|
Log-Analyse und Auswertung: win7: tastatur spinnt - shift+grossbuchstaben funktionieren nicht etc.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
01.10.2016, 01:08 | #1 |
| win7: tastatur spinnt - shift+grossbuchstaben funktionieren nicht etc. hallo und schon mal sorry für die durchgehende kleinschreibung. seit heute spinnt meine tastatur. grossbuchstaben funktionieren nur noch gelegentlich, ebenso alle tasten die oberen bereiche der tasten unter der f-tasten leiste. dafür lösen manche shift-kombinationen seltsame aktionen aus, so öffnet shift+ t beispielsweis einen neuen tab im browser - gilt für firefox und für google chrome - shift+w schließt den browser komplett. hier, im nachrichteneingabefeld meines texten wird wiederum durch shift+ b --, daraus - und so weiter. manche tastenkombinationen hingegen, z.b. shift+o, funktionieren hingegen gar nicht mehr. achja, wenn ich die feststelltaste aktiviere, funktionieren die tasten dahin gehend normal und es öffnen sich keine fenster oder sonstwas. ein sehr ähnliches problem, damals öffneten sich allerdings auch willkürlich fenster im windows, z.b. der windows-explorer, hatte ich schon ein mal vor einigen monaten. darauf hin tauschte ich die tastatur aus, nun geht der spass anscheinend von vorne los. was ich bis dato unternahm - scan mit spybot (log siehe unten od. anhang) - scan mit malwarebytes - keine weiteren funde - tastatur an anderen usb-anschluss angeschlossen - diverse neustarts - bildschirmtastatur funktioniert wie sie sollte hier nun folgend die logs FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-09-2016 durchgeführt von Grausammler (Administrator) auf GRAUSAMMLER-PC (01-10-2016 01:52:29) Gestartet von F:\ Geladene Profile: Grausammler (Verfügbare Profile: Grausammler) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 8 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Hi-Rez Studios) H:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1860120 2016-01-12] (NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [839648 2016-03-10] (DivX, LLC) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107616 2016-09-12] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd) HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29635712 2016-09-12] (Skype Technologies S.A.) HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Policies\Explorer: [tastenkombiaus] 1 ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-09] (AVAST Software) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{351CBA28-C25B-4614-A7A9-E3FF754315BC}: [DhcpNameServer] 7.254.254.254 Tcpip\..\Interfaces\{6818E6FF-450D-44F7-8E88-CF8362BBFD2B}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{AB6656EC-7CB7-41FB-B02F-755E2B7BE22C}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://safesearch.avira.com/#web/result?source=art&q= HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1074537233-1417703582-3400836572-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-24] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-09-09] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-24] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-09-09] (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default FF Homepage: hxxp://www.last.fm/de/user/Vacantness FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-26] () FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-24] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-24] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-26] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2016-03-04] (DivX, LLC) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin HKU\S-1-5-21-1074537233-1417703582-3400836572-1000: @my.com/Games -> C:\Users\Grausammler\AppData\Local\MyComGames\NPMyComDetector.dll [2016-09-13] (MY.COM B.V.) FF user.js: detected! => C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\user.js [2016-03-04] FF SearchPlugin: C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\searchplugins\avira-safesearch.xml [2015-08-28] FF Extension: (Greasemonkey) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20] FF Extension: (Flash and Video Download) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-09-19] FF Extension: (Avira Browser Safety) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\abs@avira.com [2016-09-30] FF Extension: (YouTube Video and Audio Downloader) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2016-08-18] FF Extension: (Hotspot Shield Free VPN Proxy – Unblock Sites) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\hotspot-shield@anchorfree.com.xpi [2016-05-28] FF Extension: (YouTube™ Flash® Player) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi [2016-09-01] FF Extension: (Avira Safe Search Plus) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\safesearchplus@avira.com.xpi [2016-06-06] FF Extension: (web Shield) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\{557ba237-8b26-4c3e-84b9-10eafdd376d7}.xpi [2016-05-18] [ist nicht signiert] FF Extension: (search updater) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\{9f54927f-4fe0-4624-b1ad-86d2ebed1881}.xpi [2015-12-19] [ist nicht signiert] FF Extension: (Adblock Plus) - C:\Users\Grausammler\AppData\Roaming\Mozilla\Firefox\Profiles\cnhv3p0c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-09] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-09] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-08-27] [ist nicht signiert] Chrome: ======= CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms} CHR DefaultSearchKeyword: Default -> Avira CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=de CHR Profile: C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default [2016-10-01] CHR Extension: (Google Präsentationen) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-06] CHR Extension: (Google Docs) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-06] CHR Extension: (Google Drive) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23] CHR Extension: (YouTube) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-21] CHR Extension: (Google-Suche) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05] CHR Extension: (Avast SafePrice) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-09-28] CHR Extension: (Google Tabellen) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-06] CHR Extension: (Avira Browserschutz) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-10-01] CHR Extension: (Google Docs Offline) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-10] CHR Extension: (AdBlock) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-01] CHR Extension: (Avast Online Security) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-06-01] CHR Extension: (Avira SafeSearch) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\khjilmcjipkeokomeekfnhkpbnhmgaje [2016-08-17] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-10] CHR Extension: (Google Mail) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-06] CHR Extension: (Chrome Media Router) - C:\Users\Grausammler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-28] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [khjilmcjipkeokomeekfnhkpbnhmgaje] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [khjilmcjipkeokomeekfnhkpbnhmgaje] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-09] (AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-02] () S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [229648 2016-08-19] (EasyAntiCheat Ltd) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation) U2 HiPatchService; H:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [Datei ist nicht signiert] R4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-09-15] (Overwolf LTD) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S3 TunngleService; F:\Program Files (x86)\Tunngle\TnglCtrl.exe [872432 2016-06-23] (Tunngle.net GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-09-09] (AVAST Software) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-10-01] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net) S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-10-01 01:52 - 2016-10-01 01:52 - 00000000 ____D C:\FRST 2016-10-01 01:51 - 2016-10-01 01:51 - 00001212 _____ C:\Users\Grausammler\Desktop\malwarebytes.txt 2016-10-01 01:40 - 2016-10-01 01:40 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-10-01 01:39 - 2016-10-01 01:39 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-10-01 01:39 - 2016-10-01 01:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-10-01 01:39 - 2016-10-01 01:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-10-01 01:39 - 2016-10-01 01:39 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-10-01 01:39 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-10-01 01:39 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-10-01 01:39 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-10-01 01:22 - 2016-10-01 01:22 - 00001322 _____ C:\Users\Grausammler\Documents\cc_20161001_012239.reg 2016-10-01 00:45 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe 2016-10-01 00:39 - 2016-10-01 01:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2016-10-01 00:39 - 2016-10-01 00:46 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-10-01 00:39 - 2016-10-01 00:39 - 00001395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2016-10-01 00:39 - 2016-10-01 00:39 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2016-10-01 00:39 - 2016-10-01 00:39 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2016-10-01 00:39 - 2016-10-01 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2016-10-01 00:39 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2016-09-29 23:57 - 2016-09-29 23:58 - 00011810 _____ C:\Users\Grausammler\Desktop\rez.odt 2016-09-28 22:30 - 2016-09-28 22:30 - 00000000 ____D C:\Users\Grausammler\AppData\LocalLow\MASSDMG 2016-09-09 12:50 - 2016-09-09 12:49 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-09-09 12:49 - 2016-09-09 12:49 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr 2016-09-09 02:58 - 2016-09-28 13:32 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\Curse Client 2016-09-09 02:58 - 2016-09-09 02:58 - 00001056 _____ C:\Users\Grausammler\Desktop\Curse.lnk 2016-09-09 02:58 - 2016-09-09 02:58 - 00001042 _____ C:\Users\Grausammler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk 2016-09-09 02:58 - 2016-09-09 02:58 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\Curse 2016-09-03 01:53 - 2016-09-03 01:53 - 00000016 _____ C:\ProgramData\mntemp 2016-09-02 19:20 - 2016-09-02 19:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-10-01 01:36 - 2015-08-28 19:56 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\Skype 2016-10-01 01:35 - 2015-09-06 17:59 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-10-01 01:32 - 2009-07-14 06:45 - 00031808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-10-01 01:32 - 2009-07-14 06:45 - 00031808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-10-01 01:25 - 2015-12-11 22:02 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-10-01 01:24 - 2015-09-06 17:59 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-10-01 01:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-10-01 01:23 - 2016-05-16 20:49 - 00000000 ____D C:\Users\Grausammler\AppData\Local\CrashDumps 2016-10-01 01:23 - 2015-10-13 18:58 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\TS3Client 2016-10-01 01:23 - 2015-08-29 14:13 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\MPC-HC 2016-10-01 01:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-10-01 01:22 - 2015-10-29 18:27 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-10-01 01:21 - 2015-10-16 10:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-10-01 00:45 - 2016-05-22 21:30 - 00000000 ____D C:\Program Files\Common Files\AV 2016-10-01 00:13 - 2015-10-10 21:30 - 00000000 ____D C:\Users\Grausammler\AppData\Local\MyComGames 2016-10-01 00:09 - 2015-08-28 19:35 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\foobar2000 2016-10-01 00:08 - 2015-08-28 22:34 - 00000000 ____D C:\Users\Grausammler\AppData\Local\Battle.net 2016-09-30 18:22 - 2015-08-30 16:39 - 00002676 _____ C:\Users\Grausammler\Desktop\Zeug zum Anschauen.txt 2016-09-29 22:12 - 2015-08-28 18:42 - 00000349 _____ C:\siw_debug.txt 2016-09-28 23:28 - 2016-07-20 14:56 - 00024292 _____ C:\Users\Grausammler\Desktop\Neues RTF-Dokument (2).odt 2016-09-28 13:44 - 2015-10-13 18:57 - 00000000 ____D C:\Users\Grausammler\AppData\Local\Overwolf 2016-09-28 13:38 - 2016-08-26 21:47 - 00000000 ____D C:\Program Files (x86)\Overwolf 2016-09-28 13:33 - 2016-08-26 21:47 - 00000000 ____D C:\ProgramData\Overwolf 2016-09-28 13:24 - 2015-12-09 23:10 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\vlc 2016-09-26 14:16 - 2015-08-29 14:11 - 00000000 ____D C:\Users\Grausammler\AppData\Roaming\avidemux 2016-09-24 13:07 - 2015-12-11 21:58 - 00003880 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1449863910 2016-09-24 13:07 - 2015-12-11 21:58 - 00000000 ____D C:\Program Files (x86)\Opera 2016-09-23 20:54 - 2015-09-25 01:34 - 00000000 ____D C:\Users\Grausammler\Documents\my games 2016-09-23 20:16 - 2015-08-28 19:56 - 00000000 ____D C:\ProgramData\Skype 2016-09-22 15:26 - 2016-07-28 21:39 - 00000000 ____D C:\Users\Grausammler\AppData\Local\Ubisoft Game Launcher 2016-09-22 15:03 - 2016-05-22 21:30 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2016-09-21 23:14 - 2015-09-21 19:04 - 00000000 ____D C:\Users\Grausammler\Desktop\Arbeitszeiten 2016-09-20 12:24 - 2016-05-22 21:31 - 00003924 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1463945516 2016-09-19 10:42 - 2015-08-29 13:57 - 00012109 _____ C:\Users\Grausammler\Desktop\---.txt 2016-09-17 01:03 - 2011-04-12 09:43 - 00698688 _____ C:\Windows\system32\perfh007.dat 2016-09-17 01:03 - 2011-04-12 09:43 - 00148828 _____ C:\Windows\system32\perfc007.dat 2016-09-17 01:03 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2016-09-16 23:36 - 2015-09-06 18:00 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-09-16 23:36 - 2015-09-06 18:00 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-09-13 15:20 - 2016-05-22 21:30 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2016-09-09 12:50 - 2016-05-22 21:30 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-09-09 12:49 - 2016-05-22 21:31 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2016-09-09 12:49 - 2016-05-22 21:30 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2016-09-03 05:12 - 2015-12-25 12:09 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-09-02 18:00 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-10-28 19:32 - 2015-10-28 19:32 - 0007680 _____ () C:\Users\Grausammler\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-08-28 19:04 - 2015-08-28 19:04 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2016-09-03 01:53 - 2016-09-03 01:53 - 0000016 _____ () C:\ProgramData\mntemp ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-09-25 20:18 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-09-2016 durchgeführt von Grausammler (01-10-2016 01:52:58) Gestartet von F:\ Windows 7 Professional Service Pack 1 (X64) (2015-08-28 16:31:16) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1074537233-1417703582-3400836572-500 - Administrator - Disabled) Gast (S-1-5-21-1074537233-1417703582-3400836572-501 - Limited - Disabled) Grausammler (S-1-5-21-1074537233-1417703582-3400836572-1000 - Administrator - Enabled) => C:\Users\Grausammler HomeGroupUser$ (S-1-5-21-1074537233-1417703582-3400836572-1002 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) µTorrent (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.) 35MM (HKLM\...\Steam App 466500) (Version: - Носков Сергей) 7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Flash Player 22 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Age of Empires II: HD Edition (HKLM\...\Steam App 221380) (Version: - Skybox Labs) AirMech (HKLM\...\Steam App 206500) (Version: - Carbon Games) ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version: - Studio Wildcard) ARK: Survival Of The Fittest (HKLM\...\Steam App 407530) (Version: - Studio Wildcard) Armored Warfare MyCom (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Armored Warfare MyCom) (Version: 1.78 - My.com B.V.) Armored Warfare MyCom Beta (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Armored Warfare MyCom Beta) (Version: 1.58 - My.com B.V.) Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.23.0 - Asmedia Technology) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software) Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.10.150607 - ) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.5 - Daum Games EU) Borderlands 2 (HKLM\...\Steam App 49520) (Version: - Gearbox Software) Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games) Breach & Clear (HKLM-x32\...\Steam App 266130) (Version: - Mighty Rabbit Studios) CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform) Chaos Reborn (HKLM\...\Steam App 319050) (Version: - Snapshot Games Inc.) Chronicle: RuneScape Legends (HKLM\...\Steam App 205890) (Version: - Jagex) Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.) CONSORTIUM (HKLM-x32\...\Steam App 264240) (Version: - Interdimensional Games Inc) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Creativerse (HKLM\...\Steam App 280790) (Version: - Playful Corporation) Cry of Fear (HKLM-x32\...\Steam App 223710) (Version: - Team Psykskallar) Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse) Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware) Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version: - Red Hook Studios) Dead by Daylight (HKLM\...\Steam App 381210) (Version: - Behaviour Digital Inc.) Deus Ex: Mankind Divided™ (HKLM\...\Steam App 337000) (Version: - Eidos Montreal) Dirty Bomb (HKLM\...\Steam App 333930) (Version: - Splash Damage®) Discord (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Discord) (Version: 0.0.293 - Hammer & Chisel, Inc.) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.8.0.18 - DivX, LLC) Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment) Dungeon Fighter Online (HKLM\...\Steam App 495910) (Version: - Neople) Ember (HKLM\...\Steam App 339580) (Version: - N-Fusion Interactive) Epic Games Launcher (HKLM-x32\...\{C8E7C575-FCFA-46B2-8FC0-E8AC65501350}) (Version: 1.1.78.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Evolve Stage 2 (HKLM\...\Steam App 273350) (Version: - Turtle Rock Studios) foobar2000 v1.3.8 (HKLM-x32\...\foobar2000) (Version: 1.3.8 - Peter Pawlowski) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - Subset Games) Ghost 1.0 (HKLM\...\Steam App 463270) (Version: - @unepic_fran) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.116 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden GRID 2 (HKLM-x32\...\Steam App 44350) (Version: - Codemasters Racing) Halcyon 6: Starbase Commander (HKLM\...\Steam App 371200) (Version: - Massive Damage, Inc.) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Immortal Empire (HKLM-x32\...\Steam App 344190) (Version: - Tactic Studios Inc.) ISO Recorder (HKLM\...\{2D7ED2A0-9553-412B-939F-D6E0AEB2ABE1}) (Version: 3.1.0 - Alex Feinman) Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) K-Lite Codec Pack 11.4.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.4.0 - ) Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 12.5.0.0 - Lightworks) Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - ) Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech) LOOT Version 0.8.1 (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.8.1 - LOOT Team) Mad Games Tycoon (HKLM\...\Steam App 341000) (Version: - Eggcode) Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Mandagon (HKLM\...\Steam App 461560) (Version: - Blind Sky Studios) Microsoft .NET Framework 4.6 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) My.com Game Center (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\MyComGames) (Version: 3.151 - My.com B.V.) NEO Scavenger (HKLM-x32\...\Steam App 248860) (Version: - Blue Bottle Games) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.60.16 - Black Tree Gaming) NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation) NVIDIA Grafiktreiber 364.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.72 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation) Oniken (HKLM-x32\...\Steam App 252010) (Version: - JoyMasher) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation) Opera Stable 40.0.2308.62 (HKLM-x32\...\Opera 40.0.2308.62) (Version: 40.0.2308.62 - Opera Software) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.98.16.0 - Overwolf Ltd.) Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios) Path of Exile (HKLM\...\Steam App 238960) (Version: - Grinding Gear Games) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Plague Inc: Evolved (HKLM\...\Steam App 246620) (Version: - Ndemic Creations) Prison Architect (HKLM\...\Steam App 233450) (Version: - Introversion Software) Project Zomboid (HKLM\...\Steam App 108600) (Version: - The Indie Stone) Punch Club (HKLM-x32\...\Steam App 394310) (Version: - Lazy Bear Games) Python 3.5.1 (32-bit) (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation) Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation) Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7534 - Realtek Semiconductor Corp.) Remote Mouse version 2.70 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 2.70 - Remote Mouse) Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.) Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios) SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden SEGA Genesis & Mega Drive Classics (HKLM\...\Steam App 34270) (Version: - Sega) Shadowrun: Hong Kong (HKLM-x32\...\Steam App 346940) (Version: - Harebrained Schemes) SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden Shutdown4U (HKLM-x32\...\Shutdown4U) (Version: - ) Silence of the Sleep (HKLM-x32\...\Steam App 321870) (Version: - Jesse Makkonen) SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions) Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.) SMITE (HKLM-x32\...\Steam App 386360) (Version: - Hi-Rez Studios) Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Starbound (HKLM\...\Steam App 211820) (Version: - ) Stardew Valley (HKLM-x32\...\Steam App 413150) (Version: - ConcernedApe) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Strider (HKLM-x32\...\Steam App 235210) (Version: - Double Helix Games) Sunless Sea (HKLM-x32\...\Steam App 304650) (Version: - Failbetter Games) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) The Forest (HKLM\...\Steam App 242760) (Version: - Endnight Games Ltd) The Long Dark (HKLM\...\Steam App 305620) (Version: - Hinterland Studio Inc.) The Secret World (HKLM-x32\...\The Secret World_is1) (Version: 1.0.0 - Funcom) Tomb Raider: Anniversary (HKLM-x32\...\Steam App 8000) (Version: - Crystal Dynamics) Tormentum - Dark Sorrow (HKLM-x32\...\Steam App 335000) (Version: - OhNoo Studio) Trillian (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\Trillian) (Version: - Cerulean Studios, LLC) Tunngle (HKLM-x32\...\Tunngle_is1) (Version: 5.8.7 - Tunngle.net GmbH) UltraISO Premium V9.65 (HKLM-x32\...\UltraISO_is1) (Version: - ) Underrail (HKLM\...\Steam App 250520) (Version: - Stygian Software) Unknown Device Identifier 9.0 (HKLM\...\Unknown Device Identifier_is1) (Version: 9.0 - Huntersoft) Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.) Wargame: European Escalation (HKLM-x32\...\Steam App 58610) (Version: - Eugen Systems) Warmachine Tactics (HKLM\...\Steam App 253510) (Version: - WhiteMoon Dreams) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) World of Tanks (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812na}_is1) (Version: - Wargaming.net) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) World of Warships (HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {1E6B591F-34F5-41C1-AF20-B062B052B95B} - System32\Tasks\Opera scheduled Autoupdate 1449863910 => C:\Program Files (x86)\Opera\launcher.exe [2016-09-21] (Opera Software) Task: {37A2247E-634D-41AE-A19A-86661F30621A} - System32\Tasks\SafeZone scheduled Autoupdate 1463945516 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software) Task: {3E4D48AA-97C2-41A5-9B7E-91B8F5030229} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_192_pepper.exe [2016-07-03] (Adobe Systems Incorporated) Task: {5E41DAA6-D65A-4763-8D40-B176E892C309} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-09] (AVAST Software) Task: {96F3A2F4-EF5C-41BE-A4E0-134852838EC2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {9921E36D-F3FC-40E8-A0FE-CF32C70D75A4} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-09-15] (Overwolf LTD) Task: {A0029694-E0C5-40F9-95B2-E9A87C54D08A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-03] (AVAST Software) Task: {C1C25882-FB3A-418C-B4AE-A84C18041553} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.) Task: {CFC13766-C37A-4354-BC1E-4A89719418DC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd) Task: {E126050D-4CB6-4D7E-9761-8C83B84115B3} - System32\Tasks\DivXUpdate => C:\Program Files (x86)\Common Files\DivX Shared\Qt4.8\DivXUpdate.exe [2016-03-01] (DivX, LLC) Task: {FB3A91B9-1047-4779-9CDB-2120EF0968D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_192_pepper.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-08-28 19:13 - 2016-03-22 04:25 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-04-03 15:33 - 2016-01-12 06:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-08-26 20:25 - 2016-08-26 20:25 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2016-09-09 12:49 - 2016-09-09 12:49 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-09-30 20:59 - 2016-09-30 20:59 - 03118360 _____ () C:\Program Files\AVAST Software\Avast\defs\16093003\algo.dll 2016-09-09 12:49 - 2016-09-09 12:49 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-10-01 00:39 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2016-10-01 00:39 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2016-10-01 00:39 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2016-10-01 00:39 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2016-10-01 00:39 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2015-08-28 19:14 - 2016-01-12 06:43 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2016-06-22 01:15 - 2016-06-22 01:15 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1074537233-1417703582-3400836572-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{8946D362-2782-4867-A8CB-1F5BD6A7ED9F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F18DE578-5757-46EC-8DD7-02910EE1AE5A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{B49F645C-6C8E-47CE-9DF1-FC96031DFAC7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2CE92661-BAB0-4F9C-8DA0-D67BE47D9097}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8BA75EEB-AF03-45E7-ABEB-1836C93DE629}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{B1000F31-9310-4656-B1F1-8A4AE697F06D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{214643C1-DA6C-4E80-A32F-FF72297D7102}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{AE6BCDEB-1F7F-4811-B5E8-8CFDA29BDCEE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{A1EB26A2-B6B8-4E30-B7E0-9438103B97C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{A1C02F91-9545-4B48-AA6F-287301EF72EC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{CB1CDFE1-6E03-4612-AF59-DFE52E540164}] => (Allow) H:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{70A92156-6581-499F-84FD-B30EB1B0C342}] => (Allow) H:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{117D180C-EB3E-468A-85FA-CA0C418B88DF}] => (Allow) H:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{5B3E0814-D356-4F49-89C4-34DBAA3DA1F6}] => (Allow) H:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{AFCDD20A-2BC2-49E3-A689-94D156CE8498}] => (Allow) H:\Battle.net\Battle.net.exe FirewallRules: [{8FB03435-B1FD-4B25-BA55-60C128A4D731}] => (Allow) H:\Battle.net\Battle.net.exe FirewallRules: [{D8763AAB-07F0-4021-AA86-9C5C6D413D16}] => (Allow) H:\Hearthstone\Hearthstone.exe FirewallRules: [{47BE1364-F676-4BF6-852F-3747B8E31DE4}] => (Allow) H:\Hearthstone\Hearthstone.exe FirewallRules: [{D0E3A8D8-D066-492A-9B64-90917D85EA92}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{85EA876E-1DEF-41AB-A81E-5465780830B5}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{9531D323-F0D0-45A0-9A0A-BF2177378D95}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{083FEBD1-0FE7-42B0-8021-6D5264740A30}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{479F5285-9039-4605-827A-04686BC7A0D2}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{566F5FC8-BC01-4426-AB35-448410AA3858}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{D64F85DC-9846-494D-8BB8-3B924E1A5D2D}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{560A573D-BCD0-4E9B-89AF-B928B3DBD737}] => (Allow) C:\Users\Grausammler\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{407C5BCE-CD47-4265-8FEE-A18DD76ADB7A}] => (Allow) H:\Games\World_of_Tanks\WoTLauncher.exe FirewallRules: [{873E9B0C-40E4-4873-B095-F7B2B1652754}] => (Allow) H:\Games\World_of_Tanks\WorldofTanks.exe FirewallRules: [{97EA99CE-8F49-4F36-86A5-6F430B3E7023}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\NEO Scavenger\NEOScavenger.exe FirewallRules: [{93D0116C-5E16-4F0C-8B08-742BA1C4CD1E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\NEO Scavenger\NEOScavenger.exe FirewallRules: [TCP Query User{DB8327D0-B745-4146-8F26-A289CF0E4EBC}E:\program files (x86)\trillian\trillian.exe] => (Allow) E:\program files (x86)\trillian\trillian.exe FirewallRules: [UDP Query User{02F76B14-76D8-4F7F-A15E-27D63FF40B1A}E:\program files (x86)\trillian\trillian.exe] => (Allow) E:\program files (x86)\trillian\trillian.exe FirewallRules: [{0C6CDC04-1820-4B76-8C6B-0A1ABAAEC866}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Wargame European Escalation\WarGame.exe FirewallRules: [{40CD0ACB-3270-4D11-9811-2FB5B31B44DB}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Wargame European Escalation\WarGame.exe FirewallRules: [{7A753FAA-D6DB-411C-9922-44A6621E0480}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Tormentum\Tormentum.exe FirewallRules: [{BEB38E8C-EFEB-4113-A052-97E5E1442B9C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Tormentum\Tormentum.exe FirewallRules: [{9B35AE09-A4BC-485D-B4FD-0C7E13A1C652}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe FirewallRules: [{983CB713-B216-40CA-B43B-1BBDC1CF165A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe FirewallRules: [{04934A95-B25C-492B-B6D5-AE5AC4F97BE3}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Tomb Raider Anniversary\tra.exe FirewallRules: [{6906BB18-ED80-4C2D-B2F9-64EFDCDF43D8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Tomb Raider Anniversary\tra.exe FirewallRules: [{E363A99F-FF32-45CE-BBA0-17E0B54CBEFF}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe FirewallRules: [{18A76479-8A40-44B0-A509-5FC880EB4FC1}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe FirewallRules: [TCP Query User{D78EEC88-985B-469F-85B1-04A64AE215DA}C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe FirewallRules: [UDP Query User{BA0B67C9-3D45-43E5-8F34-C8D8236C3038}C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe FirewallRules: [TCP Query User{62943766-EFE2-404E-9195-F8EDED095FEE}H:\mygames\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) H:\mygames\armored warfare mycom beta\bin64\armoredwarfare.exe FirewallRules: [UDP Query User{C34B0ECE-1ECA-4E54-BA27-FA3886C16BCC}H:\mygames\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) H:\mygames\armored warfare mycom beta\bin64\armoredwarfare.exe FirewallRules: [TCP Query User{BB4E9397-3621-4939-8CB1-2085854CFB28}C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe FirewallRules: [UDP Query User{8B9070F1-3F86-440D-92AC-A331B6857AA4}C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\grausammler\appdata\local\mycomgames\mycomgames.exe FirewallRules: [{E34D1C1B-E967-46B1-AE6F-389F3959FBBD}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe FirewallRules: [{8C190EC1-466E-4D2A-B73C-33413C5DD8FC}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe FirewallRules: [{A3EEDF58-3CB2-433D-BEC7-EC08E2712E02}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Strider\Strider.exe FirewallRules: [{ECB05401-4623-494B-88D3-F097A5DE78F8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Strider\Strider.exe FirewallRules: [TCP Query User{F38EF456-FB62-46F1-8B4A-055DFDFD099F}C:\program files (x86)\remote mouse\remotemouse.exe] => (Block) C:\program files (x86)\remote mouse\remotemouse.exe FirewallRules: [UDP Query User{4BED9AC1-9A6B-48FF-B8D6-26C36512DE46}C:\program files (x86)\remote mouse\remotemouse.exe] => (Block) C:\program files (x86)\remote mouse\remotemouse.exe FirewallRules: [{2D681399-E3A3-47DB-A3FB-C709B2B9D762}] => (Allow) H:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{507DDFC9-B499-4C6F-AD12-55BD67940D5E}] => (Allow) H:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{D6A4FFFF-A627-43E2-A303-9BA4D63826C4}] => (Allow) H:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [{A59107AA-72A7-4FB1-BD37-A8BC64C15E02}] => (Allow) H:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [{DA1646CE-98A7-4F14-A38D-D9AF0957ABB6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E1D51995-294C-4436-B338-8C111C6A958C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C18DB1AA-FF6C-4F7F-BC12-CCF65507AADD}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{42D117AD-B5D2-45E9-A3F6-9B8171B8D11B}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{ED8CE9B9-A734-401A-A2AC-64E0AD6DC908}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\SunlessSea\Sunless Sea.exe FirewallRules: [{F976C079-7870-4EC6-A99B-BF36627836FE}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\SunlessSea\Sunless Sea.exe FirewallRules: [{70C54A3C-C891-44FC-869E-12C3371D56A5}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe FirewallRules: [{40E34B8F-4CE9-4C96-8C29-1814C7AC0D6E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe FirewallRules: [{4BB5D241-252E-48E1-852C-08327C5B26A6}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Oniken\Oniken.exe FirewallRules: [{53093674-3959-4DBD-BB0B-FF0C3399C457}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Oniken\Oniken.exe FirewallRules: [{3DD95C89-ACD3-4FAD-95F4-6BAC420F95AF}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe FirewallRules: [{C21600CA-3913-4560-9BC0-67F6819FBC31}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe FirewallRules: [{5E7CDE11-91FB-41F2-884A-74D7B1837F4A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\grid 2\grid2.exe FirewallRules: [{8E3806E9-AC06-49D0-B78B-E50EE0DC9AE4}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\grid 2\grid2.exe FirewallRules: [{C0658050-DB37-49DB-A300-467798A4902E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\ASN_App_PcDx9_Final.exe FirewallRules: [{6B7562BA-2A7D-4AB7-9E92-0687712FABA1}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\ASN_App_PcDx9_Final.exe FirewallRules: [{3D6915B5-CBB0-45AD-89E5-32CF71E45ADB}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\Launcher.exe FirewallRules: [{BD8F2539-2A6E-49F0-A428-EBA6C093F1D9}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\Launcher.exe FirewallRules: [TCP Query User{4EDFF6FC-6447-43B2-AF88-4F891DA71DAB}H:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe FirewallRules: [UDP Query User{9DC007DF-E9E1-4780-ADA6-6874C446023E}H:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe FirewallRules: [{AC43CA98-E169-451C-B918-355B160840C1}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\BreachAndClear\bnc.exe FirewallRules: [{A234924C-9A1F-41DE-BD87-CB6BE99A7207}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\BreachAndClear\bnc.exe FirewallRules: [{9D7440B4-D461-44C5-800F-02DF9280B7A4}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe FirewallRules: [{B3BCA426-8F3F-4A04-9F4F-52E6391F1357}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe FirewallRules: [TCP Query User{793A324A-269F-482D-8807-75AE43445743}H:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{738442A0-FFE5-41E2-AA23-343900BB97A2}H:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe FirewallRules: [{3B30606D-0317-4CCA-919E-25ACDF05E840}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Cry of Fear\CoFLaunchApp.exe FirewallRules: [{7A8E0457-052C-4CD3-BC61-A73C451FD61E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Cry of Fear\CoFLaunchApp.exe FirewallRules: [{55F9513D-164F-4172-8336-CB38CF93DFE8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Immortal Empire\Immortal Empire.exe FirewallRules: [{E0DCF7A2-C76E-4161-8250-8765053583FE}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Immortal Empire\Immortal Empire.exe FirewallRules: [{49448718-0CF1-4DEB-B0C6-18F01A3C0A14}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe FirewallRules: [{C77B273B-9630-408C-B4D6-28B76A91E0C7}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe FirewallRules: [{6B718CDF-53DA-449F-84A3-00A7E7133E7D}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Silence of the Sleep\sots.exe FirewallRules: [{7320C954-C6FF-40DC-A393-D0E84486959A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Silence of the Sleep\sots.exe FirewallRules: [{3DDC0C12-F9B8-4B99-AB95-D70913709EBA}] => (Allow) H:\Program Files (x86)\Funcom\The Secret World\ClientPatcher.exe FirewallRules: [{110FE58E-BA22-48E2-8EE7-A39D4AEA440B}] => (Allow) H:\Program Files (x86)\Funcom\The Secret World\ClientPatcher.exe FirewallRules: [{77E2756A-A07A-49C8-8DFA-B3D1662B7C40}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe FirewallRules: [{29F00A25-9BC8-4C2D-8476-05331231E0DD}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe FirewallRules: [{1D8FB9F2-87F5-40A1-B3E8-B696D4185052}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{92FAC724-43E7-4A9B-9468-9499231D9F2A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{B816A145-2D90-4507-9871-09400B9A098C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe FirewallRules: [{B6C84B1E-86F0-41E5-8BAA-C1235E072908}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe FirewallRules: [{621E3F12-F604-4BFD-8358-9C8EFF0C1543}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{2E8F40A1-AEE3-4772-8840-DCC7ED986B3E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{B5EA1958-FDCD-478F-B394-C2DB8808593E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{ABABB48A-8EC0-45F5-BE07-96C5BB660D68}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{C892DC40-295D-4144-9F0C-0FA8B8E7178A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe FirewallRules: [{2FC8F98D-8B10-4B1B-9053-FEE03129728A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe FirewallRules: [{C5376E4A-9A6A-4D1F-99B2-EA5464FE2D3A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe FirewallRules: [{83BB0A69-8B6C-4AFD-AF1A-5B9E2D71AA1E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe FirewallRules: [{E204887C-1A23-448B-B9BE-0E86FAE2FE95}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe FirewallRules: [{62BED4BC-B8EC-451D-BE51-484FAD582F05}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe FirewallRules: [{088A9F84-38C7-4ABB-933F-638B6D77237A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe FirewallRules: [{45E6EAB7-4BE3-4EB8-AAA4-68EB9B73447E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe FirewallRules: [{EFBA5732-9F5E-46E4-8C28-F5B570A16E35}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Underrail\underrail.exe FirewallRules: [{7152E6B5-D1C4-4637-AD84-E75B7E481AB0}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Underrail\underrail.exe FirewallRules: [{DCBC0499-BFD6-4716-9623-837853455C8A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{DB7368B5-07D2-4157-A64B-A777A8C05CD3}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{7BFC083E-A607-49FA-BA58-9F4692C045CC}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Chronicle\Chronicle.exe FirewallRules: [{8F1D11ED-5B33-4C7F-BE79-6DF69A787216}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Chronicle\Chronicle.exe FirewallRules: [{46D420A6-AA92-4FC9-8E40-8A93FD93BA25}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\35MM\35MM.exe FirewallRules: [{53EFD42C-E931-484C-8288-BBF27E39FF90}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\35MM\35MM.exe FirewallRules: [{82FF0937-DB83-4C2B-8E28-5208D30215B0}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe FirewallRules: [{6B04E138-1090-446C-B7B8-1F57E00B61B1}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe FirewallRules: [{F2DCD810-E842-469E-84A9-E94EFFCE0D9B}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ChaosReborn\ChaosRebornWin64.exe FirewallRules: [{D4C77D94-DD46-4B14-A5F6-2E431484C119}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ChaosReborn\ChaosRebornWin64.exe FirewallRules: [{68A77F7C-7444-4CA3-8343-026FC688069C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe FirewallRules: [{93D09469-5FD0-4A36-9C22-856876F89975}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe FirewallRules: [{5AD3E760-209C-448D-BCAC-B32431E8C8C7}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{7FFB7337-39D6-46F9-A2C5-ED0F7141EC02}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{DE58B084-259A-49E3-98CB-FD9FAA204D31}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{35036F15-4B57-4524-BE31-986B60E5A180}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{1F716D0B-3F07-48F4-9E0E-AB8B93972162}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{99CB6BC1-CF79-46F7-8C43-7A8E8036533C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{D299E8A7-9B80-4490-9051-505CE4FA6FB8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{A44C4E58-8E56-455E-833E-FE091EA88BC7}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{3C4A7009-F8B0-47F0-967F-F173532EE613}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe FirewallRules: [{0547C388-4D7D-4EBC-8939-2D629B1F8FB6}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe FirewallRules: [{D65F4487-162B-4425-A50B-A7131CB4C499}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe FirewallRules: [{FB238FA5-5707-4081-BDF1-ED72E1AF1E43}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe FirewallRules: [{C18E9B26-5C9A-4C2A-8466-86B276FFF015}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Mandagon\Mandagon.exe FirewallRules: [{88FF1239-70BE-40B8-B9A7-5781D42427C1}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Mandagon\Mandagon.exe FirewallRules: [{7FC1E96A-16EB-4956-A3AF-CF135AF49211}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe FirewallRules: [{7E06EA66-C2B6-4B0B-82CA-617792F2800F}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe FirewallRules: [{8064EDF2-533C-4420-86E2-D08E9810FF94}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\DFO\NeopleLauncher.exe FirewallRules: [{4A36D40E-9E11-4973-9843-685F801EE958}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\DFO\NeopleLauncher.exe FirewallRules: [TCP Query User{D224B5BC-D179-4E27-8381-46F88EB8AE65}H:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) H:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [UDP Query User{F0FA1808-F4E6-4E0A-BA59-E6DA1F228BB6}H:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) H:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [TCP Query User{E92CB04E-CCCC-48A0-BE95-F65893BC314F}H:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) H:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [UDP Query User{21F8BA97-A6F5-49DD-97EC-382C1695DE29}H:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) H:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [{EC7B4928-263A-49E4-9C16-13F43B207493}] => (Allow) F:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{57431E12-B01E-4670-8EE2-BA5E25D01E54}] => (Allow) F:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{9CE5A5DD-1EF5-4449-8D19-D18A8FB8F126}] => (Allow) F:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{702A4E96-7A0A-4A33-A209-0899807E2D67}] => (Allow) F:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{B19B3397-6EE2-4BA0-8221-23687A710C74}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe FirewallRules: [{9550E394-FC94-42FE-A384-52BD4E388F94}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe FirewallRules: [TCP Query User{5472C913-BF78-4AD7-A839-BB58F3991EFE}H:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe FirewallRules: [UDP Query User{F8A8CD49-FCD6-46B6-B810-F166BCA78E8A}H:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe FirewallRules: [TCP Query User{47BB1B3E-717F-4ADA-B133-E86A6674E008}H:\program files (x86)\steam\steamapps\common\dfo\dfo.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dfo\dfo.exe FirewallRules: [UDP Query User{E6937F52-E874-4AF5-A31B-12D7B4C041FC}H:\program files (x86)\steam\steamapps\common\dfo\dfo.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dfo\dfo.exe FirewallRules: [{16AE743C-E14D-4273-BC31-FA8C0AB8502C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\AirMech\AirMech.exe FirewallRules: [{86402ECF-AACD-4819-9A4F-AB701CA452DA}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\AirMech\AirMech.exe FirewallRules: [{EABFCD2F-44B7-4654-BC0D-FE9F41D64C9D}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{3045A024-DB3D-4381-8AEA-CE7889E0DFA9}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{91445701-EF76-4082-B8DE-1470BC51A09A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe FirewallRules: [{A7686E9C-B636-4DFF-941B-0921BFDBA052}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe FirewallRules: [{9D906533-5F6B-4C0D-B6BC-8E16AB243357}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{1EA5E0F4-5FB4-40E8-B823-9E7707D3CDAC}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{DD0C536C-B77A-4CB8-B9AC-70D18C173193}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe FirewallRules: [{E7236E55-771A-4399-B729-AACB2558405D}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe FirewallRules: [{5C52CAFF-CAA3-4BA1-A5C9-6389FCA39458}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{B33927A2-1272-49F6-8D19-9EEE1EFF2B5D}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{33C93254-E660-4DDA-85B5-EBC9AC4868ED}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe FirewallRules: [{23E5BEE5-EE76-4698-9665-1AEB549A18D0}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe FirewallRules: [{0DA242A5-898F-4BD7-8463-B637852ED181}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Ember\Ember.exe FirewallRules: [{4CCD4A9C-E90E-4F37-9100-8F8B56C41B27}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Ember\Ember.exe FirewallRules: [{E13D3984-8FA0-41DA-B4E8-15BF8FCF5AA5}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Halcyon 6 Starbase Commander\H6.exe FirewallRules: [{E894615F-B33A-42B4-9E5B-6C797CD73226}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Halcyon 6 Starbase Commander\H6.exe FirewallRules: [{DFAB9D59-3453-42EC-A9D6-792A30A38949}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{D5B55EBC-68D0-43FD-8C62-0B7A85DBB9CB}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe FirewallRules: [{29C1573F-70EA-49BE-8DB2-A413E2ABEF26}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe FirewallRules: [{583B066E-51F3-4C1E-A257-E29717453258}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe FirewallRules: [{6AC38F9F-90D8-4BB7-A4E3-3BADCA9A7F4D}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe FirewallRules: [{9C4FFBFA-8AAB-46B5-AC49-F47E78D14CD8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe FirewallRules: [{A5F3D65E-D15B-444B-93FD-875BA4E108E3}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe FirewallRules: [{450C101C-6BA3-4DF1-92B5-E2A1F4E6DB3C}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe FirewallRules: [{EFEBB33D-193E-46B5-AB01-F0625EE0D37E}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe FirewallRules: [{B32360EC-86D8-4F5B-B283-2B3FACEA9AA2}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Warmachine Tactics\WarmachineGame\Binaries\Win64\WarmachineGame-Win64-Shipping.exe FirewallRules: [{488AADCC-73E8-4F54-A48A-EB4744757ACD}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Warmachine Tactics\WarmachineGame\Binaries\Win64\WarmachineGame-Win64-Shipping.exe FirewallRules: [{48003690-DD0B-4FF7-82C2-947036DAC910}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{E169C3F7-BF33-4E96-BF07-99CC70920FCC}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{533EAD56-A5E6-4DE1-BF02-0E844CA777E5}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{7A997BEC-A901-414B-94CE-9CB5B3D3DC34}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Wiederherstellungspunkte ========================= 18-09-2016 19:00:30 Windows-Sicherung 23-09-2016 20:14:22 ASU_MSI_TRAN 25-09-2016 19:02:13 Windows-Sicherung ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: High Definition Audio-Gerät Description: High Definition Audio-Gerät Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: HdAudAddService Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: PCI-Kommunikationscontroller (einfach) Description: PCI-Kommunikationscontroller (einfach) Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (10/01/2016 01:25:08 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (10/01/2016 12:47:50 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (10/01/2016 12:12:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (09/30/2016 12:58:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (09/28/2016 01:16:39 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm mpc-hc64.exe, Version 1.7.9.145 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1058 Startzeit: 01d2197984619602 Endzeit: 38 Anwendungspfad: C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe Berichts-ID: 046260dd-856d-11e6-9ce6-8c89a58337ae Error: (09/27/2016 02:42:34 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (09/25/2016 07:09:21 PM) (Source: Windows Backup) (EventID: 4104) (User: ) Description: Die Sicherung war nicht erfolgreich. Fehler: "Am Sicherungsspeicherort ist nicht genügend freier Speicherplatz verfügbar, um die Daten zu sichern. (0x80780048)" Error: (09/25/2016 06:59:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (09/24/2016 12:14:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (09/24/2016 12:15:48 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm UNKNOWN, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 10f8 Startzeit: 01d215e7abb36f73 Endzeit: 121 Anwendungspfad: UNKNOWN Berichts-ID: Systemfehler: ============= Error: (10/01/2016 12:47:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht. Error: (10/01/2016 12:45:39 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (09/28/2016 06:14:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (09/28/2016 06:14:28 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (09/27/2016 02:42:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht. Error: (09/23/2016 12:08:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht. Error: (09/22/2016 02:56:23 PM) (Source: Disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (09/22/2016 02:56:20 PM) (Source: Disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (09/22/2016 02:56:17 PM) (Source: Disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (09/22/2016 02:56:14 PM) (Source: Disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. CodeIntegrity: =================================== Date: 2016-09-20 18:36:18.171 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2016-09-20 18:36:18.170 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2016-09-09 12:48:17.678 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-09 12:46:50.301 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-09 12:46:50.161 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-09 01:43:09.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-09 01:41:30.847 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-09 01:41:30.785 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-06 13:01:32.489 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2016-09-06 12:59:05.020 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz Prozentuale Nutzung des RAM: 33% Installierter physikalischer RAM: 8156.59 MB Verfügbarer physikalischer RAM: 5389.84 MB Summe virtueller Speicher: 16311.39 MB Verfügbarer virtueller Speicher: 13263.1 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:150.26 GB) (Free:100.88 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)] Drive d: () (Fixed) (Total:166.01 GB) (Free:1.63 GB) NTFS Drive e: () (Fixed) (Total:119.09 GB) (Free:2.12 GB) NTFS Drive f: () (Fixed) (Total:166.02 GB) (Free:2.31 GB) NTFS Drive g: () (Fixed) (Total:14.65 GB) (Free:0.7 GB) NTFS Drive h: (Spiele & Musik) (Fixed) (Total:781.25 GB) (Free:84.95 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: ECAE3829) Partition 1: (Active) - (Size=150.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=781.2 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: E5C7FEF5) Partition 1: (Not Active) - (Size=166 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=166 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=119.1 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ besten dank im vorraus Geändert von Inkompatibel (01.10.2016 um 01:39 Uhr) |
06.10.2016, 14:38 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | win7: tastatur spinnt - shift+grossbuchstaben funktionieren nicht etc. Das hat jetzt WAS genau mit Schädlingen zu tun? Tastatur kaputt, keine Schädlinge gefunden, aber die Ursache mit natürlich Malware sein?
__________________Teste doch erstmal ne andere Tastatur.
__________________ |
Themen zu win7: tastatur spinnt - shift+grossbuchstaben funktionieren nicht etc. |
antivirus, browser, cpu, desktop, downloader, firefox, flash player, google, helper, homepage, mozilla, problem, problem gelöst, proxy, prozesse, realtek, registry, safer networking, scan, security, software, speicherplatz, svchost.exe, system, tastatur, tastatur buchstaben, tastaturbelegung, windows, windows xp |