Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Rootkit und vermutlich Trojaner

Rootkit und vermutlich Trojaner


Plagegeister aller Art und deren Bekämpfung: Rootkit und vermutlich Trojaner

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 16.10.2016, 22:25   #1
mildkilled
 
Rootkit und vermutlich Trojaner - Standard

Rootkit und vermutlich Trojaner


Habe mich mal auf anweisung(http://www.trojaner-board.de/182318-...ten-orten.html) wieder hierher begeben. Hatte meinen thread ursprünglich hier erstellt wurde aber offensichtlich missverstanden.Es geht hierbei keineswegs um ein Problem mit meinem Handy als vielmehr um ein Problem befindlich auf meinem Pc (Das Handy war nur deas unbekannte Gerät über welches sich eingeloggt wurde).Dachte das es schon richtig sein wird , wurde aber mit meinen logs wieder hierhergelotst ^^.

Hier die Logs:
Malwarebytes anti Rootkit:
Hat als Antwort ausgegeben das es nichts gefunden hat und sich darauf hin komischerweise aufgehängt :/

Gmer:
[CODE]
GMER Logfile:
Code:
ATTFilter
GMER 2.2.19882 - hxxp://www.gmer.net
Rootkit scan 2016-10-16 22:46:15
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000036 WDC_WD30EZRX-00AZ6B0 rev.80.00A80 2794,52GB
Running: gmer-2.2.19882.exe; Driver: C:\Users\Philip\AppData\Local\Temp\kfadyfow.sys


---- Threads - GMER 2.2 ----

Thread   C:\WINDOWS\system32\svchost.exe [440:1920]                                                                                                   00007ffab80c41f0
Thread   C:\WINDOWS\system32\svchost.exe [440:2016]                                                                                                   00007ffab7c541f0
Thread   C:\WINDOWS\system32\svchost.exe [440:2020]                                                                                                   00007ffab7c595d0
Thread   C:\WINDOWS\system32\svchost.exe [440:2296]                                                                                                   00007ffab01739b0
Thread   C:\WINDOWS\system32\svchost.exe [440:2928]                                                                                                   00007ffab0131a50
Thread   C:\WINDOWS\system32\svchost.exe [440:4048]                                                                                                   00007ffab0301040
Thread   C:\WINDOWS\system32\svchost.exe [440:4052]                                                                                                   00007ffab03248e0
Thread   C:\WINDOWS\system32\svchost.exe [440:4056]                                                                                                   00007ffab03248e0
Thread   C:\WINDOWS\system32\svchost.exe [440:6440]                                                                                                   00007ffab97830f0
Thread   C:\WINDOWS\system32\svchost.exe [440:8844]                                                                                                   00007ffab80c41f0
Thread   C:\WINDOWS\system32\svchost.exe [440:612]                                                                                                    00007ffaa3f3eb70
Thread   C:\WINDOWS\system32\svchost.exe [440:3796]                                                                                                   00007ffaa3d51730
Thread   C:\WINDOWS\system32\svchost.exe [440:8456]                                                                                                   00007ffab0007ac0
Thread   C:\WINDOWS\System32\svchost.exe [500:1752]                                                                                                   00007ffab9d1c030
Thread   C:\WINDOWS\System32\svchost.exe [500:1760]                                                                                                   00007ffab9c9f050
Thread   C:\WINDOWS\System32\svchost.exe [500:1768]                                                                                                   00007ffab9d17000
Thread   C:\WINDOWS\System32\svchost.exe [500:1772]                                                                                                   00007ffab9d18370
Thread   C:\WINDOWS\System32\svchost.exe [500:1776]                                                                                                   00007ffab9d1ad30
Thread   C:\WINDOWS\System32\svchost.exe [500:1972]                                                                                                   00007ffab7ce87e0
Thread   C:\WINDOWS\System32\svchost.exe [500:4380]                                                                                                   00007ffab97830f0
Thread   C:\WINDOWS\System32\svchost.exe [500:8052]                                                                                                   00007ffab3c2c820
Thread   C:\WINDOWS\System32\svchost.exe [500:8544]                                                                                                   00007ffab3c2c820
Thread   C:\WINDOWS\System32\svchost.exe [500:6308]                                                                                                   00007ffab9d1c830
Thread   C:\Windows\System32\WUDFHost.exe [1096:1332]                                                                                                 00007ffabb924a20
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4508]                                                                                                  00007ffaa32b5bc0
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4516]                                                                                                  00007ffaa2f82740
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4532]                                                                                                  00007ffaab4e1180
Thread   C:\WINDOWS\system32\svchost.exe [5692:4624]                                                                                                  00007ffab323b180
Thread   C:\WINDOWS\system32\svchost.exe [5692:4852]                                                                                                  00007ffab323f5f0
Thread   C:\WINDOWS\system32\svchost.exe [5692:4136]                                                                                                  00007ffab7f4e0b0
Thread   C:\WINDOWS\system32\svchost.exe [5692:7184]                                                                                                  00007ffab7f4e0b0
Thread   C:\WINDOWS\system32\csrss.exe [8872:9144]                                                                                                    ffff8be125b96c20
Thread   C:\WINDOWS\system32\csrss.exe [8872:6152]                                                                                                    ffff8be125b96c20
Thread   C:\WINDOWS\system32\svchost.exe [4684:7896]                                                                                                  00007ffab3c2c820
Thread   C:\WINDOWS\system32\svchost.exe [4684:5640]                                                                                                  00007ffab3c2c820
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6732]                                                       00007ffabf4b59c0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6340]                                                       00007ffaa9372bc0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8208]                                                       00007ffab7b348e0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:1624]                                                       00007ffaa62552f0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4948]                                                       00007ffabf4b70d0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3284]                                                       00007ffabef4a1e0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4220]                                                       00007ffabd6011a0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3220]                                                       00007ffab6cde010
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3816]                                                       00007ffaa14af900
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8132]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8300]                                                       00007ffaa14e71c0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6320]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4708]                                                       00007ffaa1531da0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6508]                                                       00007ffabf5825b0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6400]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8008]                                                       00007ffaa9238ff0

---- Services - GMER 2.2 ----

Service  C:\WINDOWS\system32\drivers\WdBoot.sys (*** hidden *** )                                                                                     [MANUAL] WdBoot                                                                                                                                                    <-- ROOTKIT !!!
Service  C:\WINDOWS\system32\drivers\WdFilter.sys (*** hidden *** )                                                                                   [MANUAL] WdFilter                                                                                                                                                  <-- ROOTKIT !!!
Service  C:\Program Files (x86)\Windows Defender\MsMpEng.exe (*** hidden *** )                                                                        [MANUAL] WinDefend                                                                                                                                                 <-- ROOTKIT !!!

---- Registry - GMER 2.2 ----

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{E819262C-0654-4B11-9C26-21B509F2456F}\Connection@Name  isatap.Speedport_W_724V_Typ_A_05011603_00_009
Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\RNG@RNGAuxiliarySeed                                                            36305019
Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger@Start                                                                 0
Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger@Start                                                               0
Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E819262C-0654-4B11-9C26-21B509F2456F}@ReusableType                        0
Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E819262C-0654-4B11-9C26-21B509F2456F}@DefunctTimestamp                    0x03 0x30 0x03 0x58 ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                              3004
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                             443
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{F9AEFAA6-4604-4E82-9D83-49ACD840F3DC}           v2.26|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=128:*|App=System|Name=@IpHlpSvc.dll,-502|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000|
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{A95A419B-1AE6-4CFE-8031-A09263E1DB0F}           v2.26|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=128:*|Name=@IpHlpSvc.dll,-503|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000|
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile@EnableFirewall                                   1
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile@EnableFirewall                                 1
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeEstimated                                                          0x06 0x60 0x86 0x2D ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeHigh                                                               0x06 0xC8 0x4A 0x8F ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeLow                                                                0x06 0xF8 0xC1 0xCB ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@Group                                                                                          _Early-Launch
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@ImagePath                                                                                      \SystemRoot\system32\drivers\WdBoot.sys
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@Start                                                                                          3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot                                                                                                
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter@ImagePath                                                                                    \SystemRoot\system32\drivers\WdFilter.sys
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter@Start                                                                                        3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter                                                                                              
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WinDefend@Start                                                                                       3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WinDefend                                                                                             
Reg      HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@Rw                                                                                           0x64 0x62 0x03 0x00 ...
Reg      HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@RwMask                                                                                       0x64 0x62 0x03 0x00 ...
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search@JumpListChangedAppIds                                                                  {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Steam\Steam.exe?
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData@{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Steam\Steam.exe                    0x07 0xEC 0x32 0x42 ...
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance@MessageTime                                                          0xF0 0x2D 0x09 0x8A ...

---- EOF - GMER 2.2 ----
--- --- ---


FRST :
[CODE]
GMER Logfile:
GMER Logfile:
Code:
ATTFilter
GMER 2.2.19882 - hxxp://www.gmer.net
Rootkit scan 2016-10-16 22:46:15
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000036 WDC_WD30EZRX-00AZ6B0 rev.80.00A80 2794,52GB
Running: gmer-2.2.19882.exe; Driver: C:\Users\Philip\AppData\Local\Temp\kfadyfow.sys


---- Threads - GMER 2.2 ----

Thread   C:\WINDOWS\system32\svchost.exe [440:1920]                                                                                                   00007ffab80c41f0
Thread   C:\WINDOWS\system32\svchost.exe [440:2016]                                                                                                   00007ffab7c541f0
Thread   C:\WINDOWS\system32\svchost.exe [440:2020]                                                                                                   00007ffab7c595d0
Thread   C:\WINDOWS\system32\svchost.exe [440:2296]                                                                                                   00007ffab01739b0
Thread   C:\WINDOWS\system32\svchost.exe [440:2928]                                                                                                   00007ffab0131a50
Thread   C:\WINDOWS\system32\svchost.exe [440:4048]                                                                                                   00007ffab0301040
Thread   C:\WINDOWS\system32\svchost.exe [440:4052]                                                                                                   00007ffab03248e0
Thread   C:\WINDOWS\system32\svchost.exe [440:4056]                                                                                                   00007ffab03248e0
Thread   C:\WINDOWS\system32\svchost.exe [440:6440]                                                                                                   00007ffab97830f0
Thread   C:\WINDOWS\system32\svchost.exe [440:8844]                                                                                                   00007ffab80c41f0
Thread   C:\WINDOWS\system32\svchost.exe [440:612]                                                                                                    00007ffaa3f3eb70
Thread   C:\WINDOWS\system32\svchost.exe [440:3796]                                                                                                   00007ffaa3d51730
Thread   C:\WINDOWS\system32\svchost.exe [440:8456]                                                                                                   00007ffab0007ac0
Thread   C:\WINDOWS\System32\svchost.exe [500:1752]                                                                                                   00007ffab9d1c030
Thread   C:\WINDOWS\System32\svchost.exe [500:1760]                                                                                                   00007ffab9c9f050
Thread   C:\WINDOWS\System32\svchost.exe [500:1768]                                                                                                   00007ffab9d17000
Thread   C:\WINDOWS\System32\svchost.exe [500:1772]                                                                                                   00007ffab9d18370
Thread   C:\WINDOWS\System32\svchost.exe [500:1776]                                                                                                   00007ffab9d1ad30
Thread   C:\WINDOWS\System32\svchost.exe [500:1972]                                                                                                   00007ffab7ce87e0
Thread   C:\WINDOWS\System32\svchost.exe [500:4380]                                                                                                   00007ffab97830f0
Thread   C:\WINDOWS\System32\svchost.exe [500:8052]                                                                                                   00007ffab3c2c820
Thread   C:\WINDOWS\System32\svchost.exe [500:8544]                                                                                                   00007ffab3c2c820
Thread   C:\WINDOWS\System32\svchost.exe [500:6308]                                                                                                   00007ffab9d1c830
Thread   C:\Windows\System32\WUDFHost.exe [1096:1332]                                                                                                 00007ffabb924a20
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4508]                                                                                                  00007ffaa32b5bc0
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4516]                                                                                                  00007ffaa2f82740
Thread   C:\WINDOWS\System32\spoolsv.exe [1172:4532]                                                                                                  00007ffaab4e1180
Thread   C:\WINDOWS\system32\svchost.exe [5692:4624]                                                                                                  00007ffab323b180
Thread   C:\WINDOWS\system32\svchost.exe [5692:4852]                                                                                                  00007ffab323f5f0
Thread   C:\WINDOWS\system32\svchost.exe [5692:4136]                                                                                                  00007ffab7f4e0b0
Thread   C:\WINDOWS\system32\svchost.exe [5692:7184]                                                                                                  00007ffab7f4e0b0
Thread   C:\WINDOWS\system32\csrss.exe [8872:9144]                                                                                                    ffff8be125b96c20
Thread   C:\WINDOWS\system32\csrss.exe [8872:6152]                                                                                                    ffff8be125b96c20
Thread   C:\WINDOWS\system32\svchost.exe [4684:7896]                                                                                                  00007ffab3c2c820
Thread   C:\WINDOWS\system32\svchost.exe [4684:5640]                                                                                                  00007ffab3c2c820
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6732]                                                       00007ffabf4b59c0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6340]                                                       00007ffaa9372bc0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8208]                                                       00007ffab7b348e0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:1624]                                                       00007ffaa62552f0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4948]                                                       00007ffabf4b70d0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3284]                                                       00007ffabef4a1e0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4220]                                                       00007ffabd6011a0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3220]                                                       00007ffab6cde010
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:3816]                                                       00007ffaa14af900
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8132]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8300]                                                       00007ffaa14e71c0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6320]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:4708]                                                       00007ffaa1531da0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6508]                                                       00007ffabf5825b0
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:6400]                                                       00007ffaa152a040
Thread   C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe [4884:8008]                                                       00007ffaa9238ff0

---- Services - GMER 2.2 ----

Service  C:\WINDOWS\system32\drivers\WdBoot.sys (*** hidden *** )                                                                                     [MANUAL] WdBoot                                                                                                                                                    <-- ROOTKIT !!!
Service  C:\WINDOWS\system32\drivers\WdFilter.sys (*** hidden *** )                                                                                   [MANUAL] WdFilter                                                                                                                                                  <-- ROOTKIT !!!
Service  C:\Program Files (x86)\Windows Defender\MsMpEng.exe (*** hidden *** )                                                                        [MANUAL] WinDefend                                                                                                                                                 <-- ROOTKIT !!!

---- Registry - GMER 2.2 ----

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{E819262C-0654-4B11-9C26-21B509F2456F}\Connection@Name  isatap.Speedport_W_724V_Typ_A_05011603_00_009
Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\RNG@RNGAuxiliarySeed                                                            36305019
Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger@Start                                                                 0
Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger@Start                                                               0
Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E819262C-0654-4B11-9C26-21B509F2456F}@ReusableType                        0
Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E819262C-0654-4B11-9C26-21B509F2456F}@DefunctTimestamp                    0x03 0x30 0x03 0x58 ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                              3004
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                             443
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{F9AEFAA6-4604-4E82-9D83-49ACD840F3DC}           v2.26|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=128:*|App=System|Name=@IpHlpSvc.dll,-502|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000|
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{A95A419B-1AE6-4CFE-8031-A09263E1DB0F}           v2.26|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=128:*|Name=@IpHlpSvc.dll,-503|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000|
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile@EnableFirewall                                   1
Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile@EnableFirewall                                 1
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeEstimated                                                          0x06 0x60 0x86 0x2D ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeHigh                                                               0x06 0xC8 0x4A 0x8F ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeLow                                                                0x06 0xF8 0xC1 0xCB ...
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@Group                                                                                          _Early-Launch
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@ImagePath                                                                                      \SystemRoot\system32\drivers\WdBoot.sys
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot@Start                                                                                          3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdBoot                                                                                                
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter@ImagePath                                                                                    \SystemRoot\system32\drivers\WdFilter.sys
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter@Start                                                                                        3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WdFilter                                                                                              
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WinDefend@Start                                                                                       3
Reg      HKLM\SYSTEM\CurrentControlSet\Services\WinDefend                                                                                             
Reg      HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@Rw                                                                                           0x64 0x62 0x03 0x00 ...
Reg      HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@RwMask                                                                                       0x64 0x62 0x03 0x00 ...
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search@JumpListChangedAppIds                                                                  {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Steam\Steam.exe?
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData@{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Steam\Steam.exe                    0x07 0xEC 0x32 0x42 ...
Reg      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance@MessageTime                                                          0xF0 0x2D 0x09 0x8A ...

---- EOF - GMER 2.2 ----
--- --- ---

--- --- ---

und die Frst Addition:
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-10-2016
durchgeführt von Philip (16-10-2016 22:50:20)
Gestartet von C:\Users\Philip\Desktop
Windows 10 Pro Version 1607 (X64) (2016-08-20 03:23:09)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3590540074-1526890384-2677090714-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3590540074-1526890384-2677090714-503 - Limited - Disabled)
Gast (S-1-5-21-3590540074-1526890384-2677090714-501 - Limited - Disabled)
Philip (S-1-5-21-3590540074-1526890384-2677090714-1001 - Administrator - Enabled) => C:\Users\Philip

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Emsisoft Anti-Malware (Disabled - Out of date) {D1196F3E-3487-585D-3681-0661BD157EC3}
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Emsisoft Anti-Malware (Disabled - Out of date) {6A788EDA-12BD-57D3-0C31-3D13C692347E}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

A3Launcher version 0.1.2.9 (HKLM-x32\...\{1E29A86E-9AE2-4CD8-74C8-6B170ED3C4D2}_is1) (Version: 0.1.2.9 - Maca134)
Active Directory Authentication Library für SQL Server (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
Active Directory Authentication Library für SQL Server (x86) (x32 Version: 13.0.1601.5 - Microsoft Corporation) Hidden
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM\...\Steam App 221380) (Version:  - Skybox Labs)
Age of Empires® III: Complete Collection (HKLM\...\Steam App 105450) (Version:  - Ensemble Studios)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.6 - Advanced Micro Devices, Inc.)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{0E4C791E-B78E-477D-BD5A-CDD0985BA6EC}) (Version: 7.0.20622.1 - Microsoft Corporation)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version:  - Studio Wildcard)
ARK: Survival Of The Fittest (HKLM\...\Steam App 407530) (Version:  - Studio Wildcard)
Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.22.54 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{05f7f410-0274-45d0-91dc-712a62aadd96}) (Version: 1.2.68.19138 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{6052a753-acc6-4c02-b5a8-70962ff8e0a4}) (Version: 1.2.69.16114 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{82dc2ab6-088f-4e0a-8e27-bb829481d3bc}) (Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 1.5.2.25975 - Avira Operations GmbH & Co. KG)
Azure AD Authentication Connected Service (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.0 - Bethesda Softworks)
BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)
BioShock 2 (HKLM\...\Steam App 8850) (Version:  - 2K Marin)
BioShock Infinite (HKLM\...\Steam App 8870) (Version:  - Irrational Games)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.5 - Daum Games EU)
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Borderlands 2 (HKLM\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM\...\Steam App 10180) (Version:  - Infinity Ward)
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0907.1109.18253 - Advanced Micro Devices, Inc.) Hidden
CCGLauncher version 0.1.2.9 (HKLM-x32\...\{1E299AE2-6B17-4CD8-74C8-A86E0EDD3C42}_is1) (Version: 0.1.2.9 - Maca134)
Cities: Skylines (HKLM\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CRYENGINE Launcher (HKLM-x32\...\{F7916573-4BDD-4A9F-9E2F-CC8107845DC3}) (Version: 1.0.0 - Crytek GmbH)
Curse Client (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Curse Client (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Darksiders (HKLM\...\Steam App 50620) (Version:  - Vigil Games)
DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)
Devenv-Ressourcen für Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Don't Starve (HKLM\...\Steam App 219740) (Version:  - Klei Entertainment)
Dota 2 (HKLM\...\Steam App 570) (Version:  - Valve)
Dotfuscator and Analytics Community Edition 5.22.0 (x32 Version: 5.22.0.3788 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack 5.22.0 de-DE (x32 Version: 5.22.0.3788 - PreEmptive Solutions) Hidden
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.13263.0 - Electronic Arts)
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.10 - Emsisoft Ltd.)
Entity Framework 6.1.3 Tools  for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
Erforderliche Komponenten für SSDT  (HKLM-x32\...\{2466E484-9D86-416B-9C88-AA533F15AF1C}) (Version: 12.0.2000.8 - Microsoft Corporation)
Erforderliche Komponenten für SSDT  (HKLM-x32\...\{FD639F4D-1460-42E6-B32D-FEC1745D0BDC}) (Version: 13.0.1601.5 - Microsoft Corporation)
Evolve Stage 2 (HKLM\...\Steam App 273350) (Version:  - Turtle Rock Studios)
F.E.A.R. 3 (HKLM\...\Steam App 21100) (Version:  - Day 1 Studios)
Fallout 4 (HKLM\...\Steam App 377160) (Version:  - Bethesda Game Studios)
Fallout Shelter (HKLM-x32\...\Fallout Shelter) (Version:  - Bethesda Softworks)
FINAL FANTASY VII (HKLM\...\Steam App 39140) (Version:  - Square Enix)
FINAL FANTASY XIV: A Realm Reborn (HKLM\...\Steam App 39210) (Version:  - SQUARE ENIX)
Gameforge Live 2.0.11 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.11 - Gameforge)
Garry's Mod (HKLM\...\Steam App 4000) (Version:  - Facepunch Studios)
Gemeinsam genutzte Microsoft Azure-Komponenten für Visual Studio 2015 Sprachpaket – DEU - v1.8 (x32 Version: 1.8.40521.1 - Microsoft Corporation) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Golf With Friends (HKLM\...\Steam App 431240) (Version:  - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grey Goo (HKLM\...\Steam App 290790) (Version:  - Petroglyph)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Hatoful Boyfriend (HKLM\...\Steam App 310080) (Version:  - Mediatonic)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hitman: Blood Money (HKLM\...\Steam App 6860) (Version:  - IO Interactive)
HuniePop (HKLM\...\Steam App 339800) (Version:  - HuniePot)
IIS 10.0 Express (HKLM\...\{13FD7E30-D2F1-498D-ABC2-A4242DB6610E}) (Version: 10.0.1736 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - )
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 20.2 - Intel)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Killing Floor (HKLM\...\Steam App 1250) (Version:  - Tripwire Interactive)
League Client alpha pbe (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\League Client alpha pbe 1.0) (Version: 1.0 - Riot Games, Inc)
League Client alpha pbe (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\League Client alpha pbe 1.0) (Version: 1.0 - Riot Games, Inc)
League of Legends (HKLM-x32\...\League of Legends 4.1.1) (Version: 4.1.1 - Riot Games)
League of Legends (x32 Version: 4.1.1 - Riot Games) Hidden
Life is Feudal: Forest Village (HKLM\...\Steam App 496460) (Version:  - Mindillusion)
Life Is Strange™ (HKLM\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LIGHTNING RETURNS: FINAL FANTASY XIII (HKLM\...\Steam App 345350) (Version:  - SQUARE ENIX)
Magic Duels (HKLM\...\Steam App 316010) (Version:  - Stainless Games Ltd.)
Magicka 2 (HKLM\...\Steam App 238370) (Version:  - Pieces Interactive)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (Deutsch) (HKLM-x32\...\{529EFF09-750D-48B9-A47A-34A3B6248C3F}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25420 - Microsoft Corporation)
Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.25420 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB  (HKLM\...\{C555970C-4C94-4A20-9869-AE7E2F84748F}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server 2016 Management Objects (x64) (HKLM\...\{264B070C-82D7-4C9C-B1CE-A0B124BCC787}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL Language Service  (HKLM-x32\...\{4EFF12AE-599C-42A2-ACFA-0D95C3B11A19}) (Version: 13.0.14500.10 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL ScriptDom  (HKLM\...\{E8F3D249-7DE6-4422-AC86-1CE7D5CCFA0F}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (14.0.60519.0) (HKLM-x32\...\{9F367648-EC0C-4F97-B351-D12A51E38F96}) (Version: 14.0.60519.0 - Microsoft Corporation)
Microsoft SQL Server*2014 Management Objects  (HKLM-x32\...\{4F4CB3E2-9D2F-465A-854B-8276B02F4E7D}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 Management Objects (x64) (HKLM\...\{03CB711D-679E-46ED-851B-C568418CF914}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 Transact-SQL ScriptDom  (HKLM\...\{F2A2DB39-2C5A-4764-AA0F-5AB112663FFA}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 T-SQL Language Service  (HKLM-x32\...\{06BE8B71-46C6-434B-869E-85C58EF3120A}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2016 Management Objects  (HKLM-x32\...\{35A7B00B-4F9C-4B4D-919C-86FFFEE46AD6}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 mit Updates (HKLM-x32\...\{ec2556f3-08aa-4829-8017-07d7ea9e125d}) (Version: 14.0.25420.1 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM\...\{7F6DCED8-6A2B-4436-AF20-8F659D04E388}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM-x32\...\{48BF289B-F3FA-4023-9251-80ABF7B726F9}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server*2016 (HKLM\...\{FEC926D4-785B-4ED7-B35D-3FA37DD29F8B}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server*2016 (HKLM-x32\...\{A37BE9D7-EAAE-4C6B-9D7E-DBD8B8D88681}) (Version: 13.0.1601.5 - Microsoft Corporation)
Mit C# erstellte geräteübergreifende Hybrid-Apps - Vorlagen - DEU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden
Napoleon: Total War (HKLM\...\Steam App 34030) (Version:  - The Creative Assembly)
NEKOPARA Vol. 1 (HKLM\...\Steam App 333600) (Version:  - NEKO WORKs)
Nether (HKLM\...\Steam App 247730) (Version:  - Phosphor Games Studio)
NVIDIA PhysX (HKLM-x32\...\{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}) (Version: 9.13.0725 - NVIDIA Corporation)
One Troll Army (HKLM\...\Steam App 438680) (Version:  - FlyAnvil)
One Way Heroics (HKLM\...\Steam App 266210) (Version:  - Smoking WOLF)
Opera Stable 40.0.2308.81 (HKLM-x32\...\Opera 40.0.2308.81) (Version: 40.0.2308.81 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.0.2.33129 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6 (Deutsch) (HKLM-x32\...\{FACF2669-E25A-428A-9167-5EEDE741F3B9}) (Version: 4.6.00127 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM-x32\...\{4860C1E5-CE58-4D32-89DE-37951333B4C9}) (Version: 4.6.01055 - Microsoft Corporation)
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
Poker Night 2 (HKLM\...\Steam App 234710) (Version:  - Telltale Games)
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Rise of the Tomb Raider (HKLM\...\Steam App 391220) (Version:  - Crystal Dynamics)
Risen 3 - Titan Lords (HKLM-x32\...\{383CAA4A-9B72-4DE9-9B0F-780C49682780}) (Version: 1.00 - Deep Silver)
Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)
Roslyn Language Services - x86 (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
Sanctum 2 (HKLM\...\Steam App 210770) (Version:  - Coffee Stain Studios)
Shadowrun: Dragonfall - Director's Cut (HKLM\...\Steam App 300550) (Version:  - Harebrained Schemes)
Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)
Sid Meier's Civilization V (HKLM-x32\...\steam app 8930) (Version:  - 2K Games, Inc.)
SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
Spotify (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Stardew Valley (HKLM\...\Steam App 413150) (Version:  - ConcernedApe)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Street Fighter V (HKLM\...\Steam App 310950) (Version:  - Capcom)
Team Explorer for Microsoft Visual Studio 2015 Update 3.1 (x32 Version: 14.102.25521 - Microsoft) Hidden
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Talos Principle (HKLM\...\Steam App 257510) (Version:  - Croteam)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version:  - Ubisoft Montreal)
Tukui Client (HKLM-x32\...\{BAD6EBBD-A6A9-41C9-898A-8C868A552E4C}) (Version: 2.4.6 - Tukui)
TypeScript Power Tool (x32 Version: 1.8.34.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.8.36.0 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 17.1 - Ubisoft)
Visual Studio 2015 Update 3 (KB3022398) (HKLM-x32\...\{7a68448b-9cf2-4049-bd73-5875f1aa7ba2}) (Version: 14.0.25420 - Microsoft Corporation)
VS Update core components (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
vs_update3notification (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.21.0 (HKLM\...\VulkanRT1.0.21.0) (Version: 1.0.21.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.)
War Thunder (HKLM\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)
Warmachine Tactics (HKLM\...\Steam App 253510) (Version:  - WhiteMoon Dreams)
Warsow 2.1 (HKLM-x32\...\{24508D50-EC8F-4FE6-B69D-E5035D8745EB}_is1) (Version: 2.1 - Warsow.gg)
WCF Data Services 5.6.4 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3590540074-1526890384-2677090714-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Philip\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {13090CBD-D313-4211-80AF-D501268BF01E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-11] (Google Inc.)
Task: {29FE4EFD-E5A5-426A-AF72-2EA89DEE2390} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Philip\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-25] (Microsoft Corporation)
Task: {99D7B6BF-AE9E-427C-A8B7-EFDDD7F4E638} - System32\Tasks\Opera scheduled Autoupdate 1458768815 => C:\Program Files (x86)\Opera\launcher.exe [2016-10-03] (Opera Software)
Task: {D9C2572A-E592-47E0-889E-2390DC3EBD47} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-07] (Advanced Micro Devices, Inc.)
Task: {E1AB3362-2174-43F0-93C3-23EDBE03D695} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-11] (Google Inc.)
Task: {E200B93A-4EFE-456B-8255-26605B652123} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-06-20] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Hotspot Shield Free VPN Proxy – Unblock Sites.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=heajfgnegopeedndeahkdjedjkjcmnpb

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-29 20:07 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-29 20:07 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-29 20:07 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-08-25 08:28 - 2016-08-25 08:28 - 01864384 _____ () C:\Users\Philip\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-09-16 14:25 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-12 17:52 - 2016-10-05 11:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-12 17:53 - 2016-10-05 11:21 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-12 17:53 - 2016-10-05 11:13 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-12 17:53 - 2016-10-05 11:13 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-12 17:53 - 2016-10-05 11:13 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-10-12 17:53 - 2016-10-05 11:13 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-12 17:53 - 2016-10-05 11:14 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-28 13:47 - 2016-09-28 13:49 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-09-28 13:47 - 2016-09-28 13:49 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-09-28 13:47 - 2016-09-28 14:10 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-03-10 21:39 - 2016-09-08 05:14 - 00784672 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-03-10 21:39 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-03-10 21:39 - 2016-10-13 03:58 - 02321696 _____ () C:\Program Files (x86)\Steam\video.dll
2016-03-10 21:39 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-03-10 21:39 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-03-10 21:39 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-03-10 21:39 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-03-10 21:39 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-03-10 21:39 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-03-10 21:39 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-03-10 21:39 - 2016-10-13 03:58 - 00836896 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-10 21:39 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-06 06:51 - 2016-08-04 22:56 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.winxp\libcef.dll
2016-03-10 21:39 - 2015-09-25 01:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-10-04 06:39 - 2016-09-25 05:47 - 01805416 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.143\libglesv2.dll
2016-10-04 06:39 - 2016-09-25 05:47 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.143\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 09:24 - 2015-10-30 09:21 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Philip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{259a2093-8359-4eb8-b1cd-edbd8f984ef2}.jpg
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Philip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{259a2093-8359-4eb8-b1cd-edbd8f984ef2}.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\StartupApproved\StartupFolder: => "CurseClientStartup.ccip"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "CurseClientStartup.ccip"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3590540074-1526890384-2677090714-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "EADM"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{A0B8E1D5-3AB1-4460-A086-148A8FBD732B}C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [TCP Query User{096C0A4C-04C9-4D2E-872B-817F9340EF2C}C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{57F84CCC-09EE-409D-806C-9976DFD2FB65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{3E26471D-D0A5-44C0-A360-CDF66F9CAF28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{9C7E9892-86A1-482B-84C8-FA895B601ADE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{953AD51B-C88D-4955-BEBF-D103F89A0ED6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{EBBCE164-918F-4AC0-AA20-96927220E4B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{DB9B184B-F7BF-4B63-BF0B-08DC1B97E764}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [UDP Query User{FB1CC01D-B4C9-4E13-B843-82030329FA2C}C:\program files (x86)\warsow 2.1\warsow_x64.exe] => (Allow) C:\program files (x86)\warsow 2.1\warsow_x64.exe
FirewallRules: [TCP Query User{A7C1250B-C5D6-477E-BA62-532BA3A21019}C:\program files (x86)\warsow 2.1\warsow_x64.exe] => (Allow) C:\program files (x86)\warsow 2.1\warsow_x64.exe
FirewallRules: [{763A71F7-8D38-41F6-91D1-22B53AD1580B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe
FirewallRules: [{86C1E00D-63F7-45AF-AAF6-9D17CEA6D5C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe
FirewallRules: [{2ECE42CC-DDF7-4D41-8677-3E5B1B5F666D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{6B949957-A9C9-48E6-B091-D9F1332CB41D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{1EE109BF-BAD8-4F51-8B3A-9080D4322766}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{A5226051-E8D0-4991-B22B-3A6979853D59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [UDP Query User{6F34D78A-B573-41E1-9CCD-29D6E06CD539}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{31999F45-EEEB-47FE-96B8-F349F78F3CBC}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{D7CE0B85-4933-49A4-9D2F-2E4A26576E0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe
FirewallRules: [{3BB35981-6829-4360-83E6-E4A1C0B67A79}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe
FirewallRules: [{99D3554F-2FF2-4A81-A9C1-5ABA9E4A3C5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos.exe
FirewallRules: [{4FF124FB-7092-44F4-B22D-9AF999A15ED2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos.exe
FirewallRules: [{CDC077C0-5E9F-4008-A056-132ECC191A28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{FF4687B0-4B41-4349-AC82-3CC29E02249E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{872FCC8A-71DA-453A-9D8A-55417006AB24}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{22F32EF9-2B49-4F2E-99B6-2F42C39D2083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{EC27CBBA-D777-451D-A079-02DA90D8464E}] => (Allow) C:\Users\Philip\Desktop\BlackDesert_Downloader.exe
FirewallRules: [{BACA1A96-5986-4533-8912-8C1E942C2CED}] => (Allow) C:\Users\Philip\Desktop\BlackDesert_Launcher.exe
FirewallRules: [{0C80E395-540A-44D3-92BD-F3FA5133B2E3}] => (Allow) C:\Users\Philip\Desktop\bin64\BlackDesert64.exe
FirewallRules: [{C1DFC9BA-666D-46EF-8610-54709CDD8E07}] => (Allow) C:\Users\Philip\Desktop\bin\BlackDesert32.exe
FirewallRules: [{CAAEDB00-3A62-45BF-AD8D-97FD35761EC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{44D0859B-DB40-4717-B51C-2631E97B25C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{6E14073C-CE2E-430D-935F-2FFE261F5905}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{A51F2194-C3AB-44BE-9EA5-4CD9306BAF08}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{5A9AA723-849E-417E-9573-79625C8F751A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{D9619252-53D8-45E0-A042-B02C36A13A17}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{402C1DC1-E587-4800-9A73-8A183BC3E65E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{940CDFFD-9A1A-4A87-B86B-4CE015C3ED3B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [UDP Query User{B3EADBAC-BEA9-42EF-B169-A424CB2B5D6D}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{AD900E9E-0154-4F46-97C1-27C05C6F2AD7}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [{33C5FD07-3CE1-451E-B359-D0F62299EFE5}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [{223B8573-DEA9-442C-867A-C855C2340712}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{D3827B3D-123C-4546-98E5-04CB11C36B42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [UDP Query User{D2C5E7A5-C46E-4383-AD69-A6C1D3BC44BB}C:\program files (x86)\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [TCP Query User{45BDD88E-0EA7-4DC1-B05A-3C6282A3F0F7}C:\program files (x86)\starcraft ii\versions\base43478\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base43478\sc2_x64.exe
FirewallRules: [UDP Query User{7AC1DF58-22B9-4B33-BA7F-42F06F32F004}C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [TCP Query User{46FC5290-B08B-4D38-9591-FA728130F93E}C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [UDP Query User{EF83BC77-6FC0-4F10-9099-91E71D30E550}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [TCP Query User{BFAFBEEC-103F-483A-8341-E03798ECC9C6}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{967C844C-545A-44D0-8FE4-61213235E5F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{99E11439-07CC-4626-984D-F14224229F04}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{882F3B20-943A-47BA-902E-2A194B6D4D81}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
FirewallRules: [{41A2A962-FAAD-4751-93E2-D37390840D87}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
FirewallRules: [{68689867-3493-4F3A-9055-54F873858AFC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{9CA9760B-FA97-4476-9DE9-F9A446CD44F7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{2A8834E6-5B49-4459-82EF-A4360AB17C16}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Napoleon Total War\Napoleon.exe
FirewallRules: [{6E9CFD5C-F9A9-471E-A7A5-B16E324FB29D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Napoleon Total War\Napoleon.exe
FirewallRules: [UDP Query User{670F692E-A0B6-4D0D-925B-DF59E0A35D25}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{C1494E49-9E65-4DAD-A378-C4EF6001AC9D}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [{694B614D-AA72-4ECC-B262-3F3640569B3A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{A0CF82E1-B97C-4465-9A57-090293CFC7C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{3D3D18E1-2B22-41DA-B25D-7AEDA02DDD45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OneTrollArmy\OTA.exe
FirewallRules: [{E2B38888-6ADE-4E74-84BD-3B3E6B302111}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OneTrollArmy\OTA.exe
FirewallRules: [UDP Query User{B53424B5-C1F0-4D1F-BD0F-7308C15BA93C}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{2446E9DD-82D5-40FB-A33B-2B3BC1609FE9}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{50134A4E-FF61-40CF-88A2-E187FFCBBCD6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [{5DFEF060-CB21-4CE8-9227-FC4838AB3BB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe
FirewallRules: [UDP Query User{3E50CB2C-EDB0-48BA-B28A-60CE7D7D31D0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{BC1C1067-7576-4B07-BBA8-1EBC55EFC112}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{7CC96EAA-E46E-47C0-8737-8BAD457467FF}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{89F86010-374F-49A2-9185-955A8A951568}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{FEB3CCE6-B9C5-4142-85A0-8016DB77D9A9}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [{12209FEC-CD96-47C8-B6FE-8272A3A70AD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{9B3A9105-97ED-448E-AEB9-D5BF49DD2C8D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{7D92B4E2-0DE4-4D95-BCA0-5547C8FCA303}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DarksidersPC.exe
FirewallRules: [{BCB197A7-CF3F-4368-B8BF-51F46C6D56E2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DarksidersPC.exe
FirewallRules: [{B3A1F28B-059F-4D2E-BC95-F5FCFEC61586}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{7D20CFD4-F2BB-47C2-B121-D9E924C545FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [UDP Query User{EF44C445-D452-4737-B339-8044B9F359A6}C:\users\philip\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philip\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{E2A1CD0D-6CA0-4F31-90E0-8AA563E16A46}C:\users\philip\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philip\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{8CF5D64D-C257-4545-B661-82D037F0E68A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{1CE159B5-CD9D-4018-84B2-D7193880A248}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [UDP Query User{9CBB822B-179C-4FED-80A5-850223F8CAC4}C:\program files (x86)\crytek\cryengine launcher\crytek\cryengine_5.0\bin\win_x64\sandbox.exe] => (Allow) C:\program files (x86)\crytek\cryengine launcher\crytek\cryengine_5.0\bin\win_x64\sandbox.exe
FirewallRules: [TCP Query User{EE236296-B8CC-42F7-A3C4-0A78DFD43CC8}C:\program files (x86)\crytek\cryengine launcher\crytek\cryengine_5.0\bin\win_x64\sandbox.exe] => (Allow) C:\program files (x86)\crytek\cryengine launcher\crytek\cryengine_5.0\bin\win_x64\sandbox.exe
FirewallRules: [{3DDF0319-9BAE-43D0-88D3-2734BFB4588D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{2C3E8CF0-F837-49FE-949F-7D18DC357367}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{B0C9A161-3861-458E-8011-034372D3B1D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{B8025DC2-6589-4322-96AB-112E495DEC5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{5C22EB1A-0C26-4F38-A72F-3B858DE47CA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{E711495C-2A30-4C95-9759-164FFCAA3F7E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{0EE7D5F8-5773-496A-B016-80B10EF2ED79}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{E8D74261-5BB1-4F1C-9D5F-DF65BBFF949E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{3ADEE78A-46FA-4EC1-B65A-09FC429C17AE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{FAFA4FD0-C62E-4D56-858F-F889846039C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [UDP Query User{FB758731-C316-4591-ABD3-3E9DE7A28049}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [TCP Query User{564853CD-76F6-4369-BF3D-E12CF4D0393D}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [{36A25DDC-1E51-4418-81AB-8F3844CB3F73}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheCulling\TheCulling_Launcher.exe
FirewallRules: [{9767EF47-3A34-4301-85B6-201C474BB62B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheCulling\TheCulling_Launcher.exe
FirewallRules: [UDP Query User{7BF7FD5A-C772-4DDE-A109-152432B62EFE}C:\users\philip\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philip\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{E360B7EE-D480-4D56-BA8F-E0FDAF024F7C}C:\users\philip\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philip\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A5C3963D-8EFC-4129-8563-929A28F59F87}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{E0822839-55E4-4B24-8AF5-FFCB5C21C73E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{0EEFD267-BC2C-46F2-986B-218248E310BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BFE70A07-D692-4534-966F-45D54E3E006B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{F2F48C9A-E752-46BE-BAD8-4F264A8D9228}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{AA156A3E-7E9C-42D4-8F41-DAB139A8A979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{94058914-692B-4E16-BCD8-A685530EBB74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Poker Night 2\PokerNight2.exe
FirewallRules: [{8F6EACDA-9F49-4DE2-A4F3-C3FCCAB542F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Poker Night 2\PokerNight2.exe
FirewallRules: [UDP Query User{F760EC2C-202A-46AF-A058-BF8E681E49B8}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [TCP Query User{13DE575B-3339-450A-B286-25895FE0C45A}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [{F74236FD-D217-4497-8973-A706BF35D9E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NEKOPARA Vol. 1\nekopara_vol1.exe
FirewallRules: [{F00CB1BC-95C8-4052-A5EB-AE6997DE8A65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NEKOPARA Vol. 1\nekopara_vol1.exe
FirewallRules: [{E0B9008C-6327-4991-9A70-16DC994D9427}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{11CF0188-C69E-4E92-B5BF-35BF60D6F4ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{FE3B676E-CA7E-4925-A1A2-AC67CBE597A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{AE94A63D-D743-4120-8B11-D896A05B24B7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BE00FB8D-47A2-4125-9115-A497A09F887C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe
FirewallRules: [{74A4B0C2-BB07-4010-AC70-C111EE7D3476}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe
FirewallRules: [{B399E3E5-22DC-456A-9E94-467FA4877B03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{8C6F423F-BC2B-4199-8DCC-AE2FEB85704D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{B711A5F0-938F-4C85-8B69-1FD486CB8D54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman Blood Money\configure.exe
FirewallRules: [{C1516395-AC30-4E60-833C-A6FB58A10986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman Blood Money\configure.exe
FirewallRules: [{FD462965-972D-42E8-903D-43FAC5546387}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe
FirewallRules: [{DCD5752B-C64B-4473-B6DA-1B940E12644A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe
FirewallRules: [{322E4A58-B65F-4A74-A63E-B4E40C23E272}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8A2FB0B1-EC1B-4991-BEB5-E832F8AEFBEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{758ED23D-365D-4010-887D-F89C45ADA19D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{0AA551D3-4EA6-4B3A-BE46-88ABFC286BBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{888DC621-204C-420E-A8DE-0A7DF5E56050}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{63475BC0-61B4-4EF3-BEA2-B5F50641E9CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{7918B932-26D4-4522-AA76-05094AAC1D1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{F7951422-3FEC-4A4E-BA56-C136D93B8822}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{FF2C8A51-4AE8-4BBC-B9A5-5CF2DA5B0FEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{1CC7E20E-1AEB-4181-8A09-D082018775EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [UDP Query User{6312FC27-DE45-49E8-AFF2-762012C052C2}C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe
FirewallRules: [TCP Query User{94E361C8-5233-443E-A6B6-11E5699C811B}C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe
FirewallRules: [UDP Query User{074583B8-C6A2-4193-AB47-40F2036D2EB6}C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe
FirewallRules: [TCP Query User{047778D6-667F-4F64-8C8D-5C9EAFE6F5B9}C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe
FirewallRules: [{C6C48124-B8A0-472B-8DB2-602C954C6080}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hatoful Boyfriend\hatoful.exe
FirewallRules: [{548B15C5-C659-4B27-9C15-73325F278E18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hatoful Boyfriend\hatoful.exe
FirewallRules: [{A91226F9-06A5-4CDB-BE29-8E79508DF505}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LIGHTNING RETURNS FINAL FANTASY XIII\LRFF13.exe
FirewallRules: [{4569829B-7D40-4C36-AD25-8603103D2FC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LIGHTNING RETURNS FINAL FANTASY XIII\LRFF13.exe
FirewallRules: [{A64DCC50-B5E1-4DD9-8531-9B2554BD8F5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{A1BCA4AD-5E20-4C4D-9CB7-139E5DB2A287}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{4E397725-E8A6-4764-A093-9C6C844DC872}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\StreetFighterV\StreetFighterV.exe
FirewallRules: [{6381B0BA-4A28-4F90-AC6E-5C03C5DD63B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\StreetFighterV\StreetFighterV.exe
FirewallRules: [{44531A15-231D-49F4-A06C-7A0BB2830FA2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{A7E5B06D-1721-4327-8DA1-04450D68188D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{60271072-728C-4B4D-8746-C46745B9376A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
FirewallRules: [{9DDFC12D-0A27-45FB-BE74-D22E8282B3B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
FirewallRules: [{FF9B4DD1-146E-43CF-8799-19239A5A0241}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{573560A5-0695-487B-AE4C-14531D2533A0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{AFD3D6B1-8F04-44E8-884F-BFA6A44E7854}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{A1426F42-EA92-481A-99B3-8B79813A469D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{DF016ECC-4BE1-4B3E-AA54-645FA446CB8C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5318543F-59B0-45AF-B7FA-6B62694D0E41}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2941CC40-56FB-4D3F-9519-08CEE4F71859}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\One Way Heroics\Game.exe
FirewallRules: [{EFA82635-720D-454E-9861-8007035BC781}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\One Way Heroics\Game.exe
FirewallRules: [{62687A34-07BF-452D-B96F-2D6B9E0A54D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{EF33003C-CD22-489E-A050-0F44A5045798}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{78795251-DD94-42BC-B904-94333043C1B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{CBAEE934-B482-4097-8651-37F7630B1DF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{ED3061E5-1A92-478F-9F52-BF12D29E24EF}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{68E2BE6D-EC9C-4EDF-A96F-A6D0972BAC2A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8146B68A-EF46-4B82-BAFB-AA93E5DE3336}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{48D3E2C5-0922-49CC-A914-0E757452F104}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{05D6C05E-5BC8-4AD9-B934-E14079412002}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{1BE2B600-9598-403E-9483-29B1537C15E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{1EA0888B-B63C-45A6-A030-CC98517F053C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{BE58270A-E4DE-4003-BB49-93015BE8B198}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{CC50FBF2-A05D-47FE-9622-81054AE37906}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{918A29F7-01DD-4266-B87D-1A80F00A24A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Feudal Forest Village\ForestVillage.exe
FirewallRules: [{AA5E42B7-A6EC-41DA-AE01-344F688EAAAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Feudal Forest Village\ForestVillage.exe
FirewallRules: [{EB86608A-B1DD-48B3-8C7E-7D961E258F21}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{5D9580D1-A66A-4130-AA6F-CCA722969FE0}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{D957D83E-34F9-46B3-8C1C-808434D4F943}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{949BCB78-BD1E-4BC8-901F-9B0260053FED}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{0E497E15-D9C7-43AC-A5CE-ACB2E2850D73}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{A132B3D7-7F6C-4262-8E89-F92AAFCC795D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{B66FEE2D-7F93-43A9-A438-8561B34A16C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{1B124755-7F85-4323-BEC5-B9C349FE51D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warmachine Tactics\WarmachineGame\Binaries\Win64\WarmachineGame-Win64-Shipping.exe
FirewallRules: [{471833D2-FA9E-4284-9B45-C3BA00E31BE8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warmachine Tactics\WarmachineGame\Binaries\Win64\WarmachineGame-Win64-Shipping.exe
FirewallRules: [{6325F710-92DF-4764-A14C-033ED44BD8A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{FC868114-F20D-42B7-AFE0-87B1EC0FF2A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{C75469AA-AB14-4D39-BA68-19B23E53D41A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{F8AEF9BC-DC8C-4782-B892-F25D7777E8D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{F228AB9F-5F06-439B-9691-76967DFF8DD6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{3FC43940-274C-4811-B504-7F23D2D10DD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{C2E527C0-64ED-49D9-A414-B5F734D14F98}] => (Allow) LPort=3724
FirewallRules: [{2B9FE349-0B51-4C40-8236-17DDB5D93C9E}] => (Allow) LPort=1119
FirewallRules: [{FEFF21DA-9B4C-44CA-9F7C-496B2D2BF753}] => (Allow) LPort=6113
FirewallRules: [{2ED612BF-516E-4966-8D86-5DA79046B700}] => (Allow) LPort=80
FirewallRules: [{7413C679-495B-4F48-A22F-96DB95CA039E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{F1C46C38-E3DE-4C96-9D27-0804D733D5BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe

==================== Wiederherstellungspunkte =========================
Tut mir leid für die Unannehmlichkeiten,dachte zuerst vielleicht war ich einfach nur zu doof aber anscheinend wurde ich verschoben da ich mir ziemlich sicher bin das ich einfach missverstanden wurde in der Beschreibung meines Problemes nun aber wieder zurückgeschickt wurde.^^

 

Themen zu Rootkit und vermutlich Trojaner
anti, appdata, code, csrss.exe, defender, driver, handy, harddisk, problem, registry, rootkit, scan, secure, security, services, setup, software, spoolsv.exe, start, svchost.exe, system, system32, temp, trojaner, uplay, windowsapps, wmi


« Vermutlich habe ich Ein Virus oder Trojaner | Remage Repair deinstallieren windows10, google chrome »


Ähnliche Themen: Rootkit und vermutlich Trojaner


  1. vermutlich Trojaner
    Log-Analyse und Auswertung - 04.09.2016 (1)
  2. Vermutlich Virus bzw Trojaner?
    Log-Analyse und Auswertung - 22.12.2015 (47)
  3. Trojaner paket@dhl.de <m38609508-1> / vermutlich Banking-Trojaner
    Log-Analyse und Auswertung - 17.03.2015 (13)
  4. Windows 7: Vermutlich Rootkit-Virus
    Log-Analyse und Auswertung - 31.03.2014 (13)
  5. Vermutlich Trojaner am Laptop
    Plagegeister aller Art und deren Bekämpfung - 23.01.2014 (15)
  6. Windows 7 Sperrbildschirm vermutlich GVU Trojaner
    Log-Analyse und Auswertung - 02.11.2013 (1)
  7. Vista und vermutlich GVU Trojaner ?
    Plagegeister aller Art und deren Bekämpfung - 05.04.2013 (6)
  8. PC gesperrt, vermutlich BKA Trojaner
    Plagegeister aller Art und deren Bekämpfung - 08.03.2013 (21)
  9. Trojaner auf Windows XP, vermutlich GVU 2.10
    Log-Analyse und Auswertung - 19.12.2012 (23)
  10. BKA Trojaner vermutlich 1.13 HILFE!
    Plagegeister aller Art und deren Bekämpfung - 12.09.2012 (1)
  11. OTLpe-fix für Trojaner, vermutlich Apple_Store.exe
    Plagegeister aller Art und deren Bekämpfung - 15.06.2012 (5)
  12. vermutlich dropper gen trojaner
    Plagegeister aller Art und deren Bekämpfung - 20.09.2011 (12)
  13. Vermutlich Trojaner (dwm.exe / csrss.exe)
    Log-Analyse und Auswertung - 17.06.2011 (1)
  14. Vermutlich Trojaner auf dem PC - was tun?
    Antiviren-, Firewall- und andere Schutzprogramme - 05.07.2010 (1)
  15. Brauch da mal Hilfe hab vermutlich nen Rootkit
    Log-Analyse und Auswertung - 08.05.2009 (6)
  16. Trojaner vermutlich B.tmp.exe
    Plagegeister aller Art und deren Bekämpfung - 05.12.2008 (2)
  17. Hab vermutlich einen Trojaner
    Log-Analyse und Auswertung - 08.11.2005 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Rootkit und vermutlich Trojaner - Habe mich mal auf anweisung( http://www.trojaner-board.de/182318-...ten-orten.html ) wieder hierher begeben. Hatte meinen thread ursprünglich hier erstellt wurde aber offensichtlich missverstanden.Es geht hierbei keineswegs um ein Problem mit meinem Handy als - Rootkit und vermutlich Trojaner...
Archiv
Du betrachtest: Rootkit und vermutlich Trojaner auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131