F40E254B}C:\program files (x86)\bitwig studio\bitwig studio.exe] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [UDP Query User{D23A57CF-BEF7-4C7F-ABBB-FD70367F66BC}C:\program files (x86)\bitwig studio\bitwig studio.exe] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{493D06BA-205E-4192-AAA4-4CDC43C3BAD3}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{39577B13-C2BF-42F6-8DD1-626ABA61A103}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{A19DBD2B-2346-45F9-AC47-B6290D634603}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{F2C6E828-9132-4891-8A0D-EFE3C0F1A602}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{3F69C447-E05B-4240-B286-710F3FEC3B4F}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{A2EC08E4-9983-46B8-8388-280AB8DDC794}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{EC50B221-6994-49F6-87EA-B58302480FAF}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{4300CCD0-0470-4C9E-8708-C8BC2FBBDB86}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{92BA41E0-BDF1-4F98-9890-AA84AC8139E8}] => (Block) c:\windows\explorer.exe
FirewallRules: [{991DC183-0220-4793-AEF8-BC654937F852}] => (Block) c:\windows\explorer.exe
FirewallRules: [{5821C074-04CA-4BCD-B403-56308A0467BF}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{86E32DAC-7355-4430-950E-787E48E3B312}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [TCP Query User{596502F1-B727-4D89-8B89-C18804B4CC8C}C:\program files\oracle\virtualbox\virtualbox.exe] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [UDP Query User{842D2CA0-D46B-457D-90C3-045CD604521D}C:\program files\oracle\virtualbox\virtualbox.exe] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{86C55116-5ACB-431D-82D0-D47E68E88319}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{723FE0CD-0846-4B04-85EC-CCDC1FD55824}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{A0DEE8B2-901C-4D00-AA8D-67F57FC91A7A}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{FCC6019A-869A-46CE-9DA6-4281BABE8793}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{045D30C3-D3D2-4989-B17B-A77E1D1E92F6}] => (Block) c:\windows\explorer.exe
FirewallRules: [{4A5A520A-7EE9-4A9A-B19B-1CD057D19F4B}] => (Block) c:\windows\explorer.exe
FirewallRules: [{C46567DF-BAF2-42CB-9BC4-4EF77F9EC6A0}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{CC5F943F-B8F3-4D45-86C5-C24F9A9DDA65}] => (Block) c:\program files (x86)\openoffice 4\program\soffice.bin
FirewallRules: [{48D855F8-83E4-4C71-B29E-458BAE6C3029}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{CE0D6764-8463-46F2-ABEC-F73C4D44C1BB}] => (Block) d:\customize\rainmeter\rainmeter.exe
FirewallRules: [{0E15D599-0F63-4F6F-8F86-F0EEEDDFAF96}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{F3F009CC-1018-4C3A-8EE9-8E6A7F1170F0}] => (Block) c:\program files (x86)\teamviewer\teamviewer_service.exe
FirewallRules: [{68E770B0-2D19-4ACF-B321-CAC68B5781A9}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{BECFE731-8BF1-4D48-A591-D7285D163518}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{4C90B2D8-113C-449B-B827-DC969F3150A4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AC4E0757-F905-4DF6-9261-53E4CBFB04FD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{00595824-C993-4CAA-AEE2-0874EE366B59}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{406CCA19-5605-40F0-ACB8-C0AAD5EC3BEF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{657BC9BB-6239-4FC9-AB10-A306A0E5A6FD}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{07E55D7D-01DA-4FEC-AD19-4030DE18EA53}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{C04F8D32-BCA3-4E67-AB4E-D09E0D695F2B}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{B20877F0-7C4B-458F-BF59-A595E168446E}] => (Block) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [{7445B4E8-D3EF-4301-8F8D-93981066BCBB}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{2496DD43-9C3A-4EDC-B704-24D3F5E5849B}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{DABF5E7A-C07C-4E73-88CD-7CAE58449412}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{D8CA5855-C813-469A-A120-55E60E7D1C59}] => (Allow) C:\program files (x86)\bitwig studio\bitwig studio.exe
FirewallRules: [{88433252-BE13-4CD9-A2A1-2AD1B6059648}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{E58B7AEA-D5B9-4678-AEF7-C966C15F9708}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{C96E6619-A8C0-4036-85EB-362751684EC5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0A42A8EB-4585-4726-9EBD-B2361FCB5152}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3D13964E-2A1B-4E31-AEB0-1B061BEB8A2B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C0911A94-E92A-4167-93D0-4696CAA2E23E}] => (Allow) D:\Portal\Steam.exe
FirewallRules: [{40952C2F-0260-4C28-A6C5-B10AFC2B0F52}] => (Allow) D:\Portal\Steam.exe
FirewallRules: [{CC9679C3-9CB5-4D4B-8D34-D4D8CE628CE6}] => (Allow) D:\Portal\bin\steamwebhelper.exe
FirewallRules: [{AA89BA58-B189-49AB-A110-46598B1FA524}] => (Allow) D:\Portal\bin\steamwebhelper.exe
FirewallRules: [{1CCEBFB9-AC2E-4310-9A49-5C2F2B5E7DBA}] => (Allow) D:\Portal\SteamApps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{5899ACCC-58DC-4297-8D5B-D9A2FD25EE64}] => (Allow) D:\Portal\SteamApps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{E0697F28-0AE5-4434-A117-6D44DC7490AE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{677E225B-35BE-4AAD-8497-05C28E762C55}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{448194E1-1BD9-4CAF-AC1A-D36E4FE700DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{C908C4E8-783E-4034-B1F7-1D8E39831C54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{2C3392FB-636E-4A3D-AFD5-3C38C4A79027}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{3A694F5C-8C27-430D-892E-9EB6BF4138A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [TCP Query User{F39A3CBE-679E-483A-A82C-C86D5E3DEEAB}D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [UDP Query User{ADBC0FD8-795F-42D9-8229-C4B48A494A89}D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [{7DB09F01-E0F3-4D3F-B686-C57EB2F894AA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{AE6D1BA3-FFF8-479D-8E20-3E7B67DF27B2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{017548E2-9991-43C7-9990-D60AEC41A61E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B1D3669-748A-4CB9-A698-FF582A4E6390}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{8FA121E9-248E-4CC1-814E-52C8D1B62755}T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe] => (Allow) T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe
FirewallRules: [UDP Query User{A5129F5D-72DA-46BB-95E4-E97B17E7F9EC}T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe] => (Allow) T:\my-folder\production\plugins\imageline-vsts\minihost\minihostmodular.exe
FirewallRules: [TCP Query User{3587A4AB-3920-4A36-A6F6-463FAF3E91EA}D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [UDP Query User{A4134721-0B5B-4D0D-AF7D-F3AB80EB6BF3}D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [{CF175089-4BEF-42FA-944E-E87C25652FA5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{434410F5-AAA8-4CB8-8D22-4CE50581C350}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{739B148E-C52B-49F4-9A67-E23167810D41}] => (Allow) D:\DEUS-EX\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{17843533-279B-42A1-984A-180AF88CA4A8}] => (Allow) D:\DEUS-EX\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{6ABBC854-CA02-44BB-8EA4-714A30D9210B}] => (Allow) D:\DEUS-EX\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D1D5B487-641D-4392-93B4-E76D60748C0B}] => (Allow) D:\DEUS-EX\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [TCP Query User{C5FD3490-54F5-4F86-BD67-05DF0A43ED78}D:\steam\steamapps\portal 2\portal2.exe] => (Allow) D:\steam\steamapps\portal 2\portal2.exe
FirewallRules: [UDP Query User{109CD390-02C9-419A-82B2-A79D92EFEB20}D:\steam\steamapps\portal 2\portal2.exe] => (Allow) D:\steam\steamapps\portal 2\portal2.exe
FirewallRules: [{83EE34BD-005C-4A3F-B7BF-A5DE6DABF2EF}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{BCDD5400-52E5-4EDB-8F22-4EDE6DA6D447}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{8BCCC1D9-5AEF-4DBD-9428-35245A666DB6}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0AACF4AC-50E4-48AF-AD55-87CD528E4D60}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C2D1886C-3880-4D51-B35B-A3C52AF983F5}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{84CEE5E1-F6A3-4A26-8498-5D97FACD6B5A}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{72CD5C87-68B7-4231-AAB0-8B5DA3B6D91C}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{7A946F76-D8CC-4C9A-AF93-8DE859160F41}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{10D0493F-F465-4365-B455-FA0BB521E8E5}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{97242202-04A9-4EB0-8F15-1D1EF1F8CB3F}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BFD4F44F-066F-4439-A8EF-89010BE33F88}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{678BBC95-1B69-4ABE-8730-C1F1824D6B32}] => (Allow) D:\DEUS-EX\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{E059F920-0E69-4379-82DF-31A93DD7EF01}] => (Block) c:\program files\cpuid\hwmonitor\hwmonitor.exe
FirewallRules: [{5E1A1DF9-F0E9-4492-91D8-BCD98FA5D357}] => (Block) c:\program files\cpuid\hwmonitor\hwmonitor.exe
FirewallRules: [{3B67F209-1CCA-439C-8978-C86F7D55A4AF}] => (Block) t:\my-folder\production\plugins\sforzando\sforzando x64.exe
FirewallRules: [{9409E26C-BAC3-4228-9E1C-ECF1141C5016}] => (Block) t:\my-folder\production\plugins\sforzando\sforzando x64.exe
FirewallRules: [{D0DFC248-C299-43B7-BB3C-D908320963D7}] => (Block) c:\windows\system32\msiexec.exe
FirewallRules: [{BE5403EE-1D66-4E97-90F1-D2C31F937471}] => (Block) c:\windows\system32\msiexec.exe
FirewallRules: [{392B8BED-16E1-4D3E-883F-7E3A158BFD1E}] => (Block) c:\program files (x86)\steam\steamapps\common\moon base alpha\binaries\win32\moonbasealphagame.exe
FirewallRules: [{C7BFF11C-74AC-4D99-A770-40411FEB8198}] => (Block) c:\program files (x86)\steam\steamapps\common\moon base alpha\binaries\win32\moonbasealphagame.exe
FirewallRules: [{5AE84138-ADFF-4E0A-BA0E-FCF294F37731}] => (Block) c:\program files (x86)\adobe\adobe photoshop cs2\photoshop.exe
FirewallRules: [{39C15C43-C741-41A2-9B91-9120C6763173}] => (Block) c:\program files (x86)\adobe\adobe photoshop cs2\photoshop.exe
FirewallRules: [{3A091528-134F-4F4C-9E78-7EF9B16915D5}] => (Allow) D:\Anno2205\Ubisoft Game Launcher\games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [TCP Query User{FDF2A2A1-7E99-408C-B3B4-085228CD89E0}D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{9A941200-FB57-4FEF-9EA8-648E2E0E3F02}D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [TCP Query User{A74FE850-0EAF-4AF6-9126-9CFBF0B57E3C}D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{97507771-F560-43BD-B319-A38B7817E82C}D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
FirewallRules: [{C9E4EE16-1A71-4281-A751-29BE01FBA983}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{36CC0EFE-6BDC-4965-BE3B-E3EC19051CA6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{98379970-05E8-4C67-9C7C-D5EB8193E4C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7C08BFC-17EB-4F07-87A3-4D95E63E2088}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9EED2BA0-29BE-45C7-A115-13A90DB3FA19}] => (Block) c:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{14A92DD3-04A0-4496-BA4D-B8306FB47243}] => (Block) c:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{A3AE046F-4844-4DEA-B9B2-51B437A4A518}] => (Block) c:\program files\internet explorer\iexplore.exe
FirewallRules: [{94048BCB-D255-4830-A7ED-F3FA6950BF17}] => (Block) c:\program files\internet explorer\iexplore.exe
FirewallRules: [{486B1671-98F0-4AD5-AF00-5FAF79EB535C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B1968E0A-2C9B-4B8F-9140-216811EDFBE9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DEF6512F-B1D4-4FB7-A979-BA1A60F4ABBC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D81AE651-6E5C-428E-855A-174C44BDA4B8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{FA87F2CE-9CFD-42BD-9192-E3F338006BCA}C:\program files (x86)\jack\jackd.exe] => (Block) C:\program files (x86)\jack\jackd.exe
FirewallRules: [UDP Query User{08C8D19A-6383-4CC0-94A2-4495ED1DC099}C:\program files (x86)\jack\jackd.exe] => (Block) C:\program files (x86)\jack\jackd.exe
FirewallRules: [TCP Query User{ED7F5783-3085-4C19-899F-6C9AE4418E83}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [UDP Query User{5A4E8E57-8DEE-4A9C-BD14-B8731AD1A4BD}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [{3511FB65-7CF3-4F8C-A979-413943939BD6}] => (Allow) D:\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{CEB8DC44-42CB-4CF5-985A-88FAE92172AF}] => (Allow) D:\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [TCP Query User{0070FF0F-083B-4246-96D2-60263FA34574}C:\program files\winhttrack\winhttrack.exe] => (Block) C:\program files\winhttrack\winhttrack.exe
FirewallRules: [UDP Query User{8F1CC8A6-5A98-4B95-AB16-57908E9E3F29}C:\program files\winhttrack\winhttrack.exe] => (Block) C:\program files\winhttrack\winhttrack.exe
FirewallRules: [TCP Query User{535F3417-7A56-496D-8B68-D141E0485919}D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{D41AA536-8189-47C6-AC2A-C644D46D609B}D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe] => (Allow) D:\battle.net\starcraft\heroes of the storm\versions\base41150\heroesofthestorm_x64.exe
FirewallRules: [{E2B8ACC0-A30C-4FCD-A1CE-CEF53D295E1E}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{555DCD98-7381-4B12-8D58-FAD9AB202851}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{196DEC98-69B5-4E02-8E96-687F2CB18854}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{4403C2CB-E0BA-4C98-9CFF-37A5C14836BD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{BDD75092-4A4A-4C40-9E9D-F6A22687E815}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{6F5C46B3-C5B3-4F31-9AC8-C9CE9A2EE0EB}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{F9DE5C74-ADA3-4FB8-ACAB-C33E5EA63C65}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{81613F4A-CBA5-4189-B0AE-CA3D9BF86D7B}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{014FDA46-CF4B-4D8B-B49D-8C2BAADE0BDD}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{01679B92-96DA-4CCE-9F09-9D5A0E58E6AF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{95C31838-61D3-488C-891E-8B66E624450B}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{1CFAC638-F0F2-4789-AFB2-6404BF3E88DC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{E8A96067-F7D3-4658-99A9-0AD56A7B7A5D}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{616B969C-CCF0-4659-865A-7D5189784773}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [TCP Query User{1754B268-65A7-42E4-9DCE-C8F92F20DBBE}D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [UDP Query User{382A7195-B50A-4ABA-B89E-0D711C044A91}D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [TCP Query User{67BE5B7E-F4C2-4981-9933-E07320D8DFAB}D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [UDP Query User{CF3A183B-C34E-4964-B2A5-E0DFFDCADE25}D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [{2C0367E1-2295-40D0-8C1D-F2B1DA58E4F3}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{18581CA1-C791-47CE-9943-121BCC571C07}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5AACFCDD-9AB4-4417-A19D-D74D74B5AABF}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4A8205F1-07E4-40C7-8756-65E79391C62A}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1FDD8FE3-F1F2-4A16-9663-7150B0717BCB}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0EE44A6E-E381-41A5-B24A-E31EB30A0E58}] => (Allow) C:\Users\boy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{F999A344-A1CC-4A59-B5C6-C62103532408}D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [UDP Query User{6FCF8948-BDC5-4328-B42B-928CCD8031F5}D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [{6DDEA35B-6D8D-4332-801B-B7B685C1F99F}] => (Block) c:\windows\system32\gwx\gwxux.exe
FirewallRules: [{934A41EE-42E8-416E-8C0C-0788A85B2EBD}] => (Block) c:\windows\system32\gwx\gwxux.exe
FirewallRules: [{840AF8CE-2DDE-47F8-8B04-4885E0D611F9}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{78194FBB-870B-4B1C-83B3-60B17148B13A}] => (Allow) C:\Program Files\DaVinci Resolve\Resolve.exe
FirewallRules: [{6AFF3A2A-E89E-4E56-AA70-FA0D2C9A7C2D}] => (Allow) C:\Program Files\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{BFCF23D5-F0EC-4750-99AE-7179067C7218}] => (Allow) C:\Program Files\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{8F24DA1F-1CBF-4793-90FD-EF9950CDDFB9}] => (Allow) C:\Program Files\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{57ADCFCA-1460-45CD-8834-325C1DA31F04}] => (Allow) C:\Program Files\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{3AED76FB-9BC3-4A88-8D39-47CC5052AF4F}] => (Allow) C:\Program Files\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{6AAF9014-E299-4B18-90B9-80EF2D6A9BE4}] => (Allow) C:\Program Files\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{74A142BB-B2EE-42E4-8A8F-FE6718D6AD81}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [TCP Query User{3BCAF9D9-DC8B-4F12-9EC8-0616D8113074}C:\program files\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\davinci resolve\dpdecoder.exe
FirewallRules: [UDP Query User{9D9A4E60-9A57-41EC-AA33-FA768960F3C6}C:\program files\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\davinci resolve\dpdecoder.exe
FirewallRules: [TCP Query User{9E172FA9-F958-4DB8-A275-1B021F049F09}D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [UDP Query User{A956E397-6711-405F-9324-D4058DF0D4DE}D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [TCP Query User{91532847-6FB3-4DD8-B6DD-8B6BB2F77D25}D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe
FirewallRules: [UDP Query User{214D4CB9-7F48-436B-AB48-8B4BC81573DA}D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44401\sc2_x64.exe
FirewallRules: [TCP Query User{C69F3AC8-8F68-406A-A4FB-3EB2B5140D8B}D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [UDP Query User{A06DCEC0-2374-44EA-A034-F709A0E1493E}D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [{DDEEBFE5-D1CB-46EE-988F-A3AEFD16C290}] => (Block) t:\my-folder\production\plugins\buzz\buzz.exe
FirewallRules: [{19279FF8-5F54-4F27-895A-86C6AE0A6218}] => (Block) t:\my-folder\production\plugins\buzz\buzz.exe
FirewallRules: [{C2FE1182-8FD1-4167-9D52-BBDB32C28056}] => (Block) c:\windows\system32\gwx\gwxdetector.exe
FirewallRules: [{DCE587E7-5B9B-4C25-815D-BFA1CDAE99B6}] => (Block) c:\windows\system32\gwx\gwxdetector.exe
FirewallRules: [{CD1EC1E3-B016-4B55-A2C9-B3779BC427F1}] => (Block) c:\windows\system32\gwx\gwxconfigmanager.exe
FirewallRules: [{A79E73D7-968D-44DE-A6EB-4CF5751F216B}] => (Block) c:\windows\system32\gwx\gwxconfigmanager.exe
FirewallRules: [{ECDCDE9D-4EC0-4554-9D19-047C2F0D5FE9}] => (Block) c:\program files (x86)\image-line\fl studio 12\fl.exe
FirewallRules: [{FB2F30B7-D8B9-4ABB-ABC6-BB4B23F81879}] => (Block) c:\program files (x86)\image-line\fl studio 12\fl.exe
FirewallRules: [TCP Query User{CE2427D8-8DE7-451F-BA02-CA4DDF790262}C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe] => (Block) C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe
FirewallRules: [UDP Query User{06197F7D-EDF6-42B9-B07A-3EE6272FDD4F}C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe] => (Block) C:\program files (x86)\image-line\fl studio 12.3.beta\fl studio 12\fl.exe
FirewallRules: [TCP Query User{A32FE1EB-46BB-4B2D-B567-63026EC93D12}D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe
FirewallRules: [UDP Query User{60638C30-71EA-4AD4-A2E1-6937DC6EFF4B}D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe] => (Allow) D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe
FirewallRules: [{8DE85F2C-7FCE-4626-BD2A-98682153A2DD}] => (Block) D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe
FirewallRules: [{F38D10E8-8AD7-4AA7-B2C1-809ADBD008A8}] => (Block) D:\battle.net\starcraft\starcraft ii\versions\base46154\sc2_x64.exe

==================== Wiederherstellungspunkte =========================

30-08-2016 21:50:36 Gerätetreiber-Paketinstallation: Advanced Micro Devices, Inc. Grafikkarte
01-09-2016 19:00:15 Windows-Sicherung
02-09-2016 21:24:43 Windows Update
02-09-2016 21:51:32 Windows Update
03-09-2016 06:20:36 Installed Bitwig Studio
08-09-2016 18:29:04 Windows Update
14-09-2016 18:22:52 JRT Pre-Junkware Removal
17-09-2016 08:22:26 JRT Pre-Junkware Removal
18-09-2016 02:59:00 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/18/2016 03:09:00 AM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3869482132-2802206346-888328520-1000}/">.

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/18/2016 03:08:59 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.

Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


Systemfehler:
=============
Error: (09/18/2016 03:09:29 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (09/18/2016 03:08:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/18/2016 03:08:59 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (09/18/2016 03:08:52 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/18/2016 03:08:53 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Computerstandard) wird der SID (S-1-5-19) für Benutzer NT-AUTORITÄT\LOKALER DIENST von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Aktivierung (Lokal) für die COM-Serveranwendung mit CLSID 
{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}
 und APPID 
{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (09/18/2016 03:08:46 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (09/18/2016 03:07:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/18/2016 03:07:45 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/18/2016 03:07:45 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/18/2016 03:07:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 5 Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Prozentuale Nutzung des RAM: 19%
Installierter physikalischer RAM: 16321.48 MB
Verfügbarer physikalischer RAM: 13098.74 MB
Summe virtueller Speicher: 32641.15 MB
Verfügbarer virtueller Speicher: 29360.66 MB

==================== Laufwerke ================================

Drive c: (SSD-Alpha) (Fixed) (Total:238.47 GB) (Free:114.81 GB) NTFS
Drive d: (Games) (Fixed) (Total:232.88 GB) (Free:133.82 GB) NTFS
Drive e: (Backup) (Fixed) (Total:465.76 GB) (Free:35.85 GB) NTFS
Drive f: () (Removable) (Total:1.9 GB) (Free:1.86 GB) FAT
Drive g: (SuperBackup) (Fixed) (Total:931.31 GB) (Free:810.91 GB) NTFS
Drive l: (UNTITLED) (Fixed) (Total:298.02 GB) (Free:298.02 GB) FAT32
Drive r: (Bkupfiles) (Fixed) (Total:232.88 GB) (Free:139.42 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive t: (SWAP) (Fixed) (Total:931.51 GB) (Free:694.26 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B162B162)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FD1A7096)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 99D2C736)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: A1E3F745)
Partition 1: (Not Active) - (Size=238.5 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 465.8 GB) (Disk ID: EBBBAA60)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 931.5 GB) (Disk ID: 444663B5)

Partition: GPT.
Partition 2: (Not Active) - (Size=931.3 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 1.9 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 7 (Size: 298.1 GB) (Disk ID: 5FCE8408)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=0B)

==================== Ende von Addition.txt ============================

Alles in dem Thread was in CODE steht nach Beendigung der Reise bitte nicht wiederherstellbar entfernen.
Ist ja schlimmer als jede Spyware.

PS: Meine Desktopsuchmaschine findet echt nocht ganz viel AVAST auf meinem Rechner.
Welche möglichst kostenfreie Alternative zu AVAST wäre zu empfehlen?

OH, ich habe zu spät gelesen dass ich editieren darf, ich habe zwar ein wenig editiert aber möchte bitte eingeräumt bekommen meine Beiträge nachträglich zu editieren, Bitte.

14.09.2016, 20:27	#8
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Zahlreiche Fenster öffnen sich plötzlich, eines Fullscreen vorne, TaskManager geht nicht Ist Avast jetzt runter?! __________________ Logfiles bitte immer in CODE-Tags posten

17.09.2016, 17:51	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Zahlreiche Fenster öffnen sich plötzlich, eines Fullscreen vorne, TaskManager geht nicht Was hat er GENAU gefunden hat steht doch fein säuberlich im Log! Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken __________________ Logfiles bitte immer in CODE-Tags posten

Zahlreiche Fenster öffnen sich plötzlich, eines Fullscreen vorne, TaskManager geht nicht

Log-Analyse und Auswertung: Zahlreiche Fenster öffnen sich plötzlich, eines Fullscreen vorne, TaskManager geht nicht