Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]

rocker2511 · 24.05.2017, 22:35

Hallo zusammen,

bei der Installation der VPN Software von Perfect Privacy hat Avira (Free Version) die folgende Fundmeldung ausgespuckt:

Code:

ATTFilter

24.05.2017, 22:15:04 [Real-Time Protection] Malware found
	The pattern of 'TR/Dropper.Gen [trojan]'
	detected in file 'C:\Users\rocker2511\AppData\Local\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\cache2\entries\B9458A4FA6BB12A42317D79BB34E62FEC82C05BB.
	Action performed: Move file to quarantine

Ich habe daraufhin bei Avira das File gelöscht und die Software wieder deinstalliert.
Zwar vermute ich, dass es ein false positive war, und auch sollte Avira ja theoretisch schlimmeres verhindert haben. Sollte es tatsächlich echt gewesen sein, würde mich aber gerne absichern, bevor ich den PC wieder für Banking o.ä. nutze.

Gerne wollte ich mich an die Richtline halten, die unter http://www.trojaner-board.de/69886-a...-beachten.html angegeben ist, bei der Installation von FRST64 meldet sich allerdings der Windows Defender mit folgender Meldung:

Code:

ATTFilter

Der Computer wurde durch Windows geschützt. 
Von Windows Defender Smartscreen wurde der Start einer unbekannten App verhindert. 
Die Ausführund dieser App stellt u.U. ein Risiko für den PC dar.

Da dies nicht in der Anleitung aufgeführt ist, wollte ich bevor ich auf "Trotzdem Ausführen" klicke, nachfragen, ob das so normal ist.

Schon einmal vielen Dank für eure Hilfe.

Beste Grüße
rocker2511

cosinus · 24.05.2017, 22:46

hi,

Bitte Avira deinstallieren. Am besten mit Revo, siehe weiter unten. Avira ost totaler Schrott und absolut unnötig, Windows bringt ein eingebautes AV mit (Windows Defender)

Das Teil empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

(alles von Avira)
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

rocker2511 · 24.05.2017, 22:54

Hallo cosinus,

vielen Dank für deine schnelle Rückmeldung.
Alle Avira Software habe ich entsprechend deiner Anleitung entfernt und den PC neu gestartet.

cosinus · 24.05.2017, 22:56

gut

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

rocker2511 · 24.05.2017, 22:58

Hierzu nochmal kurz die Frage, ob das in meinem Eingangspost beschriebene Verhalten bei der Installation von FRST unter Win10 normal ist?

cosinus · 24.05.2017, 23:01

achso, ja das ist normal. Über erweitert bitte FRST erlauben, sonst hast du keine Logs und Hilfe ist unmöglich

rocker2511 · 24.05.2017, 23:06

Zitat:

Zitat von cosinus

achso, ja das ist normal. Über erweitert bitte FRST erlauben, sonst hast du keine Logs und Hilfe ist unmöglich

Hatte ich mir schon gedacht, danke aber für die Rückbestätigung.

Hier nun der Inhalt der Logdateien:

FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017
durchgeführt von Dennis (Administrator) auf DENNIS-ZOCK-PC (25-05-2017 00:01:57)
Gestartet von C:\Users\Dennis\Desktop
Geladene Profile: Dennis (Verfügbare Profile: Dennis & DefaultAppPool)
Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
() C:\Windows\SysWOW64\ASGT.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIKEE.EXE
(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginThinSetupInternal.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\splwow64.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1223168 2016-12-09] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-04-30] (TomTom)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [GalaxyClient] => E:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [4954176 2017-05-22] (GOG.com)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dennis\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIKEE.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [10737184 2016-12-26] (RedFox)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Discord] => C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27774936 2017-04-02] (Skype Technologies S.A.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mediatek Wireless Utility.lnk [2017-03-26]
ShortcutTarget: Mediatek Wireless Utility.lnk -> C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe (Mediatek Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{195c279c-9b92-4a79-976a-3ac520f7026c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{54deaf3b-03c8-41bd-ae4c-dbec6e7f4c6d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6daff1b1-d1c8-459b-adc5-05e0d6458d6e}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{b8aac3fa-f900-4e7f-834d-2f112cf7a49d}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2002795488-2026584554-4065357487-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-05-06] (Microsoft Corporation)
BHO: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-05-05] (Microsoft Corporation)
BHO-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-12] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-05] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-12] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default [2015-07-09]
FF Extension: (Emulator) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\Navcore.9.500.1161701@tomtom.com [2015-04-10] [ist nicht signiert]
FF Extension: (Tyre) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\tyre@tyre.tk [2015-04-10] [ist nicht signiert]
FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2015-07-09] [ist nicht signiert]
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 [2017-05-24]
FF Homepage: Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 -> hxxps://www.google.de/?gws_rd=ssl
FF Extension: (Mailvelope) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2017-04-18]
FF Extension: (Adblock Plus) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Greasemonkey) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-27]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-06] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-12] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-12] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-05] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-05] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-08-28] (Nexon)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default [2017-05-22]
CHR Extension: (Google Präsentationen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]
CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (NicoNico Audio Extractor) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecoahjklhopckkiefihjloeidikepdh [2015-03-09]
CHR Extension: (Adobe Acrobat) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-13]
CHR Extension: (Google Tabellen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Avira Browserschutz) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-03-15]
CHR Extension: (Google Docs Offline) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-05-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-13]
CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2017-05-05] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-02-08] (Digital Wave Ltd.)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [236832 2015-10-21] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Datei ist nicht signiert]
S3 GalaxyClientService; E:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [512576 2017-05-22] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-19] (GOG.com)
S3 HmaOpenVpnService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [38912 2017-02-02] (The OpenVPN Project)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2014-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.)
R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Datei ist nicht signiert]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2147216 2017-04-10] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3116440 2017-04-10] (Electronic Arts)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2015-12-23] (Advanced Micro Devices)
S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)
R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2016-12-08] (Advanced Micro Devices)
S3 atillk64; C:\Program Files (x86)\ASUS\GPU Tweak\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.)
R3 cbfs3; C:\WINDOWS\System32\drivers\cbfs3.sys [341904 2011-09-19] (EldoS Corporation)
R3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [661760 2016-01-02] (C-MEDIA)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 EagleX64; C:\WINDOWS\system32\drivers\EagleX64.sys [174728 2015-08-28] (AhnLab, Inc.)
S3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)
R3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2016-11-23] (The OpenVPN Project)
S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-10-05] (Microsoft Corporation)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 USBMULCD; C:\WINDOWS\system32\drivers\CM10664.sys [4135424 2013-09-12] (C-Media Electronics Inc)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-11-19] (Cisco Systems, Inc.)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [41472 2017-03-18] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-25 00:01 - 2017-05-25 00:02 - 00025009 _____ C:\Users\Dennis\Desktop\FRST.txt
2017-05-25 00:01 - 2017-05-25 00:01 - 00000000 ____D C:\FRST
2017-05-25 00:01 - 2017-05-24 22:47 - 02429952 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2017-05-24 23:48 - 2017-05-24 23:48 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\Program Files\VS Revo Group
2017-05-24 22:19 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis\OpenVPN
2017-05-24 22:18 - 2017-05-24 22:18 - 00000953 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\TAP-Windows
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\OpenVPN
2017-05-24 22:05 - 2017-05-24 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HMA! Pro VPN
2017-05-23 17:56 - 2017-05-23 17:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-05-18 19:02 - 2017-05-18 19:02 - 00003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2017-05-16 18:06 - 2017-05-16 18:06 - 10320248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00924544 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00864120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00514424 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00121208 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00112512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00112000 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00091520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00029056 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00029048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00573800 _____ C:\WINDOWS\system32\amdmiracast.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00196176 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00139080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2017-05-13 10:58 - 2017-05-18 19:13 - 00000949 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job
2017-05-13 10:58 - 2017-05-18 19:13 - 00000763 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job
2017-05-13 10:58 - 2017-05-13 10:58 - 00004148 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}
2017-05-13 10:58 - 2017-05-13 10:58 - 00003970 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}
2017-05-10 22:29 - 2017-05-10 22:29 - 16627692 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.zip
2017-05-10 22:29 - 2017-05-10 22:29 - 16507878 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.7z
2017-05-10 22:24 - 2017-05-10 22:26 - 00000000 ____D C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen
2017-05-09 22:11 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-09 22:11 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-09 22:11 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-09 22:11 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-09 22:11 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-09 22:11 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-09 22:11 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-09 22:11 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-09 22:11 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-09 22:11 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-09 22:11 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-09 22:11 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-09 22:11 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-09 22:11 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-09 22:11 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-09 22:11 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-09 22:11 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-05-09 22:11 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-09 22:11 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-05-09 22:11 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-09 22:11 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-09 22:11 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-05-09 22:11 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-09 22:11 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-09 22:11 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-09 22:11 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-09 22:11 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-09 22:11 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-09 22:11 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-09 22:11 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-09 22:11 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-09 22:11 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-09 22:11 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-09 22:11 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-09 22:11 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-09 22:11 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-09 22:11 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-09 22:11 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-09 22:11 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-09 22:11 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-09 22:11 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-09 22:11 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-05-09 22:11 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-09 22:11 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-05-09 22:11 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-09 22:11 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-09 22:11 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-09 22:11 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-09 22:11 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-09 22:11 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-09 22:11 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-05-09 22:11 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-09 22:11 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-09 22:11 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-09 22:11 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-09 22:11 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-09 22:11 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-09 22:11 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-09 22:11 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-05-09 22:11 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-09 22:11 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-09 22:11 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-09 22:11 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-09 22:11 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-09 22:11 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-09 22:11 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-09 22:11 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-09 22:11 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-05-09 22:11 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-09 22:11 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-09 22:11 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-05-07 14:55 - 2017-05-07 14:55 - 19741458 _____ C:\Users\Dennis\Desktop\Dryzz_MT.zip
2017-05-07 14:55 - 2017-05-07 14:47 - 02050374 _____ C:\Users\Dennis\Desktop\Master_Thesis_Dryzz_Corrected.pdf
2017-05-06 22:20 - 2017-05-06 22:20 - 00000000 ____D C:\Users\Dennis\AppData\Local\DBG
2017-05-02 08:55 - 2017-05-02 08:55 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-02 08:55 - 2017-05-02 08:55 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-05-02 08:55 - 2017-05-02 08:55 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-05-02 08:54 - 2017-03-17 23:00 - 07702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll
2017-05-02 08:54 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-05-02 08:54 - 2017-03-17 23:00 - 02454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll
2017-05-02 08:54 - 2017-03-17 22:59 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-05-02 08:54 - 2017-03-17 22:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 07405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 01914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll
2017-05-02 08:54 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-05-02 08:54 - 2017-03-17 22:43 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-05-02 08:54 - 2017-03-17 22:40 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 07244800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 01868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll
2017-05-02 08:54 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-05-02 08:54 - 2017-02-10 12:22 - 00002060 _____ C:\WINDOWS\system32\noise.jpn
2017-05-02 08:53 - 2017-05-02 08:53 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\msmq
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\MSBuild
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\inetpub
2017-05-02 08:53 - 2017-05-02 08:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-05-02 08:53 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-05-02 08:52 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-02 08:52 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-05-02 08:10 - 2017-05-02 08:10 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-02 08:09 - 2017-05-02 08:09 - 00000020 ___SH C:\Users\Dennis\ntuser.ini
2017-05-02 08:09 - 2017-05-02 08:09 - 00000000 ____D C:\ProgramData\USOShared
2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-05-02 08:04 - 2017-05-24 23:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-02 08:04 - 2017-05-24 21:24 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{634CF361-F616-4788-8E86-4D331F2B736A}
2017-05-02 08:04 - 2017-05-20 10:31 - 00003978 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1491080137
2017-05-02 08:04 - 2017-05-09 21:44 - 00004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-05-02 08:04 - 2017-05-09 21:44 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-02 08:04 - 2017-05-06 12:36 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-02 08:04 - 2017-05-02 08:11 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-02 08:04 - 2017-05-02 08:04 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003248 _____ C:\WINDOWS\System32\Tasks\MATLAB R2015b Startup Accelerator
2017-05-02 08:04 - 2017-05-02 08:04 - 00002166 _____ C:\WINDOWS\System32\Tasks\arp_flush
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2017-05-02 08:01 - 2017-05-02 08:01 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-02 07:59 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-05-02 07:59 - 2017-05-02 07:59 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-05-02 07:59 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-05-02 07:58 - 2017-05-24 23:56 - 02256080 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-02 07:58 - 2017-05-24 23:51 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-05-02 07:58 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis
2017-05-02 07:58 - 2017-05-18 19:02 - 00000000 ____D C:\Program Files\AMD
2017-05-02 07:58 - 2017-05-02 08:03 - 00000000 ____D C:\Users\DefaultAppPool
2017-05-02 07:58 - 2017-05-02 07:58 - 02011386 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Vorlagen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Startmenü
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Netzwerkumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Lokale Einstellungen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Eigene Dateien
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Druckumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Verlauf
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-05-02 07:57 - 2017-05-24 21:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-02 07:57 - 2017-05-10 07:24 - 00703544 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\Program Files\Realtek
2017-05-01 16:55 - 2017-05-02 08:09 - 00000000 ___DC C:\WINDOWS\Panther
2017-04-27 23:40 - 2017-04-27 23:40 - 00001256 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk
2017-04-27 23:40 - 2017-04-27 23:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\UNP
2017-04-27 23:10 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-04-27 23:10 - 2017-04-27 23:11 - 00000000 ____D C:\Program Files\UNP
2017-04-25 18:40 - 2017-04-25 18:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\GOG.com

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-24 23:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2017-05-24 23:56 - 2017-03-20 06:41 - 00976010 _____ C:\WINDOWS\system32\perfh007.dat
2017-05-24 23:56 - 2017-03-20 06:41 - 00223028 _____ C:\WINDOWS\system32\perfc007.dat
2017-05-24 23:55 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-24 23:55 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-24 23:52 - 2016-11-19 13:13 - 00000000 ____D C:\Users\Dennis\AppData\LocalLow\Mozilla
2017-05-24 23:52 - 2014-12-05 00:51 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Skype
2017-05-24 23:51 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-05-24 23:51 - 2016-11-19 02:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-24 23:51 - 2014-12-05 03:42 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys
2017-05-24 23:51 - 2014-12-05 00:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-24 23:50 - 2015-08-02 13:31 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-24 23:50 - 2014-12-05 00:55 - 00000000 ____D C:\ProgramData\Avira
2017-05-24 22:18 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-05-24 22:05 - 2016-12-14 22:14 - 00001222 _____ C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2017-05-24 22:05 - 2016-12-14 22:14 - 00000000 ____D C:\Program Files (x86)\HMA! Pro VPN
2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-24 19:13 - 2015-04-22 23:24 - 00000000 ____D C:\Users\Dennis\AppData\Local\LogMeIn Hamachi
2017-05-24 19:10 - 2014-12-19 21:54 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Raptr
2017-05-23 21:04 - 2014-12-05 03:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-23 21:02 - 2014-12-05 03:00 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-05-23 17:55 - 2015-01-31 15:27 - 00000000 ____D C:\Program Files\Microsoft Office
2017-05-20 10:31 - 2017-04-01 22:55 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-05-20 10:31 - 2017-04-01 22:55 - 00000000 ____D C:\Program Files\Opera
2017-05-18 19:02 - 2015-07-22 23:09 - 00000000 ____D C:\Program Files (x86)\AMD
2017-05-18 19:02 - 2014-12-05 00:44 - 00000000 ____D C:\AMD
2017-05-16 18:06 - 2017-03-21 18:24 - 08479104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 02536320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 02198400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 01516416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00777088 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00696192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ C:\WINDOWS\system32\dgtrayicon.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00546688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00531328 _____ C:\WINDOWS\system32\GameManager64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00483712 _____ C:\WINDOWS\system32\atieah64.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00478080 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00467328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00411008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00365440 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00360312 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00334208 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00278400 _____ C:\WINDOWS\system32\clinfo.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00276352 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00245112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00242048 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00203648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00191360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00169856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00167808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00156704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00150912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00148440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00135040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00133504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00122744 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00115072 _____ C:\WINDOWS\system32\atidxx64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00101760 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00099192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00075136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00068992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00044920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00042368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00164400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00116072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00102520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00102512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Oracle
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-12 17:49 - 2014-12-19 22:38 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-05-12 17:44 - 2014-12-06 02:58 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-12 17:44 - 2014-12-06 02:58 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-11 18:33 - 2015-08-02 13:38 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2017-05-10 19:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-05-10 07:33 - 2015-08-02 13:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-09 22:14 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Origin
2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Origin
2017-05-07 16:40 - 2014-12-05 01:48 - 00000000 ____D C:\DayZ
2017-05-04 21:02 - 2014-12-05 16:41 - 00000000 ____D C:\Program Files (x86)\Origin
2017-05-03 07:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-05-02 08:57 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-05-02 08:55 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-02 08:54 - 2017-03-20 06:42 - 00000000 ____D C:\WINDOWS\OCR
2017-05-02 08:53 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-05-02 08:53 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2017-05-02 08:53 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2017-05-02 08:53 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-05-02 08:53 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-05-02 08:53 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-05-02 08:53 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-05-02 08:10 - 2015-08-02 13:40 - 00002434 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-02 08:10 - 2015-08-02 13:40 - 00000000 ___RD C:\Users\Dennis\OneDrive
2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-02 08:06 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-05-02 08:05 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-05-02 08:04 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell
2017-05-02 08:04 - 2015-08-02 13:36 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media
2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-02 08:02 - 2017-03-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2017-05-02 08:02 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-05-02 08:02 - 2017-02-27 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-05-02 08:02 - 2017-02-06 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite
2017-05-02 08:02 - 2017-02-05 23:46 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2017-05-02 08:02 - 2017-02-05 23:38 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake
2017-05-02 08:02 - 2017-01-09 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2017-05-02 08:02 - 2016-12-15 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex-Editor MX
2017-05-02 08:02 - 2016-12-15 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-05-02 08:02 - 2016-11-22 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2017-05-02 08:02 - 2016-11-15 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediatek Wireless
2017-05-02 08:02 - 2016-03-06 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-02 08:02 - 2016-03-05 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Passfoto Manager
2017-05-02 08:02 - 2016-03-05 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PassbildPro
2017-05-02 08:02 - 2016-02-25 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-05-02 08:02 - 2016-02-07 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2017-05-02 08:02 - 2016-01-31 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio
2017-05-02 08:02 - 2016-01-31 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9
2017-05-02 08:02 - 2016-01-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Houhou SRS
2017-05-02 08:02 - 2016-01-05 14:19 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2017-05-02 08:02 - 2015-12-16 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout 4
2017-05-02 08:02 - 2015-12-09 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2017-05-02 08:02 - 2015-11-22 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosteRazor
2017-05-02 08:02 - 2015-09-12 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-05-02 08:02 - 2015-07-25 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MonInfo
2017-05-02 08:02 - 2015-07-16 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-05-02 08:02 - 2015-04-10 19:08 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tyre
2017-05-02 08:02 - 2015-04-10 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tyre
2017-05-02 08:02 - 2015-02-28 18:42 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RMPrepUSB
2017-05-02 08:02 - 2015-02-18 22:52 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TonidoDrive
2017-05-02 08:02 - 2015-02-17 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-05-02 08:02 - 2015-01-29 19:37 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2017-05-02 08:02 - 2015-01-29 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2017-05-02 08:02 - 2015-01-16 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2017-05-02 08:02 - 2014-12-31 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN
2017-05-02 08:02 - 2014-12-19 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2017-05-02 08:02 - 2014-12-11 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Middle Earth Shadow of Mordor
2017-05-02 08:02 - 2014-12-11 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Advanced Warfare
2017-05-02 08:02 - 2014-12-11 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Vanishing of Ethan Carter
2017-05-02 08:02 - 2014-12-05 18:11 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2017-05-02 08:02 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-05-02 08:02 - 2014-12-05 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-05-02 08:02 - 2014-12-05 14:47 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-02 08:02 - 2014-12-05 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GBT_DL_OBJ
2017-05-02 08:02 - 2014-12-05 02:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2017-05-02 08:02 - 2014-12-05 02:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-05-02 08:02 - 2014-12-05 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-05-02 08:02 - 2014-12-05 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-02 08:02 - 2014-12-05 00:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-05-02 08:02 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\System
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-02 08:00 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-02 08:00 - 2016-11-15 15:46 - 00000000 ____D C:\WINDOWS\system32\RaLanguages
2017-05-02 08:00 - 2016-11-14 18:33 - 00000000 ____D C:\WINDOWS\system32\€
2017-05-02 08:00 - 2015-02-23 17:27 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2017-05-02 08:00 - 2015-01-29 20:39 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\System
2017-05-02 07:59 - 2017-03-07 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-02 07:59 - 2017-01-31 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-05-02 07:59 - 2017-01-21 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2017-05-02 07:59 - 2016-12-16 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2017-05-02 07:59 - 2016-11-16 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte
2017-05-02 07:59 - 2016-11-14 21:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-05-02 07:59 - 2016-11-14 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raptr
2017-05-02 07:59 - 2016-01-10 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft
2017-05-02 07:59 - 2015-11-03 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
2017-05-02 07:59 - 2015-08-19 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-05-02 07:59 - 2015-08-19 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EpsonNet
2017-05-02 07:59 - 2015-05-27 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\leawo
2017-05-02 07:59 - 2015-05-15 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2017-05-02 07:59 - 2015-05-12 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-05-02 07:59 - 2015-04-18 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark
2017-05-02 07:59 - 2015-03-12 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
2017-05-02 07:59 - 2015-03-11 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools
2017-05-02 07:59 - 2014-12-20 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frontier
2017-05-02 07:59 - 2014-12-06 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games
2017-05-02 07:59 - 2014-12-05 00:59 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-05-02 07:59 - 2014-12-05 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2017-05-02 07:59 - 2014-12-05 00:33 - 00000000 ____D C:\Program Files\Intel
2017-05-02 07:58 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-04-30 13:24 - 2017-01-21 15:34 - 00000000 ____D C:\Users\Dennis\Desktop\Bücher
2017-04-29 20:26 - 2014-12-07 00:46 - 00000000 ____D C:\ProgramData\EA Logs
2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\system32\atiapfxx.blb
2017-04-25 00:56 - 2017-03-21 18:24 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2017-04-25 00:51 - 2017-03-21 18:24 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-02-18 17:59 - 2016-01-21 22:52 - 0000600 _____ () C:\Users\Dennis\AppData\Local\PUTTY.RND
2017-03-10 15:41 - 2017-03-10 15:41 - 0000865 _____ () C:\Users\Dennis\AppData\Local\recently-used.xbel
2016-01-11 19:04 - 2016-01-30 12:29 - 0000040 ___SH () C:\ProgramData\.zreglib
2017-05-02 07:57 - 2017-05-02 07:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-05-19 20:02

==================== Ende von FRST.txt ============================

Addition.txt folgt im nächsten Post, wird sonst zu lang.

rocker2511 · 24.05.2017, 23:06

Addition.txt

Code:

ATTFilter

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-05-2017
durchgefÃ¼hrt von Dennis (25-05-2017 00:02:28)
Gestartet von C:\Users\Dennis\Desktop
Windows 10 Pro Version 1703 (X64) (2017-05-02 06:06:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2002795488-2026584554-4065357487-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2002795488-2026584554-4065357487-503 - Limited - Disabled)
Dennis (S-1-5-21-2002795488-2026584554-4065357487-1000 - Administrator - Enabled) => C:\Users\Dennis
Gast (S-1-5-21-2002795488-2026584554-4065357487-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2002795488-2026584554-4065357487-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS B14.1003.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
@BIOS B14.1003.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden
3DMark (HKLM-x32\...\{66847f67-7331-422f-bc6c-d961c453d7df}) (Version: 1.5.884.0 - Futuremark)
3DMark (Version: 1.5.884.0 - Futuremark) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
ACP Application (Version: 2015.1223.1036.43 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Anki (HKLM-x32\...\Anki) (Version:  - )
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 8.0.9.0 - RedFox)
APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.16.0503 - Gigabyte)
APP Center (x32 Version: 1.16.0503 - Gigabyte) Hidden
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.2.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.5.2.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Battlefield 3â„¢ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version:  - Ubisoft)
BioShock (HKLM-x32\...\Steam App 7670) (Version:  - 2K Boston)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)
Borderlands 2 (HKLM-x32\...\Borderlands 2_is1) (Version:  - )
Call of Duty Advanced Warfare (HKLM-x32\...\Call of Duty Advanced Warfare_is1) (Version: 1.0 - ENiGMA)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Child of Light (HKLM-x32\...\Steam App 256290) (Version:  - Ubisoft MontrÃ©al)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.4.00243 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 4.4.00243 - Cisco Systems, Inc.) Hidden
CloudDrive (HKLM-x32\...\TonidoDrive) (Version:  - )
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Spaceâ„¢ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Deadfall Adventures (HKLM-x32\...\Steam App 231330) (Version:  - The Farm 51)
Democracy 3 (HKLM-x32\...\Steam App 245470) (Version:  - Positech Games)
Destination Sol (HKLM-x32\...\Steam App 342980) (Version:  - Milosh Petrov)
Discord (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Divinity: Original Sin Enhanced Edition (HKLM-x32\...\Steam App 373420) (Version:  - Larian Studios)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)
Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)
EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.00.0002 - GIGABYTE)
EasyTune (x32 Version: 1.00.0002 - GIGABYTE) Hidden
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Elcomsoft Cloud eXplorer (HKLM-x32\...\{D5ED1A08-0171-448C-92ED-D94365EBB226}) (Version: 1.00.8203.2945 - Elcomsoft Co. Ltd.)
Elite Dangerous Launcher version 0.4.4468.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.4468.0 - Frontier Developments)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)
EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet SetupManager V2 (HKLM-x32\...\InstallShield_{485863E4-C20E-4629-A3B1-B4C8E706A7CB}) (Version: 2.2.7 - SEIKO EPSON CORPORATION)
EpsonNet SetupManager V2 (x32 Version: 2.2.7 - SEIKO EPSON CORPORATION) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
EVE Online (HKLM\...\Steam App 8500) (Version:  - CCP)
Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)
Fallout 3 (HKLM-x32\...\Steam App 22300) (Version:  - Bethesda Game Studios)
Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version:  - )
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.00 - Ubisoft)
Far Cry 4 (HKLM-x32\...\RmFyQ3J5NA==_is1) (Version: 1 - )
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
FORCED (HKLM-x32\...\Steam App 249990) (Version:  - BetaDwarf)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.36.208 - Digital Wave Ltd)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
Futuremark SystemInfo (HKLM-x32\...\{79659071-4B68-4EC8-833C-49C97B68FCD0}) (Version: 4.36.512.0 - Futuremark)
Gauntletâ„¢  (HKLM-x32\...\Steam App 258970) (Version:  - Arrowhead Game Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hack 'n' Slash (HKLM-x32\...\Steam App 246070) (Version:  - Double Fine Productions)
HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
hide.me VPN Version 1.0.5 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.5 - eVenture Limited)
HMA! Pro VPN 3.4.6.1 (HKLM-x32\...\HMA! Pro VPN) (Version: 3.4.6.1 - Privax Ltd)
Houhou SRS version 1.2 (HKLM-x32\...\Houhou SRS_is1) (Version: 1.2 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
IntelÂ® Chipsatz-GerÃ¤tesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Kill The Bad Guy (HKLM-x32\...\Steam App 293940) (Version:  - Exkee)
Killing Floor 2 (HKLM-x32\...\Steam App 232090) (Version:  - Tripwire Interactive)
Leawo Blu-ray Player version  1.8.8.0 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.8.8.0 - leawo Software)
LibreOffice 4.4.6.3 (HKLM-x32\...\{1013DB12-EC2E-455E-B5ED-BFD056DC1A99}) (Version: 4.4.6.3 - The Document Foundation)
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
MakeMKV v1.10.4 (HKLM-x32\...\MakeMKV) (Version: v1.10.4 - GuinpinSoft inc)
Mass Effect (HKLM-x32\...\Steam App 17460) (Version:  - BioWare)
Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version:  - BioWare)
Mass Effectâ„¢ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
MATLAB R2015b (HKLM\...\Matlab R2015b) (Version: 8.6 - MathWorks)
Mediatek RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.39.173 - MediatekWiFi)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.7369.2130 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Middle Earth Shadow of Mordor (HKLM-x32\...\Middle Earth Shadow of Mordor_is1) (Version:  - )
MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version:  - EnTech Taiwan)
Mozilla Firefox 53.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 de)) (Version: 53.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
OpenVPN 2.4.2-I601  (HKLM\...\OpenVPN) (Version: 2.4.2-I601 - OpenVPN Technologies, Inc.)
Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.4.9.38188 - Electronic Arts, Inc.)
Papers, Please (HKLM-x32\...\Steam App 239030) (Version:  - 3909)
PassbildPro v2.6a (HKLM-x32\...\PassbildPro_is1) (Version:  - PassbildPro)
Passfoto Manager Ver. 1.3 (HKLM-x32\...\Passfoto Manager_is1) (Version:  - NoSpy Software Lab)
PDF24 Creator 8.0.3 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhonerLite 2.45 (HKLM-x32\...\PhonerLite_is1) (Version: 2.45 - Heiko Sommerfeldt)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc)
Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version:  - Crystal Dynamics)
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version:  - Piranha Bytes)
RMPrepUSB (HKLM-x32\...\RMPrepUSB) (Version:  - )
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Shadow Warrior (HKLM-x32\...\Steam App 233130) (Version:  - Flying Wild Hog)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.00.0000 - GIGABYTE)
SIV (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Skypeâ„¢ 7.34 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.34.103 - Skype Technologies S.A.)
Spintires (HKLM-x32\...\Steam App 263280) (Version:  - OoveeÂ® Game Studios)
STAR WARSâ„¢ Battlefrontâ„¢ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)
Talisman: Digital Edition (HKLM-x32\...\Steam App 247000) (Version:  - Nomad Games Limited)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeXstudio 2.10.8 (HKLM-x32\...\TeXstudio_is1) (Version: 2.10.8 - Benito van der Zander)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
The Secret of Monkey Island: Special Edition (HKLM-x32\...\Steam App 32360) (Version:  - LucasArts)
The Vanishing of Ethan Carter (HKLM-x32\...\The Vanishing of Ethan Carter_is1) (Version:  - )
The Whispered World Special Edition (HKLM-x32\...\Steam App 268540) (Version:  - Daedalic Entertainment)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)
Tiger Knight: Empire War (HKLM\...\Steam App 534500) (Version:  - NetDragon Websoft Holdings Limited)
TI-Nspireâ„¢ CAS Student Software (HKLM-x32\...\{F03A8756-7FCB-4DCD-9AC1-12C63A6075F1}) (Version: 3.9.0.463 - Texas Instruments Inc.)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
TomTom HOME (HKLM-x32\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Transcendence (HKLM-x32\...\Steam App 364510) (Version:  - Kronosaur Productions)
Tyre (HKLM-x32\...\Tyre_is1) (Version: 6.4.0.6 - 't Schrijverke)
Undertale (HKLM\...\Steam App 391540) (Version:  - tobyfox)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
USB Multi-Channel Audio Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006206}) (Version: 1.00.0008 - C-Media Electronics, Inc.)
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.9.0 - Elaborate Bytes)
Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version:  - RuneStorm)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Warhammer Quest (HKLM-x32\...\Steam App 326670) (Version:  - Rodeo Games)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0C3B8712-2743-48BD-A022-B4200115B15E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {0C536337-0CDC-45E1-903B-1A9C6A6B7933} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {107BFE19-7528-40A0-998A-C4A82110F2D9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)
Task: {134D1A35-FDCD-4817-AA02-115C2A62BB1C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)
Task: {18CA43DE-A075-4CCD-AC81-C76668062D58} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {1BC57658-67A8-451B-968D-CA240ECD1E40} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1E1B9767-CDFA-4232-9FA6-2E6F21AEB071} - System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {1E53F75E-BEF8-4CE0-9B4B-C687D9FA797B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {21824C20-E975-4603-8522-320FA332ED39} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2C29168A-09A2-44D5-909A-7EA2F780AE26} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2DA9B8FC-0C73-48D6-ABF2-30EC30C76767} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {31BEA046-56E0-4D59-BCFB-2285FF7FB4E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)
Task: {335DF35C-CFE6-418E-BDAE-512DD89C797B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {468CFE7D-C8B9-4E7B-BD5B-4230E0F06F81} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {46B1B2E9-DE3D-4BAF-8CA4-F981DEDD1202} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)
Task: {479EF5A4-C830-451B-9977-FFDD71F48016} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4E7A87EB-7B7F-4FA2-B476-557EB04F7ABE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe 
Task: {5DD9CEAC-A36F-4398-8B11-0A486120B9E1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {60EDE66C-E6B2-4AD5-81E8-13CC2C8386C8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {65067170-8470-4C93-BAF2-19FFBAEEEF0F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {6AFD0255-0ED0-419C-B6D5-95BD71359A74} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6FC9EBEA-BC08-41AE-B004-58408A7B0D48} - System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {7214D99B-28C1-457B-A5A1-BBAC0FF0DBEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {774A0F66-E2F1-47A1-BE12-D3F7B351426B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe 
Task: {7820ED84-DD48-4DCB-BBB5-38FAB0A8AC9F} - System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {81425B80-0453-4DC2-8102-375B54E9A7C2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated)
Task: {830B3AE3-0B5D-4574-9DEC-2F05194B49A6} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {85DDD876-F0C4-4BE4-BA13-6D4C5D2C428D} - System32\Tasks\MATLAB R2015b Startup Accelerator => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe [2015-07-30] ()
Task: {86720F65-531C-418B-82D6-009C7F4F901C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {879E17BB-C3CB-4CB9-AC5F-BB792D7F51D0} - System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {92E5D5FE-5288-4700-96B1-C4545452CA35} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {96515D1F-2F89-4D9F-97FE-3BB632C13368} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-26] ()
Task: {9E4B0ADA-55F2-4B64-9E69-3C59D88ACB98} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {9F5DB38C-8E11-41CD-A313-26F2BC2222BF} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {A01C12CD-1656-4A58-A7AC-FF75834CA7C2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-06] (Microsoft Corporation)
Task: {A0D1B58F-9267-47CC-81C4-9F32E9C7C158} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {A1117A36-8F68-46DE-98D8-592B58FF68D3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe 
Task: {A8E079FC-6829-4396-B1CF-106D7F7F9933} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {A93A7AFD-DB3D-4E47-8DAD-5F7678AB77B4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe 
Task: {ABE2B663-9B4B-4ABF-B96F-76888D49E9AC} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {ACD1141C-2870-44BA-9521-4E88A22BAEC9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated)
Task: {B5994E13-3374-40A5-9041-9E83E5446E4F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {B688EEC8-585D-406C-A7B8-A74B608AD0B2} - System32\Tasks\Opera scheduled Autoupdate 1491080137 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software)
Task: {B7BCDC4F-DA02-479A-8A99-581AB05576AE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C059B4FA-0A31-4C63-8A43-D0E37C4D0FBF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C18890E5-6EDB-40D5-A0B6-DA5DE3036E77} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C7F2E336-27B9-4032-B230-73F0892A712D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {C89711F7-0823-4DB8-BBBF-2CB8CC3174E4} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {D39CB3D4-C0FF-4B49-971E-2D411AC6985C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {D5C6685E-6D00-41E1-9021-965ABA38A6BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)
Task: {E25C6802-A114-456B-9B90-A7E6BE3A7B53} - System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {E5115114-5C02-4114-A7AD-62B5D391EE30} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {F3E5F059-038B-4B71-B726-283DB44B9BAB} - System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {F40006B3-B99B-43CA-AA9A-04AF9CEE7B14} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {FB79D84D-835E-4A74-BCF1-5EA79615A574} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{086E526A-2170-469E-BCA6-33E120A37FD4} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9C19764F-9338-48FD-B114-CB1DA88859EB} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9F0E0896-8027-4110-AE14-1994D9793796} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\MATLAB R2015b Startup Accelerator.job => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe

==================== VerknÃ¼pfungen =============================

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2015-04-14 16:27 - 2015-04-14 16:27 - 00016896 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-07-30 10:52 - 2015-07-30 10:52 - 01244456 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
2016-09-14 03:00 - 2016-09-14 03:00 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 00191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-05-09 18:30 - 2017-05-09 18:31 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 43195904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 02457088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\skypert.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2017-05-11 08:44 - 2017-05-11 08:44 - 00632448 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2016-12-09 18:09 - 2016-12-09 18:09 - 00073728 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-11-14 19:34 - 2017-04-29 20:11 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2014-01-22 14:53 - 2014-01-22 14:53 - 01607680 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\BDR_info.dll
2015-02-16 11:47 - 2015-02-16 11:47 - 00105472 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ycc.dll
2017-01-18 15:30 - 2017-01-04 15:28 - 01958912 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-01-18 15:31 - 2017-01-18 15:31 - 01082880 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-01-18 15:31 - 2017-01-18 15:31 - 03750400 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-01-18 15:31 - 2017-01-18 15:31 - 00914432 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-01-18 15:31 - 2017-01-18 15:31 - 01127424 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-01-18 15:30 - 2017-01-04 15:28 - 02278912 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-01-18 15:30 - 2017-01-04 15:28 - 00096768 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\libegl.dll
2017-05-24 23:51 - 2017-05-24 23:51 - 00148992 _____ () \\?\C:\Users\Dennis\AppData\Local\Temp\7E48.tmp.node
2017-01-18 15:31 - 2017-04-26 19:07 - 02658296 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-01-30 20:33 - 2017-03-26 15:31 - 02665976 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
2017-02-28 10:51 - 2017-02-28 10:51 - 01937376 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2016-11-14 19:34 - 2017-04-29 20:11 - 00012288 _____ () C:\Program Files (x86)\Origin\libEGL.DLL

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)


==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)

2009-07-14 04:34 - 2015-11-24 19:18 - 00001030 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1	rad.msn.com
127.0.0.1 	live.rads.msn.com
127.0.0.1	ads1.msn.com
127.0.0.1	static.2mdn.net
127.0.0.1	g.msn.com
127.0.0.1	a.ads2.msads.net
127.0.0.1	b.ads2.msads.net
127.0.0.1	ac3.msn.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dennis\Desktop\FMA-B\edward-elric-fullmetal-alchemist-anime-hd-wallpaper-1920x1080-4286.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==

HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "TomTomHOME.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [WMP-Out-UDP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [{C8A93475-860E-4055-B33C-C979047DFAC4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{3BC467AD-FA73-4107-BA04-160B87A33C8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [UDP Query User{03006707-C27F-4B41-978D-F822ECD498DE}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe
FirewallRules: [TCP Query User{12636CBA-3FAB-4730-A3EF-84378F54EF02}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe
FirewallRules: [{B007250D-6005-4EFF-8FDD-6713AC272D67}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{D0366D73-8F91-4BAE-B69A-720DCB7A9F8F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{A0664D65-8878-4BBC-B0B7-A1CB4B99C932}] => (Allow) C:\Program Files\Opera\44.0.2510.859\opera.exe
FirewallRules: [{A5BBA3F1-F245-4E1E-A825-8FBF70A695EA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{A9E0C9B0-BA90-417D-8E3A-26991AE6672C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{4743FCA9-2B12-4964-BEAA-48B8720EDC2D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{A901D95A-50EB-49D5-8B92-191B41724345}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [UDP Query User{BE8874F1-7AC1-4D6E-BBC2-2C3932E1FBD7}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe
FirewallRules: [TCP Query User{8909F6B8-3AA0-4C0B-A279-4D80672A98C8}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe
FirewallRules: [{D0978E56-8639-435A-9AA0-03FAC8534521}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{EB6C9921-F9BD-45F5-9EA2-A9809547D731}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6B01820A-BC70-47C2-A456-E7BD549AC433}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{631D1288-7375-450D-B0FB-BA7CD10679D0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{BEF76BDA-666C-4E5A-82AF-CD891FF2481E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{F192CA2A-37BC-48BB-89CB-2A791E2F37DB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{14241604-6E67-444C-A418-97FCCEA6C05F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{5EA9902A-85F2-4CE5-90BE-717AFCA4A85F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{E7C68301-1909-4E4C-9F69-4E328E45D668}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{ECC74987-E071-4AED-B521-FD0974F986A8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{A7A4606C-91DB-40B4-A778-FD6835CA1F53}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{6A373D75-E879-443E-B990-6CADC572C38E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{112588CC-ED52-484E-9C71-A30F840E0AEC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [UDP Query User{1F66EFA8-E987-4659-9108-376E633EB84C}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [TCP Query User{97A2EB9A-8D07-4ADD-9593-8D0AF22797C3}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [{E8ED0263-9E6F-41B1-89B3-2826D83AF0CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe
FirewallRules: [{2F077E75-D03D-42FC-B96D-7AD1C18A0013}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe
FirewallRules: [{2445D4A7-847D-4C3D-B157-2539618E4511}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe
FirewallRules: [{B244DCF4-721D-4E41-B925-A7747CA22A38}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe
FirewallRules: [{0211D729-46EC-4F34-BE2B-F8F871ECE4F5}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe
FirewallRules: [{FCC1A3B9-D2DC-4A73-8A62-70D26E8120BB}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe
FirewallRules: [{EECA8479-45CF-401E-A0F4-FF821BF63DD2}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{7F7921F1-5D8A-4A53-98DD-4E038847967D}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{D5BC8FED-36F4-4BE2-9101-C2EFFA368B74}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{71CD7AEE-6B80-4E59-8794-855128480BEE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{F67CA00F-298D-4BFD-9276-6F4AF8685547}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{7E3FD844-BCFF-4AAA-A7EA-117D75AB246B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{529B95C2-595F-4C4E-BDEA-81037FABB918}] => (Allow) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe
FirewallRules: [{6F5338E3-F316-4763-8901-FBA83DFD6625}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{1EEA632C-3075-4161-AC28-B6C21732FCEF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{A4161788-52F5-4257-A64C-28E6B89C7EB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2B5DA77C-0B39-45FA-8195-C6A432CB931A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1F9B9D8E-2BD3-4391-AEF3-FB3CE3892803}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{5C4DC916-884B-4D7D-8222-3B11DE11FDF9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{A35793A3-C175-400A-95EB-D79E9ED79BE7}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [UDP Query User{E526B719-A956-4B53-B8FB-8033475D2161}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe
FirewallRules: [TCP Query User{84224BF9-F3AE-46B7-93BB-AFFBA57F129F}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe
FirewallRules: [{8886650D-C142-4ABD-82A9-8043D801F30A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{1CAF08E3-CB6D-495B-A10E-0920C08AE867}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{80887978-7CB1-46A5-8655-802C5B017BBC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [{1543DA99-FFF7-4644-827B-4A7A0C352224}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [{D2625030-4199-493E-B43D-9D138CFDD46C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{4876ECCC-2913-4073-8469-4D894C8D40A4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{21E0A7E6-A501-4D31-970B-7FBACFB98421}] => (Block) E:\Games\Fallout 4\Fallout4.exe
FirewallRules: [{6B4E6899-FA39-42AC-82B7-3AB6298F2DE0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{6B7D8532-183E-4B41-A560-2426F92DFD59}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{5537E916-E20E-495A-BDA7-CE6BAEB25001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1752EF4-7B9A-4E4F-A826-465DFECF2EC6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{D426A011-1D55-4A3B-86AF-4DADFECD6CFD}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe
FirewallRules: [TCP Query User{E08FEE99-82C4-4236-9D7E-E9E97D2F2D6B}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe
FirewallRules: [{B5E5F6BE-6760-4D4F-B3F8-9DB2ABF51380}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{6E7ED5C4-D93A-45AF-AF96-8D241FA2C809}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{19E8DC9D-9071-4D98-BDB0-4AAD27D832F3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{52BCACAB-D39C-476C-8375-9B5702AFC777}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{B5AADAE9-FC7E-4C98-950D-DFC4E3B888B6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{5C58E99A-065D-4F36-BCB1-580A7524FF35}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{63A08AF5-6B4C-4055-831E-D5DC5AA9264A}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{A52D0E5E-9B4E-4AB5-8090-910934ACA14B}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{1CD6F05B-FE37-41C0-BADF-F3EB9867A5E5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{563AD2ED-8DE0-4F73-BD85-2C59C9E7503A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{3578656D-9C9B-4E94-884A-6415F5834F17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{466F57AE-2A30-4946-83F9-2E86F8DF70F1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [UDP Query User{2F7EEFF2-3479-4F03-84DC-28E4501C0DFA}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe
FirewallRules: [TCP Query User{9D52F165-4930-43D3-9CF0-615BE7728FD8}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe
FirewallRules: [{2B855FCD-0CAC-465A-A7E7-1EB9802D530A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe
FirewallRules: [{217140AD-AE90-4B99-9C6B-262EE560E39C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe
FirewallRules: [{0D9C14D9-B981-4851-B78B-12BB403944C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{E36F2E60-B1BE-4EEB-A1CB-74795CE3E56F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{077547A7-8CDA-4F83-9641-0F659EB842A7}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe
FirewallRules: [{34A2137D-C3F2-47A9-9B06-415516F7FFFB}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe
FirewallRules: [{AF3F05DB-7B8E-408B-9490-213795316AF8}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5AE8E97E-FE31-4A9F-8C24-717672F7C067}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9ABFFF5F-1432-4070-8DA9-8F070B86597D}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4EB06D8E-7463-4D66-9421-3ABF73C00EEB}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{5788A922-3EDA-4EA9-8F41-359ED4B0D41C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{C1C4070B-1E5E-48BB-A5A9-34683EC17352}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{F63C2199-4F8F-4391-97A2-1C1025BEB546}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{8487BCB2-4ED4-4C4B-BCE3-75AEA5EA3DF0}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{427C1569-11F3-4793-AAF9-50B1DDC06EC7}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{B8011D23-E7F6-484B-AFEE-6B6A2E6B4B05}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{3ACC4CEC-B76D-46FF-A63C-8E6E28A639CF}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{555C9BCD-35DE-428D-B378-A534BC929F0C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{B8CBEB91-0AC8-4E5B-BA92-6A5C4BD89944}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{48BB8AF9-F8B9-4358-B327-F92A09ED10AA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{537C4630-8994-4D2A-9A5F-66E86D6B7597}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{294FC133-15D0-4D83-9A1F-7A87F088140C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [TCP Query User{8EBA783C-8571-42C1-A309-D79ACFB82416}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{D37A7B0A-EAB9-40D2-9992-6114902ACD22}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{B8F733B2-E4F5-4020-B337-C139C2085ED4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe
FirewallRules: [{C0C4EC0B-D162-45F1-A64F-71556254153E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{B0777C6D-07A7-440D-BB99-BEA2F09669AB}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
FirewallRules: [UDP Query User{85136BAA-0985-4142-91F6-A5A1D4D8EAFD}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
FirewallRules: [TCP Query User{6C3516A0-83BE-4E9F-9190-167D66C6317A}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [UDP Query User{3352E604-EB1E-4B95-B644-8CC9B0081607}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [{08A87F18-30EC-4038-95E0-D9C0A5BFE115}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{993AB1AA-C3F1-4777-AD17-7D3A0762CE8E}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{0FC41D5F-B52D-451C-B493-7783D4FB7599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe
FirewallRules: [{FA3FA25E-8719-4335-97E7-7ACFF2417869}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{490D175F-C7B0-4805-B4AF-D4332F2E1B51}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [UDP Query User{816A79E7-9DF2-4B97-9596-298BF5F8BBBD}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{90A20EF9-8733-48B9-BE89-7E67E0DC10A6}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe
FirewallRules: [UDP Query User{526B30C7-7223-49C3-82AC-1BD336CC7D1A}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe
FirewallRules: [{27C7404F-E442-47C2-95A7-F06546099A4B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{56E993A7-4416-4887-B4EC-078462FB4ADE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{DBEAA64E-72E9-4278-B927-89CC548A3D1F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{B17EC375-AC70-413F-9E23-2F7FA4251FD2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{23B1BABF-073D-4130-B515-0AFF1EAFD67E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{86413EFC-5C2B-48DF-B947-7BF3D0CEE40A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{720F2924-BDDA-4539-8445-7734D72814D9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8CF02EB5-A443-48EE-8AD2-7E57AE3C3770}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2ED659E6-F140-4C67-A180-734C0519B612}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F5A17CD9-D3A3-41C0-BE68-84107A5B92E9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F7F91883-D335-484A-B12A-90BF0F2A50AD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{62B9457A-421E-405B-A059-76FBD50EB1DD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{AFF575EE-B405-4922-8475-62FD93D4F7E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{C00F93D4-A1C7-4D2C-8365-F9438073BB8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{EE44C46C-57E6-4BFA-BADC-18A734D84674}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{DA9731C4-6676-4019-A653-367AA00883B3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{44568B77-7D5D-49D7-BB9A-367214673571}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{C6D816B5-39AE-4ABB-B778-DBB4183E31B9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{27B07604-918F-42BD-A8F9-072CADE6468B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{C000E71A-E82D-4AE7-AFB2-557AA469D4E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{39C49974-14D0-4559-A8B1-7EC599A8FF09}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{AD531B64-6D4D-4ED8-9E9D-53F3AE6AC643}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{F796FB4A-83F8-4EBA-A213-D53C40D04FAA}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{19B4F5DC-E7B8-4D3E-A436-95496168E852}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{7CE0F63A-5E13-4123-AD8D-09273025843C}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{6E6E965F-5F1E-4BCF-9601-F57B3603EEE3}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [TCP Query User{8976121B-EECC-4335-A198-DB21CEBA0541}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe
FirewallRules: [UDP Query User{9FF7851B-20FF-4D5A-9F93-F8C0C4CD108E}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe
FirewallRules: [{96183AA5-A9A6-4A9F-B250-53514E77C591}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{20684F7F-6221-4A82-ADF8-7CEE0642CB6D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{55F9FF76-96A4-4952-A921-6E3DE4C8707A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{8FE16784-A716-4E50-BD65-55ACF71D6CE2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [TCP Query User{AAA9FB64-2C4E-4A20-A586-965B42E94574}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
FirewallRules: [UDP Query User{E1CDC6D8-0240-4ED9-8CAF-D0F66772AF68}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
FirewallRules: [TCP Query User{3AB445F5-9F1B-409E-9EC9-3C5CF0122236}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{64F06DD8-335C-4C3A-91E9-87F5931DA5DA}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [{8C6DB3DC-1AB2-44B7-BA5A-D3B2A0247599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{C7A6198E-2533-49A8-BF06-29D7997406FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{2F351A0D-F7D0-4D31-87A9-F685998F24FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe
FirewallRules: [{B82CBB1E-0624-4938-9B66-5D869B76CABB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe
FirewallRules: [{675D4551-A3CE-4486-B702-B7DB8F246C91}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7CE9C52A-9276-4273-A704-A25B166A0E77}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7455FDAB-B26F-4931-8DA8-A844B1C84E94}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe
FirewallRules: [{756436C1-D16D-49A4-878E-999A3D2F4ED1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe
FirewallRules: [{EAEF4FA0-2DEE-41AF-9620-3F2F5B62E841}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe
FirewallRules: [{692F4D46-3792-492D-9631-15895DE196BF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe
FirewallRules: [{B3352B1E-4D15-4982-87F3-835D78EBC1EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD39BA85-D589-49F8-BB4B-6C5F0912F768}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F7A40669-1C9B-4F9D-BB9D-894C4437E8D5}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [UDP Query User{BFF39BCB-D25E-48FE-AB45-D48C67E3D4C0}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [{A8657DD5-DBCD-4641-820D-9F6BAA00D487}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{648726DC-649C-4467-A51D-9634A9856039}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{852ECAE5-94A5-43AE-ADD4-9EC158FD44D2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{730F4784-59E8-4FDA-8AB9-77E70934F824}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{E164CA86-DFD0-4634-942F-FA1F5D459EFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe
FirewallRules: [{ACC4C8AC-AF53-44F5-8586-660505430136}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe
FirewallRules: [{F497D5F2-A6DB-4E91-98B7-E93656A4B158}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{A64DF8AF-E477-41A1-B0F9-A239AB185B48}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{872B69E4-989B-40CD-8480-C52922391AA1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{3F162C09-5E17-464C-AE18-9A193D8CFB92}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{525DBDC3-1A1A-4A27-8775-6DE52FECECFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{2E60A323-6C96-4CF7-A176-8059625198A0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{614A831E-6F6D-4B99-910F-36B4FA6CC69A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe
FirewallRules: [{6725B28F-3B8C-434D-9F67-11C6364AB54D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe
FirewallRules: [{9719D41D-BF61-45B7-9025-D576749F2999}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe
FirewallRules: [{F7472A95-D314-4D96-8161-F5EA4CC9BCED}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe
FirewallRules: [{C00716BB-1F31-4A89-9328-254F5B247ACD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{3BF96EDB-9FA0-4C0A-B92C-6B916F9FD695}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{4D5770AF-9437-42F4-9831-D8A400F95D51}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe
FirewallRules: [{6AB8641A-A6F2-4A99-B787-757FF5EB7788}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe
FirewallRules: [{361D4BF1-417E-488B-918A-A8B2F244BB08}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
FirewallRules: [{8289C635-A454-4FDB-8732-67B5F1921C4F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
FirewallRules: [{991405F1-338C-416B-B2C5-A95F43E0E979}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{7C76EEE1-36CB-4E5A-AAE3-3D164027B6EC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{B0A6CF7B-141E-49B7-AA61-A82E3F42D4CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{E1A5F566-3518-41FE-86F0-1586A47727C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{6CCE767F-8005-4758-9171-E495D3DBD212}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe
FirewallRules: [{EAE60A23-558E-401E-8C83-9C7CD643DC52}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe
FirewallRules: [{9884FD7C-4415-48E6-9432-C3E60352A44D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{7C9D39DB-23FF-49F9-9CE5-6FEC24468E27}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [TCP Query User{7C4203C9-C082-4238-A4CB-58753C1F0B6C}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe
FirewallRules: [UDP Query User{421DB6E2-33C9-410C-8EFB-05F73D5E4D29}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe
FirewallRules: [TCP Query User{4BDA6A17-766D-4232-BAAA-90E3EA3EC6C2}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe
FirewallRules: [UDP Query User{5D092578-F888-4AC4-B9AF-63830CB98B4C}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe
FirewallRules: [{C081FCD8-647D-4AFD-B876-035D055B1FE6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{EBB3EDD2-334F-4EA3-B236-427203E15816}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{47630AA2-8BC0-42F6-86F3-F56CE07AFA33}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{CE06F7D5-EA95-46DB-942A-7AD99186660F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{F275B108-8993-4C50-9619-48DAD287646B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{CF4DDEC5-0D82-4A10-92EA-050458B6737E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [TCP Query User{3DA6C6E9-D4B8-44D1-8E14-1CBBCD1F68FB}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe
FirewallRules: [UDP Query User{F479C94A-0B6A-4966-B864-8268564FE96E}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe
FirewallRules: [{DF63C77C-B3A0-4225-B421-7F14B5B61D7C}] => (Allow) LPort=7777
FirewallRules: [{560CE11D-6E66-4C7C-9356-F7116B4088E2}] => (Allow) LPort=7777
FirewallRules: [TCP Query User{B55ABF91-9441-4130-A2F6-A9BDE3536C46}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{74D866EC-B243-4998-BD74-9A7F1B75A30D}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FF2A0257-E89E-425F-9507-BEF55266965F}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{AFA94905-6E8F-425B-9712-A235169C8F7D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{A8C15B47-34E0-4C46-B707-650201622059}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{E3528CD5-2F55-4A5D-BF1C-B2F9CC0EF6C1}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{75BECF26-E15F-4F2F-A1AD-2C474D8E1C74}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{74C3B8BD-2F78-4C22-AE59-2F1D5795D794}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe
FirewallRules: [{19F97437-F8FB-4C3E-B8FC-4003633622E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{F3F3D22B-E00C-4062-A31B-A36D148C904F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{BCA6E2C9-F713-4B1D-9AE0-4C143E6ED4D8}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe
FirewallRules: [{F717F064-92C9-4B38-BBF3-28A153829494}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe
FirewallRules: [{30A06786-9A12-4960-A262-8722ABA7DC49}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{820C9087-29C6-4C19-BA6C-2FF6D876D41F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{7E9E2F58-7F77-4E0A-A7CF-18A90A978667}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe
FirewallRules: [{4D720489-96F0-4924-A0E0-10434060CAA6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe
FirewallRules: [{E4C937AB-5EC5-47EC-BBCF-8907C1E904FC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{DD5CFC20-053C-4908-A3D8-990901C72F86}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{1E021EA6-4F72-4CB1-8710-AD453045770E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{E5DD8B9E-F1C6-4828-97D5-6C70EEAF9430}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{35CC350D-6000-483C-A96A-3C5771B28918}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{A02B5A66-8301-4A05-8FE0-BFE21B5CDE82}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{C6BF81B9-1F2C-47C6-A781-2E69599C78FA}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4E74000F-2C98-4043-A394-548D7CA050CF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{DBF843D6-CC0E-457F-A055-2D56277E55E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{FB15088D-AEF2-49D1-8AFF-8C3604794B87}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{B48CCDD1-D87C-4431-9BA9-063473CBD9B5}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe
FirewallRules: [{319E0304-5853-4BF4-853F-6E2488F0145C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{0E8CF9D4-C8FB-4930-B319-1DAD65671E4E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{5EC2A222-C3DD-4C7E-B2D4-79566E7721B2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{DB41A4F4-6D0B-48AD-BE11-1531FA505068}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{E1E54F54-C80D-4D17-8957-D0A017B300CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{F9EB673D-E27E-4936-922B-99BAD67A0714}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{B591DC37-4523-47B7-B14A-A1E2C675D192}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{82724F50-9003-4FD2-83A0-2FCF497491D5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{C55674D5-1D32-4A83-B5D2-C250AB7D12DE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{D197808A-C7B7-43A8-AFB9-10C266F467AE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{13ADBCA4-15CB-4498-8457-41903CADB1E8}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe
FirewallRules: [UDP Query User{B2F3CAE9-D58E-43D2-B3AA-7B053762CE29}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe
FirewallRules: [{8491ACEC-7216-4A16-BD5D-9A4A783B1B20}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1964DBDA-3427-4EFF-821E-FBE915ED24F4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{4C3E9107-49B2-4F52-9AB8-E548386FCC45}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{EB65C903-A396-422E-9E7A-531A0CFD5CBB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{BF060809-5FBF-4E9F-BBDA-9E7FD6E3FC06}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{DDB3404A-557A-44E6-98E8-6D4B56A7D6D9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{90833148-6956-44D3-8EE8-0EBA2C733E17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{9A1F4C0E-9B7F-4C03-9413-9ADCD4F1AF0C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{F5402017-714C-4205-8020-586CB774DA11}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{C4557A97-9B4A-4817-8B00-286FE8C2A77E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{960B6CAD-9EA2-48BD-AFB7-9B0EB1949D26}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{61891A3B-4944-423A-BB8A-09970AC1A7F7}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe

==================== Wiederherstellungspunkte =========================

09-05-2017 22:11:38 Windows Update
18-05-2017 19:01:56 Windows Update
23-05-2017 21:02:37 Windows Update
24-05-2017 23:49:16 Revo Uninstaller's restore point - Avira Antivirus
24-05-2017 23:50:23 Revo Uninstaller's restore point - Avira Connect

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/24/2017 11:56:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MSASCui.exe, Version 4.11.15063.0 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 244c

Startzeit: 01d2d4d87e11523c

Beendigungszeit: 2

Anwendungspfad: C:\Program Files\Windows Defender\MSASCui.exe

Berichts-ID: 47d97a6e-5947-42b0-acb3-b4f63f52ab6c

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:

Error: (05/24/2017 11:51:29 PM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/24/2017 11:50:23 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}

Error: (05/24/2017 11:49:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}

Error: (05/24/2017 11:48:58 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "c:\program files (x86)\ubisoft\ubisoft game launcher\cache\patch\5086\upc.exe".
Die abhÃ¤ngige Assemblierung "XAudio2_7.X,processorArchitecture="X86",type="Win32",version="9.29.1962.0"" konnte nicht gefunden werden.
Verwenden Sie fÃ¼r eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)
Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)
Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)
Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)
Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)
Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0


Systemfehler:
=============
Error: (05/24/2017 11:51:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.

Error: (05/24/2017 11:51:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstÃ¼tzt.

Error: (05/18/2017 07:13:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.

Error: (05/18/2017 07:13:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstÃ¼tzt.

Error: (05/10/2017 10:36:43 PM) (Source: DCOM) (EventID: 10010) (User: Dennis-Zock-PC)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/10/2017 10:36:43 PM) (Source: DCOM) (EventID: 10010) (User: Dennis-Zock-PC)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/10/2017 07:24:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.

Error: (05/10/2017 07:24:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstÃ¼tzt.

Error: (05/09/2017 08:06:21 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.

Error: (05/09/2017 08:06:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstÃ¼tzt.


CodeIntegrity:
===================================
  Date: 2017-05-24 23:37:47.792
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:47.788
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:47.783
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.772
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.771
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.770
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.769
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.768
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 22:08:15.854
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 22:08:15.854
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16310.5 MB
Verfügbarer physikalischer RAM: 13341.76 MB
Summe virtueller Speicher: 32694.5 MB
Verfügbarer virtueller Speicher: 29312.38 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.81 GB) (Free:79.43 GB) NTFS
Drive e: (Games) (Fixed) (Total:2794.39 GB) (Free:2016.1 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus · 24.05.2017, 23:11

Auha

hast ja einiges an Programmen/Spielen drauf

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

rocker2511 · 24.05.2017, 23:35

So, Scan ist durchgelaufen mit Ergebnis, dass keine Malware gefunden wurde, und kein Cleanup nötig ist.

Vermutlich wird in diesem Fall kein Log-File erstellt, da ich keins finden konnte.

Und ja, ist ein Gaming-PC

Ah, mein Fehler, die Datei heißt nur system-log.txt, deshalb habe ich sie nicht gefunden:

Code:

ATTFilter

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.3.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 10.0.9200 Windows 10 x64

Account is Administrative

Internet Explorer version: 11.296.15063.0

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 3.500000 GHz
Memory total: 17102798848, free: 13624586240

Downloaded database version: v2017.05.24.10
Downloaded database version: v2017.04.02.01
Downloaded database version: v2017.05.19.01
=======================================
Initializing...
Driver version: 0.3.0.4
------------ Kernel report ------------
     05/25/2017 00:14:08
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kd.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\System32\drivers\msrpc.sys
\SystemRoot\System32\drivers\ksecdd.sys
\SystemRoot\System32\drivers\werkernel.sys
\SystemRoot\System32\drivers\CLFS.SYS
\SystemRoot\System32\drivers\tm.sys
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\System32\drivers\FLTMGR.SYS
\SystemRoot\System32\drivers\clipsp.sys
\SystemRoot\System32\drivers\cmimcext.sys
\SystemRoot\System32\drivers\ntosext.sys
\SystemRoot\system32\CI.dll
\SystemRoot\System32\drivers\cng.sys
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\SleepStudyHelper.sys
\SystemRoot\System32\Drivers\acpiex.sys
\SystemRoot\System32\Drivers\WppRecorder.sys
\SystemRoot\System32\drivers\ACPI.sys
\SystemRoot\System32\drivers\WMILIB.SYS
\SystemRoot\System32\drivers\intelpep.sys
\SystemRoot\system32\drivers\WindowsTrustedRT.sys
\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\drivers\msisadrv.sys
\SystemRoot\System32\drivers\pci.sys
\SystemRoot\System32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pdc.sys
\SystemRoot\system32\drivers\CEA.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\System32\drivers\spaceport.sys
\SystemRoot\System32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\System32\drivers\iaStorA.sys
\SystemRoot\System32\drivers\storport.sys
\SystemRoot\System32\drivers\EhStorClass.sys
\SystemRoot\System32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Wof.sys
\SystemRoot\System32\Drivers\NTFS.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\drivers\wfplwfs.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\System32\drivers\volume.sys
\SystemRoot\System32\drivers\volsnap.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\iorate.sys
\SystemRoot\System32\drivers\disk.sys
\SystemRoot\System32\drivers\CLASSPNP.SYS
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\drivers\cdrom.sys
\SystemRoot\system32\drivers\filecrypt.sys
\SystemRoot\system32\drivers\tbs.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\BasicDisplay.sys
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\vmbkmclr.sys
\SystemRoot\System32\drivers\BasicRender.sys
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\drivers\vwififlt.sys
\SystemRoot\System32\drivers\pacer.sys
\SystemRoot\system32\drivers\netbios.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\System32\drivers\npsvctrig.sys
\SystemRoot\System32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\gpuenergydrv.sys
\SystemRoot\System32\Drivers\ElbyCDIO.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\ahcache.sys
\SystemRoot\System32\drivers\tap0901.sys
\SystemRoot\System32\drivers\hmatap.sys
\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys
\SystemRoot\System32\drivers\kdnic.sys
\SystemRoot\System32\drivers\umbus.sys
\SystemRoot\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys
\SystemRoot\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys
\SystemRoot\System32\drivers\HDAudBus.sys
\SystemRoot\System32\drivers\portcls.sys
\SystemRoot\System32\drivers\drmk.sys
\SystemRoot\System32\drivers\ks.sys
\SystemRoot\System32\drivers\USBXHCI.SYS
\SystemRoot\system32\drivers\ucx01000.sys
\SystemRoot\system32\DRIVERS\TeeDriverx64.sys
\SystemRoot\System32\drivers\e1i63x64.sys
\SystemRoot\System32\drivers\usbehci.sys
\SystemRoot\System32\drivers\USBPORT.SYS
\SystemRoot\System32\drivers\serial.sys
\SystemRoot\System32\drivers\serenum.sys
\SystemRoot\System32\Drivers\AnyDVD.sys
\SystemRoot\System32\drivers\wmiacpi.sys
\SystemRoot\System32\drivers\intelppm.sys
\SystemRoot\System32\drivers\acpipagr.sys
\SystemRoot\System32\drivers\cbfs3.sys
\SystemRoot\System32\drivers\NdisVirtualBus.sys
\SystemRoot\System32\drivers\swenum.sys
\SystemRoot\system32\drivers\LGBusEnum.sys
\SystemRoot\System32\drivers\VClone.sys
\SystemRoot\System32\drivers\rdpbus.sys
\SystemRoot\System32\drivers\usbhub.sys
\SystemRoot\System32\drivers\USBD.SYS
\SystemRoot\system32\drivers\AtihdWT6.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\System32\drivers\UsbHub3.sys
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\System32\drivers\usbccgp.sys
\SystemRoot\System32\drivers\hidusb.sys
\SystemRoot\System32\drivers\HIDCLASS.SYS
\SystemRoot\System32\drivers\HIDPARSE.SYS
\SystemRoot\System32\drivers\kbdhid.sys
\SystemRoot\System32\drivers\kbdclass.sys
\SystemRoot\system32\DRIVERS\CMUAC.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\win32kfull.sys
\SystemRoot\System32\win32kbase.sys
\SystemRoot\System32\drivers\mouhid.sys
\SystemRoot\System32\drivers\mouclass.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_iaStorA.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\drivers\dxgmms2.sys
\SystemRoot\System32\drivers\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\drivers\wcifs.sys
\SystemRoot\system32\drivers\storqosflt.sys
\SystemRoot\System32\drivers\registry.sys
\SystemRoot\system32\drivers\lltdio.sys
\SystemRoot\system32\drivers\mslldp.sys
\SystemRoot\system32\drivers\rspndr.sys
\SystemRoot\System32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\ndisuio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\??\C:\WINDOWS\system32\drivers\amdacpksd.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\system32\drivers\mmcss.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\drivers\mqac.sys
\SystemRoot\system32\drivers\Ndu.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\drivers\condrv.sys
\SystemRoot\System32\drivers\tunnel.sys
\??\C:\Windows\gdrv.sys
\SystemRoot\system32\drivers\LGVirHid.sys
\SystemRoot\system32\drivers\WdFilter.sys
\SystemRoot\system32\Drivers\WdNisDrv.sys
\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys
\??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
----------- End -----------
Done!

Scan started
Database versions:
  main:    v2017.05.24.10
  rootkit: v2017.04.02.01

<<<2>>>
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xffff858a2f1cd060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffff858a2dda29f0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffff858a2f1cd060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xffff858a2d3ff040, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffff858a2d3fde40, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffff858a2cdf5060, DeviceName: \Device\00000037\, DriverName: \Driver\iaStorA\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffff858a2f1ce060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffff858a2dd689f0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffff858a2f1ce060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xffff858a2cdf6680, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffff858a2d3fe250, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffff858a2cdf2060, DeviceName: \Device\00000036\, DriverName: \Driver\iaStorA\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: 0

GPT Protective MBR Partition information:

    Partition 0 type is EFI-GPT (0xee)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1  Numsec = 4294967295

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

GPT Partition information:

    GPT Header Signature 4546492050415254
    GPT Header Revision 65536 Size 92 CRC 2329526443
    GPT Header CurrentLba = 1 BackupLba 5860533167
    GPT Header FirstUsableLba 34  LastUsableLba 5860533134
    GPT Header Guid da68d8e0-8a93-425b-a37c-96331baad3d1
    GPT Header Contains 128 partition entries starting at LBA 2
    GPT Header Partition entry size = 128

    Backup GPT header Signature 4546492050415254
    Backup GPT header Revision 65536 Size 92 CRC 2329526443
    Backup GPT header CurrentLba = 5860533167 BackupLba 1
    Backup GPT header FirstUsableLba 34  LastUsableLba 5860533134
    Backup GPT header Guid da68d8e0-8a93-425b-a37c-96331baad3d1
    Backup GPT header Contains 128 partition entries starting at LBA 5860533135
    Backup GPT header Partition entry size = 128

    Partition 0 Type e3c9e316-b5c-4db8-817d-f92df0215ae
    Partition ID d81df2bb-71ea-4619-a67f-74f340f321eb
    FirstLBA 34  Last LBA 262177
    Attributes 0
    Partition Name         Microsoft reserved partition

    Partition 1 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
    Partition ID 90bcd7fb-9d1e-49b3-88ac-5dda4d2eda
    FirstLBA 264192  Last LBA 5860532223
    Attributes 0
    Partition Name                 Basic data partition

Disk Size: 3000592982016 bytes
Sector size: 512 bytes

Done!
Drive 1
This is a System drive
Scanning MBR on drive 1...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: 0

GPT Protective MBR Partition information:

    Partition 0 type is EFI-GPT (0xee)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1  Numsec = 4294967295

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

GPT Partition information:

    GPT Header Signature 4546492050415254
    GPT Header Revision 65536 Size 92 CRC 3500198989
    GPT Header CurrentLba = 1 BackupLba 500118191
    GPT Header FirstUsableLba 34  LastUsableLba 500118158
    GPT Header Guid 546f0912-744a-4931-85e-72ec9b6d61
    GPT Header Contains 128 partition entries starting at LBA 2
    GPT Header Partition entry size = 128

    Backup GPT header Signature 4546492050415254
    Backup GPT header Revision 65536 Size 92 CRC 3500198989
    Backup GPT header CurrentLba = 500118191 BackupLba 1
    Backup GPT header FirstUsableLba 34  LastUsableLba 500118158
    Backup GPT header Guid 546f0912-744a-4931-85e-72ec9b6d61
    Backup GPT header Contains 128 partition entries starting at LBA 500118159
    Backup GPT header Partition entry size = 128

    Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b
    Partition ID f67554a4-e0d-44f5-8b71-db7a8b6fc925
    FirstLBA 2048  Last LBA 206847
    Attributes 0
    Partition Name                 EFI system partition

    GPT Partition 0 is bootable
    Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae
    Partition ID 54f31a06-9139-4ef2-8320-03f64d1563e
    FirstLBA 206848  Last LBA 468991
    Attributes 0
    Partition Name         Microsoft reserved partition

    Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
    Partition ID b3719f4e-dde8-4275-ac40-a4df47e49ced
    FirstLBA 468992  Last LBA 499195903
    Attributes 0
    Partition Name                 Basic data partition

    Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac
    Partition ID 3002c209-2634-44d6-8938-1b83505a36d4
    FirstLBA 499195904  Last LBA 500117503
    Attributes 1
    Partition Name                                     

Disk Size: 256060514304 bytes
Sector size: 512 bytes

Done!
<<<2>>>
<<<3>>>
Volume: E:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.79" is compressed (flags = 1)
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.7C" is compressed (flags = 1)
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.83" is compressed (flags = 1)
Scan finished

Ach jeh, ich scheine schon müde zu sein, sorry für die vielen Nachträge.
Ich hatte die Software noch auch, das Logfile wird erst nachdem man auf Exit gedrückt hat erstellt....

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.05.24.10
  rootkit: v2017.04.02.01

Windows 10 x64 NTFS
Internet Explorer 11.296.15063.0
Dennis :: DENNIS-ZOCK-PC [administrator]

25.05.2017 00:14:13
mbar-log-2017-05-25 (00-14-13).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 352688
Time elapsed: 8 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 24.05.2017, 23:39

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass adwCleaner so eingestellt wie auf diesem Screenshot zu sehen:
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

rocker2511 · 24.05.2017, 23:48

Anbei die generierten Logs:

AdwCleaner:

Code:

ATTFilter

# AdwCleaner v6.046 - Bericht erstellt am 25/05/2017 um 00:43:13
# Aktualisiert am 24/04/2017 von Malwarebytes
# Datenbank : 2017-05-23.1 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : Dennis - DENNIS-ZOCK-PC
# Gestartet von : C:\Users\Dennis\Desktop\AdwCleaner_6.046.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1364 Bytes] - [25/05/2017 00:43:13]
C:\AdwCleaner\AdwCleaner[S0].txt - [1636 Bytes] - [25/05/2017 00:42:46]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1510 Bytes] ##########

JRT:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Pro x64 
Ran by Dennis (Administrator) on 25.05.2017 at  0:46:01,19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 5 

Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio (Folder) 
Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gkojfkhlekighikafcpjkiklfbnlmeio (Folder) 
Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage-journal (File) 
Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage (File) 
Successfully deleted: C:\Users\Dennis\AppData\Roaming\3909 (Folder) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.05.2017 at  0:47:04,38
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 24.05.2017, 23:54

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

rocker2511 · 24.05.2017, 23:57

FRST.txt:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017
durchgeführt von Dennis (Administrator) auf DENNIS-ZOCK-PC (25-05-2017 00:54:56)
Gestartet von C:\Users\Dennis\Desktop
Geladene Profile: Dennis (Verfügbare Profile: Dennis & DefaultAppPool)
Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginThinSetupInternal.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1223168 2016-12-09] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-04-30] (TomTom)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [GalaxyClient] => E:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [4954176 2017-05-22] (GOG.com)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dennis\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [10737184 2016-12-26] (RedFox)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Discord] => C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27774936 2017-04-02] (Skype Technologies S.A.)
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mediatek Wireless Utility.lnk [2017-03-26]
ShortcutTarget: Mediatek Wireless Utility.lnk -> C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe (Mediatek Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{195c279c-9b92-4a79-976a-3ac520f7026c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{54deaf3b-03c8-41bd-ae4c-dbec6e7f4c6d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6daff1b1-d1c8-459b-adc5-05e0d6458d6e}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{b8aac3fa-f900-4e7f-834d-2f112cf7a49d}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2002795488-2026584554-4065357487-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-05-06] (Microsoft Corporation)
BHO: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-05-05] (Microsoft Corporation)
BHO-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-12] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-05] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-12] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default [2015-07-09]
FF Extension: (Emulator) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\Navcore.9.500.1161701@tomtom.com [2015-04-10] [ist nicht signiert]
FF Extension: (Tyre) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\tyre@tyre.tk [2015-04-10] [ist nicht signiert]
FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2015-07-09] [ist nicht signiert]
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 [2017-05-25]
FF Homepage: Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 -> hxxps://www.google.de/?gws_rd=ssl
FF Extension: (Mailvelope) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2017-04-18]
FF Extension: (Adblock Plus) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Greasemonkey) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-27]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-06] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-12] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-12] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-05] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-05] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-08-28] (Nexon)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default [2017-05-22]
CHR Extension: (Google Präsentationen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]
CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (NicoNico Audio Extractor) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecoahjklhopckkiefihjloeidikepdh [2015-03-09]
CHR Extension: (Adobe Acrobat) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-13]
CHR Extension: (Google Tabellen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Avira Browserschutz) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-03-15]
CHR Extension: (Google Docs Offline) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-13]
CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2017-05-05] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-02-08] (Digital Wave Ltd.)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [236832 2015-10-21] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Datei ist nicht signiert]
S3 GalaxyClientService; E:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [512576 2017-05-22] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-19] (GOG.com)
S3 HmaOpenVpnService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [38912 2017-02-02] (The OpenVPN Project)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2014-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.)
R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Datei ist nicht signiert]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2147216 2017-04-10] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3116440 2017-04-10] (Electronic Arts)
S2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2015-12-23] (Advanced Micro Devices)
S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)
R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2016-12-08] (Advanced Micro Devices)
S3 atillk64; C:\Program Files (x86)\ASUS\GPU Tweak\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.)
R3 cbfs3; C:\WINDOWS\System32\drivers\cbfs3.sys [341904 2011-09-19] (EldoS Corporation)
R3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [661760 2016-01-02] (C-MEDIA)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 EagleX64; C:\WINDOWS\system32\drivers\EagleX64.sys [174728 2015-08-28] (AhnLab, Inc.)
S3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)
R3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2016-11-23] (The OpenVPN Project)
S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-10-05] (Microsoft Corporation)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 USBMULCD; C:\WINDOWS\system32\drivers\CM10664.sys [4135424 2013-09-12] (C-Media Electronics Inc)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-11-19] (Cisco Systems, Inc.)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [41472 2017-03-18] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-25 00:47 - 2017-05-25 00:47 - 00001261 _____ C:\Users\Dennis\Desktop\JRT.txt
2017-05-25 00:45 - 2017-05-25 00:45 - 01663672 _____ (Malwarebytes) C:\Users\Dennis\Desktop\JRT.exe
2017-05-25 00:41 - 2017-05-25 00:43 - 00000000 ____D C:\AdwCleaner
2017-05-25 00:41 - 2017-05-25 00:40 - 04102600 _____ C:\Users\Dennis\Desktop\AdwCleaner_6.046.exe
2017-05-25 00:14 - 2017-05-25 00:32 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-05-25 00:14 - 2017-05-25 00:14 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-05-25 00:14 - 2017-05-25 00:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-25 00:13 - 2017-05-25 00:32 - 00000000 ____D C:\Users\Dennis\Desktop\mbar
2017-05-25 00:13 - 2017-05-25 00:13 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-05-25 00:02 - 2017-05-25 00:03 - 00100223 _____ C:\Users\Dennis\Desktop\Addition.txt
2017-05-25 00:01 - 2017-05-25 00:55 - 00023451 _____ C:\Users\Dennis\Desktop\FRST.txt
2017-05-25 00:01 - 2017-05-25 00:54 - 00000000 ____D C:\FRST
2017-05-25 00:01 - 2017-05-24 22:47 - 02429952 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2017-05-24 23:48 - 2017-05-24 23:48 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\Program Files\VS Revo Group
2017-05-24 22:19 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis\OpenVPN
2017-05-24 22:18 - 2017-05-24 22:18 - 00000953 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\TAP-Windows
2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\OpenVPN
2017-05-24 22:05 - 2017-05-24 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HMA! Pro VPN
2017-05-23 17:56 - 2017-05-23 17:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-05-18 19:02 - 2017-05-18 19:02 - 00003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2017-05-16 18:06 - 2017-05-16 18:06 - 10320248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00924544 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00864120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00514424 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00121208 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00112512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00112000 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00091520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00029056 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2017-05-16 18:06 - 2017-05-16 18:06 - 00029048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00573800 _____ C:\WINDOWS\system32\amdmiracast.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00196176 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00139080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2017-05-16 18:05 - 2017-05-16 18:05 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2017-05-13 10:58 - 2017-05-18 19:13 - 00000949 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job
2017-05-13 10:58 - 2017-05-18 19:13 - 00000763 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job
2017-05-13 10:58 - 2017-05-13 10:58 - 00004148 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}
2017-05-13 10:58 - 2017-05-13 10:58 - 00003970 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}
2017-05-10 22:29 - 2017-05-10 22:29 - 16627692 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.zip
2017-05-10 22:29 - 2017-05-10 22:29 - 16507878 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.7z
2017-05-10 22:24 - 2017-05-10 22:26 - 00000000 ____D C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen
2017-05-09 22:11 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-09 22:11 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-09 22:11 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-09 22:11 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-09 22:11 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-09 22:11 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-09 22:11 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-09 22:11 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-09 22:11 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-09 22:11 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-09 22:11 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-09 22:11 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-09 22:11 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-09 22:11 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-09 22:11 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-09 22:11 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-09 22:11 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-09 22:11 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-05-09 22:11 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-09 22:11 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-05-09 22:11 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-09 22:11 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-09 22:11 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-09 22:11 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-05-09 22:11 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-09 22:11 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-09 22:11 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-09 22:11 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-09 22:11 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-09 22:11 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-09 22:11 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-09 22:11 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-09 22:11 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-09 22:11 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-09 22:11 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-05-09 22:11 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-09 22:11 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-09 22:11 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-09 22:11 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-09 22:11 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-09 22:11 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-09 22:11 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-09 22:11 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-09 22:11 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-09 22:11 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-09 22:11 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-09 22:11 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-09 22:11 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-05-09 22:11 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-09 22:11 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-05-09 22:11 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-09 22:11 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-09 22:11 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-09 22:11 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-09 22:11 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-09 22:11 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-09 22:11 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-05-09 22:11 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-09 22:11 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-09 22:11 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-05-09 22:11 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-09 22:11 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-09 22:11 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-09 22:11 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-09 22:11 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-09 22:11 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-09 22:11 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-09 22:11 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-09 22:11 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-05-09 22:11 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-09 22:11 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-09 22:11 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-09 22:11 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-09 22:11 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-09 22:11 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-09 22:11 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-09 22:11 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-05-09 22:11 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-09 22:11 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-09 22:11 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-05-09 22:11 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-09 22:11 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-09 22:11 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-05-07 14:55 - 2017-05-07 14:55 - 19741458 _____ C:\Users\Dennis\Desktop\Dryzz_MT.zip
2017-05-07 14:55 - 2017-05-07 14:47 - 02050374 _____ C:\Users\Dennis\Desktop\Master_Thesis_Dryzz_Corrected.pdf
2017-05-06 22:20 - 2017-05-06 22:20 - 00000000 ____D C:\Users\Dennis\AppData\Local\DBG
2017-05-02 08:55 - 2017-05-02 08:55 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-02 08:55 - 2017-05-02 08:55 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-05-02 08:55 - 2017-05-02 08:55 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-05-02 08:55 - 2017-05-02 08:55 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-05-02 08:55 - 2017-05-02 08:55 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-05-02 08:55 - 2017-05-02 08:55 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-05-02 08:54 - 2017-03-17 23:00 - 07702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll
2017-05-02 08:54 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-05-02 08:54 - 2017-03-17 23:00 - 02454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll
2017-05-02 08:54 - 2017-03-17 22:59 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-05-02 08:54 - 2017-03-17 22:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 07405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 01914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll
2017-05-02 08:54 - 2017-03-17 22:54 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll
2017-05-02 08:54 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-05-02 08:54 - 2017-03-17 22:43 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-05-02 08:54 - 2017-03-17 22:40 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 07244800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 01868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll
2017-05-02 08:54 - 2017-03-17 22:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll
2017-05-02 08:54 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-05-02 08:54 - 2017-02-10 12:22 - 00002060 _____ C:\WINDOWS\system32\noise.jpn
2017-05-02 08:53 - 2017-05-02 08:53 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\msmq
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\MSBuild
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\inetpub
2017-05-02 08:53 - 2017-05-02 08:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-05-02 08:53 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-05-02 08:52 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-02 08:52 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-02 08:52 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-05-02 08:10 - 2017-05-02 08:10 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-02 08:09 - 2017-05-02 08:09 - 00000020 ___SH C:\Users\Dennis\ntuser.ini
2017-05-02 08:09 - 2017-05-02 08:09 - 00000000 ____D C:\ProgramData\USOShared
2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-05-02 08:04 - 2017-05-25 00:43 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-02 08:04 - 2017-05-24 21:24 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{634CF361-F616-4788-8E86-4D331F2B736A}
2017-05-02 08:04 - 2017-05-20 10:31 - 00003978 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1491080137
2017-05-02 08:04 - 2017-05-09 21:44 - 00004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-05-02 08:04 - 2017-05-09 21:44 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-02 08:04 - 2017-05-06 12:36 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-02 08:04 - 2017-05-02 08:11 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-02 08:04 - 2017-05-02 08:04 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}
2017-05-02 08:04 - 2017-05-02 08:04 - 00003248 _____ C:\WINDOWS\System32\Tasks\MATLAB R2015b Startup Accelerator
2017-05-02 08:04 - 2017-05-02 08:04 - 00002166 _____ C:\WINDOWS\System32\Tasks\arp_flush
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2017-05-02 08:01 - 2017-05-02 08:01 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-02 07:59 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-05-02 07:59 - 2017-05-02 07:59 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-05-02 07:59 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-05-02 07:58 - 2017-05-25 00:49 - 02285270 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-02 07:58 - 2017-05-25 00:43 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-05-02 07:58 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis
2017-05-02 07:58 - 2017-05-18 19:02 - 00000000 ____D C:\Program Files\AMD
2017-05-02 07:58 - 2017-05-02 08:03 - 00000000 ____D C:\Users\DefaultAppPool
2017-05-02 07:58 - 2017-05-02 07:58 - 02011386 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Vorlagen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Startmenü
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Netzwerkumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Lokale Einstellungen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Eigene Dateien
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Druckumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Verlauf
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-05-02 07:57 - 2017-05-24 21:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-02 07:57 - 2017-05-10 07:24 - 00703544 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\Program Files\Realtek
2017-05-01 16:55 - 2017-05-02 08:09 - 00000000 ___DC C:\WINDOWS\Panther
2017-04-27 23:40 - 2017-04-27 23:40 - 00001256 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk
2017-04-27 23:40 - 2017-04-27 23:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\UNP
2017-04-27 23:10 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-04-27 23:10 - 2017-04-27 23:11 - 00000000 ____D C:\Program Files\UNP
2017-04-25 18:40 - 2017-04-25 18:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\GOG.com

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-25 00:49 - 2017-03-20 06:41 - 00991698 _____ C:\WINDOWS\system32\perfh007.dat
2017-05-25 00:49 - 2017-03-20 06:41 - 00227546 _____ C:\WINDOWS\system32\perfc007.dat
2017-05-25 00:47 - 2016-11-19 13:13 - 00000000 ____D C:\Users\Dennis\AppData\LocalLow\Mozilla
2017-05-25 00:44 - 2014-12-05 00:51 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Skype
2017-05-25 00:43 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-05-25 00:43 - 2014-12-05 03:42 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys
2017-05-25 00:03 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-05-24 23:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2017-05-24 23:55 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-24 23:55 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-24 23:51 - 2016-11-19 02:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-24 23:51 - 2014-12-05 00:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-24 23:50 - 2015-08-02 13:31 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-24 23:50 - 2014-12-05 00:55 - 00000000 ____D C:\ProgramData\Avira
2017-05-24 22:05 - 2016-12-14 22:14 - 00001222 _____ C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2017-05-24 22:05 - 2016-12-14 22:14 - 00000000 ____D C:\Program Files (x86)\HMA! Pro VPN
2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-24 19:13 - 2015-04-22 23:24 - 00000000 ____D C:\Users\Dennis\AppData\Local\LogMeIn Hamachi
2017-05-24 19:10 - 2014-12-19 21:54 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Raptr
2017-05-23 21:04 - 2014-12-05 03:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-23 21:02 - 2014-12-05 03:00 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-05-23 17:55 - 2015-01-31 15:27 - 00000000 ____D C:\Program Files\Microsoft Office
2017-05-20 10:31 - 2017-04-01 22:55 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-05-20 10:31 - 2017-04-01 22:55 - 00000000 ____D C:\Program Files\Opera
2017-05-18 19:02 - 2015-07-22 23:09 - 00000000 ____D C:\Program Files (x86)\AMD
2017-05-18 19:02 - 2014-12-05 00:44 - 00000000 ____D C:\AMD
2017-05-16 18:06 - 2017-03-21 18:24 - 08479104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 02536320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 02198400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 01516416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00777088 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00696192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ C:\WINDOWS\system32\dgtrayicon.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00546688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00531328 _____ C:\WINDOWS\system32\GameManager64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00483712 _____ C:\WINDOWS\system32\atieah64.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00478080 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00467328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00411008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00365440 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00360312 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00334208 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00278400 _____ C:\WINDOWS\system32\clinfo.exe
2017-05-16 18:06 - 2017-03-21 18:24 - 00276352 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00245112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00242048 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00203648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00191360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00169856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00167808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00156704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00150912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00148440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00135040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00133504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00122744 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00115072 _____ C:\WINDOWS\system32\atidxx64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00101760 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00099192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00075136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00068992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00044920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2017-05-16 18:06 - 2017-03-21 18:24 - 00042368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00164400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00116072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00102520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2017-05-16 18:05 - 2017-03-21 18:24 - 00102512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Oracle
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-12 17:49 - 2014-12-19 22:38 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-05-12 17:44 - 2014-12-06 02:58 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-12 17:44 - 2014-12-06 02:58 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-11 18:33 - 2015-08-02 13:38 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2017-05-10 19:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-05-10 07:33 - 2015-08-02 13:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-09 22:14 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Origin
2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Origin
2017-05-07 16:40 - 2014-12-05 01:48 - 00000000 ____D C:\DayZ
2017-05-04 21:02 - 2014-12-05 16:41 - 00000000 ____D C:\Program Files (x86)\Origin
2017-05-03 07:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-05-02 08:57 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-05-02 08:55 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-02 08:54 - 2017-03-20 06:42 - 00000000 ____D C:\WINDOWS\OCR
2017-05-02 08:53 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2017-05-02 08:53 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-05-02 08:53 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2017-05-02 08:53 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2017-05-02 08:53 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2017-05-02 08:53 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-05-02 08:53 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-05-02 08:53 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-05-02 08:53 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-05-02 08:53 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-05-02 08:53 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-05-02 08:10 - 2015-08-02 13:40 - 00002434 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-02 08:10 - 2015-08-02 13:40 - 00000000 ___RD C:\Users\Dennis\OneDrive
2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-02 08:06 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-05-02 08:05 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-05-02 08:04 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell
2017-05-02 08:04 - 2015-08-02 13:36 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media
2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-02 08:02 - 2017-03-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2017-05-02 08:02 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-05-02 08:02 - 2017-02-27 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-05-02 08:02 - 2017-02-06 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite
2017-05-02 08:02 - 2017-02-05 23:46 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2017-05-02 08:02 - 2017-02-05 23:38 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake
2017-05-02 08:02 - 2017-01-09 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2017-05-02 08:02 - 2016-12-15 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex-Editor MX
2017-05-02 08:02 - 2016-12-15 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-05-02 08:02 - 2016-11-22 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2017-05-02 08:02 - 2016-11-15 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediatek Wireless
2017-05-02 08:02 - 2016-03-06 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-02 08:02 - 2016-03-05 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Passfoto Manager
2017-05-02 08:02 - 2016-03-05 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PassbildPro
2017-05-02 08:02 - 2016-02-25 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-05-02 08:02 - 2016-02-07 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2017-05-02 08:02 - 2016-01-31 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio
2017-05-02 08:02 - 2016-01-31 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9
2017-05-02 08:02 - 2016-01-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Houhou SRS
2017-05-02 08:02 - 2016-01-05 14:19 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2017-05-02 08:02 - 2015-12-16 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout 4
2017-05-02 08:02 - 2015-12-09 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2017-05-02 08:02 - 2015-11-22 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosteRazor
2017-05-02 08:02 - 2015-09-12 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-05-02 08:02 - 2015-07-25 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MonInfo
2017-05-02 08:02 - 2015-07-16 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-05-02 08:02 - 2015-04-10 19:08 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tyre
2017-05-02 08:02 - 2015-04-10 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tyre
2017-05-02 08:02 - 2015-02-28 18:42 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RMPrepUSB
2017-05-02 08:02 - 2015-02-18 22:52 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TonidoDrive
2017-05-02 08:02 - 2015-02-17 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-05-02 08:02 - 2015-01-29 19:37 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2017-05-02 08:02 - 2015-01-29 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2017-05-02 08:02 - 2015-01-16 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2017-05-02 08:02 - 2014-12-31 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN
2017-05-02 08:02 - 2014-12-19 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2017-05-02 08:02 - 2014-12-11 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Middle Earth Shadow of Mordor
2017-05-02 08:02 - 2014-12-11 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Advanced Warfare
2017-05-02 08:02 - 2014-12-11 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Vanishing of Ethan Carter
2017-05-02 08:02 - 2014-12-05 18:11 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2017-05-02 08:02 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-05-02 08:02 - 2014-12-05 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-05-02 08:02 - 2014-12-05 14:47 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-02 08:02 - 2014-12-05 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GBT_DL_OBJ
2017-05-02 08:02 - 2014-12-05 02:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2017-05-02 08:02 - 2014-12-05 02:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-05-02 08:02 - 2014-12-05 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-05-02 08:02 - 2014-12-05 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-02 08:02 - 2014-12-05 00:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-05-02 08:02 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\System
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas
2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-02 08:00 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-02 08:00 - 2016-11-15 15:46 - 00000000 ____D C:\WINDOWS\system32\RaLanguages
2017-05-02 08:00 - 2016-11-14 18:33 - 00000000 ____D C:\WINDOWS\system32\€
2017-05-02 08:00 - 2015-02-23 17:27 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2017-05-02 08:00 - 2015-01-29 20:39 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help
2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\System
2017-05-02 07:59 - 2017-03-07 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-02 07:59 - 2017-01-31 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-05-02 07:59 - 2017-01-21 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2017-05-02 07:59 - 2016-12-16 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2017-05-02 07:59 - 2016-11-16 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte
2017-05-02 07:59 - 2016-11-14 21:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-05-02 07:59 - 2016-11-14 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raptr
2017-05-02 07:59 - 2016-01-10 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft
2017-05-02 07:59 - 2015-11-03 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
2017-05-02 07:59 - 2015-08-19 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-05-02 07:59 - 2015-08-19 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EpsonNet
2017-05-02 07:59 - 2015-05-27 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\leawo
2017-05-02 07:59 - 2015-05-15 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2017-05-02 07:59 - 2015-05-12 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-05-02 07:59 - 2015-04-18 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark
2017-05-02 07:59 - 2015-03-12 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
2017-05-02 07:59 - 2015-03-11 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools
2017-05-02 07:59 - 2014-12-20 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frontier
2017-05-02 07:59 - 2014-12-06 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games
2017-05-02 07:59 - 2014-12-05 00:59 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-05-02 07:59 - 2014-12-05 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2017-05-02 07:59 - 2014-12-05 00:33 - 00000000 ____D C:\Program Files\Intel
2017-05-02 07:58 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-04-30 13:24 - 2017-01-21 15:34 - 00000000 ____D C:\Users\Dennis\Desktop\Bücher
2017-04-29 20:26 - 2014-12-07 00:46 - 00000000 ____D C:\ProgramData\EA Logs
2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\system32\atiapfxx.blb
2017-04-25 00:56 - 2017-03-21 18:24 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2017-04-25 00:51 - 2017-03-21 18:24 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-02-18 17:59 - 2016-01-21 22:52 - 0000600 _____ () C:\Users\Dennis\AppData\Local\PUTTY.RND
2017-03-10 15:41 - 2017-03-10 15:41 - 0000865 _____ () C:\Users\Dennis\AppData\Local\recently-used.xbel
2016-01-11 19:04 - 2016-01-30 12:29 - 0000040 ___SH () C:\ProgramData\.zreglib
2017-05-02 07:57 - 2017-05-02 07:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-05-19 20:02

==================== Ende von FRST.txt ============================

Addition.txt folgt gleich.

rocker2511 · 24.05.2017, 23:58

Addition.txt:

Code:

ATTFilter

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-05-2017
durchgefÃ¼hrt von Dennis (25-05-2017 00:55:22)
Gestartet von C:\Users\Dennis\Desktop
Windows 10 Pro Version 1703 (X64) (2017-05-02 06:06:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2002795488-2026584554-4065357487-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2002795488-2026584554-4065357487-503 - Limited - Disabled)
Dennis (S-1-5-21-2002795488-2026584554-4065357487-1000 - Administrator - Enabled) => C:\Users\Dennis
Gast (S-1-5-21-2002795488-2026584554-4065357487-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2002795488-2026584554-4065357487-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS B14.1003.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
@BIOS B14.1003.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden
3DMark (HKLM-x32\...\{66847f67-7331-422f-bc6c-d961c453d7df}) (Version: 1.5.884.0 - Futuremark)
3DMark (Version: 1.5.884.0 - Futuremark) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
ACP Application (Version: 2015.1223.1036.43 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Anki (HKLM-x32\...\Anki) (Version:  - )
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 8.0.9.0 - RedFox)
APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.16.0503 - Gigabyte)
APP Center (x32 Version: 1.16.0503 - Gigabyte) Hidden
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.2.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.5.2.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Battlefield 3â„¢ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version:  - Ubisoft)
BioShock (HKLM-x32\...\Steam App 7670) (Version:  - 2K Boston)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)
Borderlands 2 (HKLM-x32\...\Borderlands 2_is1) (Version:  - )
Call of Duty Advanced Warfare (HKLM-x32\...\Call of Duty Advanced Warfare_is1) (Version: 1.0 - ENiGMA)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Child of Light (HKLM-x32\...\Steam App 256290) (Version:  - Ubisoft MontrÃ©al)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.4.00243 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 4.4.00243 - Cisco Systems, Inc.) Hidden
CloudDrive (HKLM-x32\...\TonidoDrive) (Version:  - )
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Spaceâ„¢ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Deadfall Adventures (HKLM-x32\...\Steam App 231330) (Version:  - The Farm 51)
Democracy 3 (HKLM-x32\...\Steam App 245470) (Version:  - Positech Games)
Destination Sol (HKLM-x32\...\Steam App 342980) (Version:  - Milosh Petrov)
Discord (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Divinity: Original Sin Enhanced Edition (HKLM-x32\...\Steam App 373420) (Version:  - Larian Studios)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)
Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)
EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.00.0002 - GIGABYTE)
EasyTune (x32 Version: 1.00.0002 - GIGABYTE) Hidden
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Elcomsoft Cloud eXplorer (HKLM-x32\...\{D5ED1A08-0171-448C-92ED-D94365EBB226}) (Version: 1.00.8203.2945 - Elcomsoft Co. Ltd.)
Elite Dangerous Launcher version 0.4.4468.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.4468.0 - Frontier Developments)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)
EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet SetupManager V2 (HKLM-x32\...\InstallShield_{485863E4-C20E-4629-A3B1-B4C8E706A7CB}) (Version: 2.2.7 - SEIKO EPSON CORPORATION)
EpsonNet SetupManager V2 (x32 Version: 2.2.7 - SEIKO EPSON CORPORATION) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
EVE Online (HKLM\...\Steam App 8500) (Version:  - CCP)
Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)
Fallout 3 (HKLM-x32\...\Steam App 22300) (Version:  - Bethesda Game Studios)
Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version:  - )
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.00 - Ubisoft)
Far Cry 4 (HKLM-x32\...\RmFyQ3J5NA==_is1) (Version: 1 - )
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
FORCED (HKLM-x32\...\Steam App 249990) (Version:  - BetaDwarf)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.36.208 - Digital Wave Ltd)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
Futuremark SystemInfo (HKLM-x32\...\{79659071-4B68-4EC8-833C-49C97B68FCD0}) (Version: 4.36.512.0 - Futuremark)
Gauntletâ„¢  (HKLM-x32\...\Steam App 258970) (Version:  - Arrowhead Game Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hack 'n' Slash (HKLM-x32\...\Steam App 246070) (Version:  - Double Fine Productions)
HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
hide.me VPN Version 1.0.5 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.5 - eVenture Limited)
HMA! Pro VPN 3.4.6.1 (HKLM-x32\...\HMA! Pro VPN) (Version: 3.4.6.1 - Privax Ltd)
Houhou SRS version 1.2 (HKLM-x32\...\Houhou SRS_is1) (Version: 1.2 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
IntelÂ® Chipsatz-GerÃ¤tesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Kill The Bad Guy (HKLM-x32\...\Steam App 293940) (Version:  - Exkee)
Killing Floor 2 (HKLM-x32\...\Steam App 232090) (Version:  - Tripwire Interactive)
Leawo Blu-ray Player version  1.8.8.0 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.8.8.0 - leawo Software)
LibreOffice 4.4.6.3 (HKLM-x32\...\{1013DB12-EC2E-455E-B5ED-BFD056DC1A99}) (Version: 4.4.6.3 - The Document Foundation)
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
MakeMKV v1.10.4 (HKLM-x32\...\MakeMKV) (Version: v1.10.4 - GuinpinSoft inc)
Mass Effect (HKLM-x32\...\Steam App 17460) (Version:  - BioWare)
Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version:  - BioWare)
Mass Effectâ„¢ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
MATLAB R2015b (HKLM\...\Matlab R2015b) (Version: 8.6 - MathWorks)
Mediatek RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.39.173 - MediatekWiFi)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.7369.2130 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Middle Earth Shadow of Mordor (HKLM-x32\...\Middle Earth Shadow of Mordor_is1) (Version:  - )
MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version:  - EnTech Taiwan)
Mozilla Firefox 53.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 de)) (Version: 53.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden
OpenVPN 2.4.2-I601  (HKLM\...\OpenVPN) (Version: 2.4.2-I601 - OpenVPN Technologies, Inc.)
Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.4.9.38188 - Electronic Arts, Inc.)
Papers, Please (HKLM-x32\...\Steam App 239030) (Version:  - 3909)
PassbildPro v2.6a (HKLM-x32\...\PassbildPro_is1) (Version:  - PassbildPro)
Passfoto Manager Ver. 1.3 (HKLM-x32\...\Passfoto Manager_is1) (Version:  - NoSpy Software Lab)
PDF24 Creator 8.0.3 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhonerLite 2.45 (HKLM-x32\...\PhonerLite_is1) (Version: 2.45 - Heiko Sommerfeldt)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc)
Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version:  - Crystal Dynamics)
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version:  - Piranha Bytes)
RMPrepUSB (HKLM-x32\...\RMPrepUSB) (Version:  - )
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Shadow Warrior (HKLM-x32\...\Steam App 233130) (Version:  - Flying Wild Hog)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.00.0000 - GIGABYTE)
SIV (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Skypeâ„¢ 7.34 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.34.103 - Skype Technologies S.A.)
Spintires (HKLM-x32\...\Steam App 263280) (Version:  - OoveeÂ® Game Studios)
STAR WARSâ„¢ Battlefrontâ„¢ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)
Talisman: Digital Edition (HKLM-x32\...\Steam App 247000) (Version:  - Nomad Games Limited)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeXstudio 2.10.8 (HKLM-x32\...\TeXstudio_is1) (Version: 2.10.8 - Benito van der Zander)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
The Secret of Monkey Island: Special Edition (HKLM-x32\...\Steam App 32360) (Version:  - LucasArts)
The Vanishing of Ethan Carter (HKLM-x32\...\The Vanishing of Ethan Carter_is1) (Version:  - )
The Whispered World Special Edition (HKLM-x32\...\Steam App 268540) (Version:  - Daedalic Entertainment)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)
Tiger Knight: Empire War (HKLM\...\Steam App 534500) (Version:  - NetDragon Websoft Holdings Limited)
TI-Nspireâ„¢ CAS Student Software (HKLM-x32\...\{F03A8756-7FCB-4DCD-9AC1-12C63A6075F1}) (Version: 3.9.0.463 - Texas Instruments Inc.)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
TomTom HOME (HKLM-x32\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Transcendence (HKLM-x32\...\Steam App 364510) (Version:  - Kronosaur Productions)
Tyre (HKLM-x32\...\Tyre_is1) (Version: 6.4.0.6 - 't Schrijverke)
Undertale (HKLM\...\Steam App 391540) (Version:  - tobyfox)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
USB Multi-Channel Audio Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006206}) (Version: 1.00.0008 - C-Media Electronics, Inc.)
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.9.0 - Elaborate Bytes)
Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version:  - RuneStorm)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Warhammer Quest (HKLM-x32\...\Steam App 326670) (Version:  - Rodeo Games)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0C3B8712-2743-48BD-A022-B4200115B15E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {0C536337-0CDC-45E1-903B-1A9C6A6B7933} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {107BFE19-7528-40A0-998A-C4A82110F2D9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)
Task: {134D1A35-FDCD-4817-AA02-115C2A62BB1C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)
Task: {18CA43DE-A075-4CCD-AC81-C76668062D58} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {1BC57658-67A8-451B-968D-CA240ECD1E40} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1E1B9767-CDFA-4232-9FA6-2E6F21AEB071} - System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {1E53F75E-BEF8-4CE0-9B4B-C687D9FA797B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {21824C20-E975-4603-8522-320FA332ED39} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2C29168A-09A2-44D5-909A-7EA2F780AE26} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2DA9B8FC-0C73-48D6-ABF2-30EC30C76767} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {31BEA046-56E0-4D59-BCFB-2285FF7FB4E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)
Task: {335DF35C-CFE6-418E-BDAE-512DD89C797B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {468CFE7D-C8B9-4E7B-BD5B-4230E0F06F81} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {46B1B2E9-DE3D-4BAF-8CA4-F981DEDD1202} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)
Task: {479EF5A4-C830-451B-9977-FFDD71F48016} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4E7A87EB-7B7F-4FA2-B476-557EB04F7ABE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe 
Task: {5DD9CEAC-A36F-4398-8B11-0A486120B9E1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {60EDE66C-E6B2-4AD5-81E8-13CC2C8386C8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {65067170-8470-4C93-BAF2-19FFBAEEEF0F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {6AFD0255-0ED0-419C-B6D5-95BD71359A74} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6FC9EBEA-BC08-41AE-B004-58408A7B0D48} - System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {7214D99B-28C1-457B-A5A1-BBAC0FF0DBEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {774A0F66-E2F1-47A1-BE12-D3F7B351426B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe 
Task: {7820ED84-DD48-4DCB-BBB5-38FAB0A8AC9F} - System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {81425B80-0453-4DC2-8102-375B54E9A7C2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated)
Task: {830B3AE3-0B5D-4574-9DEC-2F05194B49A6} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {85DDD876-F0C4-4BE4-BA13-6D4C5D2C428D} - System32\Tasks\MATLAB R2015b Startup Accelerator => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe [2015-07-30] ()
Task: {86720F65-531C-418B-82D6-009C7F4F901C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {879E17BB-C3CB-4CB9-AC5F-BB792D7F51D0} - System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {92E5D5FE-5288-4700-96B1-C4545452CA35} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {96515D1F-2F89-4D9F-97FE-3BB632C13368} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-26] ()
Task: {9E4B0ADA-55F2-4B64-9E69-3C59D88ACB98} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {9F5DB38C-8E11-41CD-A313-26F2BC2222BF} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {A01C12CD-1656-4A58-A7AC-FF75834CA7C2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-06] (Microsoft Corporation)
Task: {A0D1B58F-9267-47CC-81C4-9F32E9C7C158} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {A1117A36-8F68-46DE-98D8-592B58FF68D3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe 
Task: {A8E079FC-6829-4396-B1CF-106D7F7F9933} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {A93A7AFD-DB3D-4E47-8DAD-5F7678AB77B4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe 
Task: {ABE2B663-9B4B-4ABF-B96F-76888D49E9AC} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {ACD1141C-2870-44BA-9521-4E88A22BAEC9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated)
Task: {B5994E13-3374-40A5-9041-9E83E5446E4F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {B688EEC8-585D-406C-A7B8-A74B608AD0B2} - System32\Tasks\Opera scheduled Autoupdate 1491080137 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software)
Task: {B7BCDC4F-DA02-479A-8A99-581AB05576AE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C059B4FA-0A31-4C63-8A43-D0E37C4D0FBF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C18890E5-6EDB-40D5-A0B6-DA5DE3036E77} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {C7F2E336-27B9-4032-B230-73F0892A712D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {C89711F7-0823-4DB8-BBBF-2CB8CC3174E4} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {D39CB3D4-C0FF-4B49-971E-2D411AC6985C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {D5C6685E-6D00-41E1-9021-965ABA38A6BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)
Task: {E25C6802-A114-456B-9B90-A7E6BE3A7B53} - System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {E5115114-5C02-4114-A7AD-62B5D391EE30} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {F3E5F059-038B-4B71-B726-283DB44B9BAB} - System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {F40006B3-B99B-43CA-AA9A-04AF9CEE7B14} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {FB79D84D-835E-4A74-BCF1-5EA79615A574} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{086E526A-2170-469E-BCA6-33E120A37FD4} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9C19764F-9338-48FD-B114-CB1DA88859EB} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9F0E0896-8027-4110-AE14-1994D9793796} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\MATLAB R2015b Startup Accelerator.job => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe

==================== VerknÃ¼pfungen =============================

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2015-04-14 16:27 - 2015-04-14 16:27 - 00016896 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-05-09 18:30 - 2017-05-09 18:31 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 43195904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-05-09 18:30 - 2017-05-09 18:31 - 02457088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\skypert.dll
2017-05-11 08:44 - 2017-05-11 08:44 - 00632448 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2016-12-09 18:09 - 2016-12-09 18:09 - 00073728 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2017-02-27 18:06 - 2017-02-08 15:02 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-11-14 19:34 - 2017-04-29 20:11 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2017-02-28 10:51 - 2017-02-28 10:51 - 01937376 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2016-11-14 19:34 - 2017-04-29 20:11 - 00012288 _____ () C:\Program Files (x86)\Origin\libEGL.DLL

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)


==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)

2009-07-14 04:34 - 2015-11-24 19:18 - 00001030 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1	rad.msn.com
127.0.0.1 	live.rads.msn.com
127.0.0.1	ads1.msn.com
127.0.0.1	static.2mdn.net
127.0.0.1	g.msn.com
127.0.0.1	a.ads2.msads.net
127.0.0.1	b.ads2.msads.net
127.0.0.1	ac3.msn.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dennis\Desktop\FMA-B\edward-elric-fullmetal-alchemist-anime-hd-wallpaper-1920x1080-4286.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==

HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "TomTomHOME.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [WMP-Out-UDP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-TCP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [WMP-Out-UDP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe
FirewallRules: [{C8A93475-860E-4055-B33C-C979047DFAC4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{3BC467AD-FA73-4107-BA04-160B87A33C8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [UDP Query User{03006707-C27F-4B41-978D-F822ECD498DE}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe
FirewallRules: [TCP Query User{12636CBA-3FAB-4730-A3EF-84378F54EF02}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe
FirewallRules: [{B007250D-6005-4EFF-8FDD-6713AC272D67}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{D0366D73-8F91-4BAE-B69A-720DCB7A9F8F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{A0664D65-8878-4BBC-B0B7-A1CB4B99C932}] => (Allow) C:\Program Files\Opera\44.0.2510.859\opera.exe
FirewallRules: [{A5BBA3F1-F245-4E1E-A825-8FBF70A695EA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{A9E0C9B0-BA90-417D-8E3A-26991AE6672C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{4743FCA9-2B12-4964-BEAA-48B8720EDC2D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{A901D95A-50EB-49D5-8B92-191B41724345}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [UDP Query User{BE8874F1-7AC1-4D6E-BBC2-2C3932E1FBD7}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe
FirewallRules: [TCP Query User{8909F6B8-3AA0-4C0B-A279-4D80672A98C8}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe
FirewallRules: [{D0978E56-8639-435A-9AA0-03FAC8534521}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{EB6C9921-F9BD-45F5-9EA2-A9809547D731}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6B01820A-BC70-47C2-A456-E7BD549AC433}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{631D1288-7375-450D-B0FB-BA7CD10679D0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{BEF76BDA-666C-4E5A-82AF-CD891FF2481E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{F192CA2A-37BC-48BB-89CB-2A791E2F37DB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{14241604-6E67-444C-A418-97FCCEA6C05F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{5EA9902A-85F2-4CE5-90BE-717AFCA4A85F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{E7C68301-1909-4E4C-9F69-4E328E45D668}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{ECC74987-E071-4AED-B521-FD0974F986A8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{A7A4606C-91DB-40B4-A778-FD6835CA1F53}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{6A373D75-E879-443E-B990-6CADC572C38E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{112588CC-ED52-484E-9C71-A30F840E0AEC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [UDP Query User{1F66EFA8-E987-4659-9108-376E633EB84C}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [TCP Query User{97A2EB9A-8D07-4ADD-9593-8D0AF22797C3}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [{E8ED0263-9E6F-41B1-89B3-2826D83AF0CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe
FirewallRules: [{2F077E75-D03D-42FC-B96D-7AD1C18A0013}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe
FirewallRules: [{2445D4A7-847D-4C3D-B157-2539618E4511}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe
FirewallRules: [{B244DCF4-721D-4E41-B925-A7747CA22A38}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe
FirewallRules: [{0211D729-46EC-4F34-BE2B-F8F871ECE4F5}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe
FirewallRules: [{FCC1A3B9-D2DC-4A73-8A62-70D26E8120BB}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe
FirewallRules: [{EECA8479-45CF-401E-A0F4-FF821BF63DD2}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{7F7921F1-5D8A-4A53-98DD-4E038847967D}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{D5BC8FED-36F4-4BE2-9101-C2EFFA368B74}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{71CD7AEE-6B80-4E59-8794-855128480BEE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{F67CA00F-298D-4BFD-9276-6F4AF8685547}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{7E3FD844-BCFF-4AAA-A7EA-117D75AB246B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{529B95C2-595F-4C4E-BDEA-81037FABB918}] => (Allow) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe
FirewallRules: [{6F5338E3-F316-4763-8901-FBA83DFD6625}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{1EEA632C-3075-4161-AC28-B6C21732FCEF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{A4161788-52F5-4257-A64C-28E6B89C7EB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2B5DA77C-0B39-45FA-8195-C6A432CB931A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1F9B9D8E-2BD3-4391-AEF3-FB3CE3892803}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{5C4DC916-884B-4D7D-8222-3B11DE11FDF9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{A35793A3-C175-400A-95EB-D79E9ED79BE7}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [UDP Query User{E526B719-A956-4B53-B8FB-8033475D2161}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe
FirewallRules: [TCP Query User{84224BF9-F3AE-46B7-93BB-AFFBA57F129F}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe
FirewallRules: [{8886650D-C142-4ABD-82A9-8043D801F30A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{1CAF08E3-CB6D-495B-A10E-0920C08AE867}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{80887978-7CB1-46A5-8655-802C5B017BBC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [{1543DA99-FFF7-4644-827B-4A7A0C352224}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [{D2625030-4199-493E-B43D-9D138CFDD46C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{4876ECCC-2913-4073-8469-4D894C8D40A4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{21E0A7E6-A501-4D31-970B-7FBACFB98421}] => (Block) E:\Games\Fallout 4\Fallout4.exe
FirewallRules: [{6B4E6899-FA39-42AC-82B7-3AB6298F2DE0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{6B7D8532-183E-4B41-A560-2426F92DFD59}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{5537E916-E20E-495A-BDA7-CE6BAEB25001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1752EF4-7B9A-4E4F-A826-465DFECF2EC6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{D426A011-1D55-4A3B-86AF-4DADFECD6CFD}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe
FirewallRules: [TCP Query User{E08FEE99-82C4-4236-9D7E-E9E97D2F2D6B}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe
FirewallRules: [{B5E5F6BE-6760-4D4F-B3F8-9DB2ABF51380}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{6E7ED5C4-D93A-45AF-AF96-8D241FA2C809}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{19E8DC9D-9071-4D98-BDB0-4AAD27D832F3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{52BCACAB-D39C-476C-8375-9B5702AFC777}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{B5AADAE9-FC7E-4C98-950D-DFC4E3B888B6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{5C58E99A-065D-4F36-BCB1-580A7524FF35}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{63A08AF5-6B4C-4055-831E-D5DC5AA9264A}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{A52D0E5E-9B4E-4AB5-8090-910934ACA14B}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{1CD6F05B-FE37-41C0-BADF-F3EB9867A5E5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{563AD2ED-8DE0-4F73-BD85-2C59C9E7503A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{3578656D-9C9B-4E94-884A-6415F5834F17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{466F57AE-2A30-4946-83F9-2E86F8DF70F1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [UDP Query User{2F7EEFF2-3479-4F03-84DC-28E4501C0DFA}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe
FirewallRules: [TCP Query User{9D52F165-4930-43D3-9CF0-615BE7728FD8}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe
FirewallRules: [{2B855FCD-0CAC-465A-A7E7-1EB9802D530A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe
FirewallRules: [{217140AD-AE90-4B99-9C6B-262EE560E39C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe
FirewallRules: [{0D9C14D9-B981-4851-B78B-12BB403944C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{E36F2E60-B1BE-4EEB-A1CB-74795CE3E56F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{077547A7-8CDA-4F83-9641-0F659EB842A7}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe
FirewallRules: [{34A2137D-C3F2-47A9-9B06-415516F7FFFB}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe
FirewallRules: [{AF3F05DB-7B8E-408B-9490-213795316AF8}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5AE8E97E-FE31-4A9F-8C24-717672F7C067}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9ABFFF5F-1432-4070-8DA9-8F070B86597D}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4EB06D8E-7463-4D66-9421-3ABF73C00EEB}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{5788A922-3EDA-4EA9-8F41-359ED4B0D41C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{C1C4070B-1E5E-48BB-A5A9-34683EC17352}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{F63C2199-4F8F-4391-97A2-1C1025BEB546}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{8487BCB2-4ED4-4C4B-BCE3-75AEA5EA3DF0}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{427C1569-11F3-4793-AAF9-50B1DDC06EC7}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{B8011D23-E7F6-484B-AFEE-6B6A2E6B4B05}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{3ACC4CEC-B76D-46FF-A63C-8E6E28A639CF}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{555C9BCD-35DE-428D-B378-A534BC929F0C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{B8CBEB91-0AC8-4E5B-BA92-6A5C4BD89944}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{48BB8AF9-F8B9-4358-B327-F92A09ED10AA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{537C4630-8994-4D2A-9A5F-66E86D6B7597}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{294FC133-15D0-4D83-9A1F-7A87F088140C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [TCP Query User{8EBA783C-8571-42C1-A309-D79ACFB82416}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{D37A7B0A-EAB9-40D2-9992-6114902ACD22}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{B8F733B2-E4F5-4020-B337-C139C2085ED4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe
FirewallRules: [{C0C4EC0B-D162-45F1-A64F-71556254153E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{B0777C6D-07A7-440D-BB99-BEA2F09669AB}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
FirewallRules: [UDP Query User{85136BAA-0985-4142-91F6-A5A1D4D8EAFD}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
FirewallRules: [TCP Query User{6C3516A0-83BE-4E9F-9190-167D66C6317A}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [UDP Query User{3352E604-EB1E-4B95-B644-8CC9B0081607}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [{08A87F18-30EC-4038-95E0-D9C0A5BFE115}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{993AB1AA-C3F1-4777-AD17-7D3A0762CE8E}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{0FC41D5F-B52D-451C-B493-7783D4FB7599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe
FirewallRules: [{FA3FA25E-8719-4335-97E7-7ACFF2417869}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{490D175F-C7B0-4805-B4AF-D4332F2E1B51}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [UDP Query User{816A79E7-9DF2-4B97-9596-298BF5F8BBBD}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{90A20EF9-8733-48B9-BE89-7E67E0DC10A6}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe
FirewallRules: [UDP Query User{526B30C7-7223-49C3-82AC-1BD336CC7D1A}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe
FirewallRules: [{27C7404F-E442-47C2-95A7-F06546099A4B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{56E993A7-4416-4887-B4EC-078462FB4ADE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{DBEAA64E-72E9-4278-B927-89CC548A3D1F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{B17EC375-AC70-413F-9E23-2F7FA4251FD2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{23B1BABF-073D-4130-B515-0AFF1EAFD67E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{86413EFC-5C2B-48DF-B947-7BF3D0CEE40A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{720F2924-BDDA-4539-8445-7734D72814D9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8CF02EB5-A443-48EE-8AD2-7E57AE3C3770}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2ED659E6-F140-4C67-A180-734C0519B612}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F5A17CD9-D3A3-41C0-BE68-84107A5B92E9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F7F91883-D335-484A-B12A-90BF0F2A50AD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{62B9457A-421E-405B-A059-76FBD50EB1DD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{AFF575EE-B405-4922-8475-62FD93D4F7E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{C00F93D4-A1C7-4D2C-8365-F9438073BB8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{EE44C46C-57E6-4BFA-BADC-18A734D84674}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{DA9731C4-6676-4019-A653-367AA00883B3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{44568B77-7D5D-49D7-BB9A-367214673571}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{C6D816B5-39AE-4ABB-B778-DBB4183E31B9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{27B07604-918F-42BD-A8F9-072CADE6468B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{C000E71A-E82D-4AE7-AFB2-557AA469D4E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{39C49974-14D0-4559-A8B1-7EC599A8FF09}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{AD531B64-6D4D-4ED8-9E9D-53F3AE6AC643}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{F796FB4A-83F8-4EBA-A213-D53C40D04FAA}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{19B4F5DC-E7B8-4D3E-A436-95496168E852}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{7CE0F63A-5E13-4123-AD8D-09273025843C}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{6E6E965F-5F1E-4BCF-9601-F57B3603EEE3}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [TCP Query User{8976121B-EECC-4335-A198-DB21CEBA0541}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe
FirewallRules: [UDP Query User{9FF7851B-20FF-4D5A-9F93-F8C0C4CD108E}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe
FirewallRules: [{96183AA5-A9A6-4A9F-B250-53514E77C591}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{20684F7F-6221-4A82-ADF8-7CEE0642CB6D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{55F9FF76-96A4-4952-A921-6E3DE4C8707A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{8FE16784-A716-4E50-BD65-55ACF71D6CE2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [TCP Query User{AAA9FB64-2C4E-4A20-A586-965B42E94574}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
FirewallRules: [UDP Query User{E1CDC6D8-0240-4ED9-8CAF-D0F66772AF68}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
FirewallRules: [TCP Query User{3AB445F5-9F1B-409E-9EC9-3C5CF0122236}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{64F06DD8-335C-4C3A-91E9-87F5931DA5DA}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe
FirewallRules: [{8C6DB3DC-1AB2-44B7-BA5A-D3B2A0247599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{C7A6198E-2533-49A8-BF06-29D7997406FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{2F351A0D-F7D0-4D31-87A9-F685998F24FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe
FirewallRules: [{B82CBB1E-0624-4938-9B66-5D869B76CABB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe
FirewallRules: [{675D4551-A3CE-4486-B702-B7DB8F246C91}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7CE9C52A-9276-4273-A704-A25B166A0E77}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7455FDAB-B26F-4931-8DA8-A844B1C84E94}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe
FirewallRules: [{756436C1-D16D-49A4-878E-999A3D2F4ED1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe
FirewallRules: [{EAEF4FA0-2DEE-41AF-9620-3F2F5B62E841}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe
FirewallRules: [{692F4D46-3792-492D-9631-15895DE196BF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe
FirewallRules: [{B3352B1E-4D15-4982-87F3-835D78EBC1EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD39BA85-D589-49F8-BB4B-6C5F0912F768}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F7A40669-1C9B-4F9D-BB9D-894C4437E8D5}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [UDP Query User{BFF39BCB-D25E-48FE-AB45-D48C67E3D4C0}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [{A8657DD5-DBCD-4641-820D-9F6BAA00D487}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{648726DC-649C-4467-A51D-9634A9856039}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{852ECAE5-94A5-43AE-ADD4-9EC158FD44D2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{730F4784-59E8-4FDA-8AB9-77E70934F824}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{E164CA86-DFD0-4634-942F-FA1F5D459EFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe
FirewallRules: [{ACC4C8AC-AF53-44F5-8586-660505430136}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe
FirewallRules: [{F497D5F2-A6DB-4E91-98B7-E93656A4B158}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{A64DF8AF-E477-41A1-B0F9-A239AB185B48}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{872B69E4-989B-40CD-8480-C52922391AA1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{3F162C09-5E17-464C-AE18-9A193D8CFB92}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{525DBDC3-1A1A-4A27-8775-6DE52FECECFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{2E60A323-6C96-4CF7-A176-8059625198A0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{614A831E-6F6D-4B99-910F-36B4FA6CC69A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe
FirewallRules: [{6725B28F-3B8C-434D-9F67-11C6364AB54D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe
FirewallRules: [{9719D41D-BF61-45B7-9025-D576749F2999}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe
FirewallRules: [{F7472A95-D314-4D96-8161-F5EA4CC9BCED}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe
FirewallRules: [{C00716BB-1F31-4A89-9328-254F5B247ACD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{3BF96EDB-9FA0-4C0A-B92C-6B916F9FD695}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{4D5770AF-9437-42F4-9831-D8A400F95D51}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe
FirewallRules: [{6AB8641A-A6F2-4A99-B787-757FF5EB7788}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe
FirewallRules: [{361D4BF1-417E-488B-918A-A8B2F244BB08}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
FirewallRules: [{8289C635-A454-4FDB-8732-67B5F1921C4F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
FirewallRules: [{991405F1-338C-416B-B2C5-A95F43E0E979}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{7C76EEE1-36CB-4E5A-AAE3-3D164027B6EC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{B0A6CF7B-141E-49B7-AA61-A82E3F42D4CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{E1A5F566-3518-41FE-86F0-1586A47727C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{6CCE767F-8005-4758-9171-E495D3DBD212}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe
FirewallRules: [{EAE60A23-558E-401E-8C83-9C7CD643DC52}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe
FirewallRules: [{9884FD7C-4415-48E6-9432-C3E60352A44D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{7C9D39DB-23FF-49F9-9CE5-6FEC24468E27}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [TCP Query User{7C4203C9-C082-4238-A4CB-58753C1F0B6C}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe
FirewallRules: [UDP Query User{421DB6E2-33C9-410C-8EFB-05F73D5E4D29}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe
FirewallRules: [TCP Query User{4BDA6A17-766D-4232-BAAA-90E3EA3EC6C2}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe
FirewallRules: [UDP Query User{5D092578-F888-4AC4-B9AF-63830CB98B4C}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe
FirewallRules: [{C081FCD8-647D-4AFD-B876-035D055B1FE6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{EBB3EDD2-334F-4EA3-B236-427203E15816}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{47630AA2-8BC0-42F6-86F3-F56CE07AFA33}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{CE06F7D5-EA95-46DB-942A-7AD99186660F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{F275B108-8993-4C50-9619-48DAD287646B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{CF4DDEC5-0D82-4A10-92EA-050458B6737E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [TCP Query User{3DA6C6E9-D4B8-44D1-8E14-1CBBCD1F68FB}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe
FirewallRules: [UDP Query User{F479C94A-0B6A-4966-B864-8268564FE96E}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe
FirewallRules: [{DF63C77C-B3A0-4225-B421-7F14B5B61D7C}] => (Allow) LPort=7777
FirewallRules: [{560CE11D-6E66-4C7C-9356-F7116B4088E2}] => (Allow) LPort=7777
FirewallRules: [TCP Query User{B55ABF91-9441-4130-A2F6-A9BDE3536C46}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{74D866EC-B243-4998-BD74-9A7F1B75A30D}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FF2A0257-E89E-425F-9507-BEF55266965F}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{AFA94905-6E8F-425B-9712-A235169C8F7D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{A8C15B47-34E0-4C46-B707-650201622059}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{E3528CD5-2F55-4A5D-BF1C-B2F9CC0EF6C1}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{75BECF26-E15F-4F2F-A1AD-2C474D8E1C74}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{74C3B8BD-2F78-4C22-AE59-2F1D5795D794}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe
FirewallRules: [{19F97437-F8FB-4C3E-B8FC-4003633622E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{F3F3D22B-E00C-4062-A31B-A36D148C904F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe
FirewallRules: [{BCA6E2C9-F713-4B1D-9AE0-4C143E6ED4D8}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe
FirewallRules: [{F717F064-92C9-4B38-BBF3-28A153829494}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe
FirewallRules: [{30A06786-9A12-4960-A262-8722ABA7DC49}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{820C9087-29C6-4C19-BA6C-2FF6D876D41F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{7E9E2F58-7F77-4E0A-A7CF-18A90A978667}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe
FirewallRules: [{4D720489-96F0-4924-A0E0-10434060CAA6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe
FirewallRules: [{E4C937AB-5EC5-47EC-BBCF-8907C1E904FC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{DD5CFC20-053C-4908-A3D8-990901C72F86}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{1E021EA6-4F72-4CB1-8710-AD453045770E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{E5DD8B9E-F1C6-4828-97D5-6C70EEAF9430}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{35CC350D-6000-483C-A96A-3C5771B28918}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{A02B5A66-8301-4A05-8FE0-BFE21B5CDE82}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{C6BF81B9-1F2C-47C6-A781-2E69599C78FA}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4E74000F-2C98-4043-A394-548D7CA050CF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{DBF843D6-CC0E-457F-A055-2D56277E55E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{FB15088D-AEF2-49D1-8AFF-8C3604794B87}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{B48CCDD1-D87C-4431-9BA9-063473CBD9B5}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe
FirewallRules: [{319E0304-5853-4BF4-853F-6E2488F0145C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{0E8CF9D4-C8FB-4930-B319-1DAD65671E4E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe
FirewallRules: [{5EC2A222-C3DD-4C7E-B2D4-79566E7721B2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{DB41A4F4-6D0B-48AD-BE11-1531FA505068}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe
FirewallRules: [{E1E54F54-C80D-4D17-8957-D0A017B300CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{F9EB673D-E27E-4936-922B-99BAD67A0714}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{B591DC37-4523-47B7-B14A-A1E2C675D192}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{82724F50-9003-4FD2-83A0-2FCF497491D5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{C55674D5-1D32-4A83-B5D2-C250AB7D12DE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{D197808A-C7B7-43A8-AFB9-10C266F467AE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{13ADBCA4-15CB-4498-8457-41903CADB1E8}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe
FirewallRules: [UDP Query User{B2F3CAE9-D58E-43D2-B3AA-7B053762CE29}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe
FirewallRules: [{8491ACEC-7216-4A16-BD5D-9A4A783B1B20}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1964DBDA-3427-4EFF-821E-FBE915ED24F4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{4C3E9107-49B2-4F52-9AB8-E548386FCC45}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{EB65C903-A396-422E-9E7A-531A0CFD5CBB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{BF060809-5FBF-4E9F-BBDA-9E7FD6E3FC06}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{DDB3404A-557A-44E6-98E8-6D4B56A7D6D9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{90833148-6956-44D3-8EE8-0EBA2C733E17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{9A1F4C0E-9B7F-4C03-9413-9ADCD4F1AF0C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{F5402017-714C-4205-8020-586CB774DA11}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{C4557A97-9B4A-4817-8B00-286FE8C2A77E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{960B6CAD-9EA2-48BD-AFB7-9B0EB1949D26}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{61891A3B-4944-423A-BB8A-09970AC1A7F7}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe

==================== Wiederherstellungspunkte =========================

09-05-2017 22:11:38 Windows Update
18-05-2017 19:01:56 Windows Update
23-05-2017 21:02:37 Windows Update
24-05-2017 23:49:16 Revo Uninstaller's restore point - Avira Antivirus
24-05-2017 23:50:23 Revo Uninstaller's restore point - Avira Connect
25-05-2017 00:46:01 JRT Pre-Junkware Removal

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/25/2017 12:54:47 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: 

Error: (05/25/2017 12:51:23 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: 

Error: (05/25/2017 12:47:17 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: 

Error: (05/25/2017 12:46:46 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: 

Error: (05/25/2017 12:46:13 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: 

Error: (05/25/2017 12:43:40 AM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/24/2017 11:56:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MSASCui.exe, Version 4.11.15063.0 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 244c

Startzeit: 01d2d4d87e11523c

Beendigungszeit: 2

Anwendungspfad: C:\Program Files\Windows Defender\MSASCui.exe

Berichts-ID: 47d97a6e-5947-42b0-acb3-b4f63f52ab6c

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:

Error: (05/24/2017 11:51:29 PM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/24/2017 11:50:23 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}

Error: (05/24/2017 11:49:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}


Systemfehler:
=============
Error: (05/25/2017 12:46:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.

Error: (05/25/2017 12:43:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstÃ¼tzt.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TomTomHOMEService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 120000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "OpenVPN Interactive Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MediatekRegistryWriter64" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2017-05-24 23:37:47.792
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:47.788
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:47.783
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.772
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.771
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.770
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.769
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 23:37:42.768
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 22:08:15.854
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-05-24 22:08:15.854
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 16%
Installierter physikalischer RAM: 16310.5 MB
Verfügbarer physikalischer RAM: 13600.08 MB
Summe virtueller Speicher: 32694.5 MB
Verfügbarer virtueller Speicher: 29776.31 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.81 GB) (Free:79.18 GB) NTFS
Drive e: (Games) (Fixed) (Total:2794.39 GB) (Free:2016.08 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

24.05.2017, 23:01	#6
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan] achso, ja das ist normal. Über erweitert bitte FRST erlauben, sonst hast du keine Logs und Hilfe ist unmöglich __________________ --> Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]

24.05.2017, 23:54	#13
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan] Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken __________________ Logfiles bitte immer in CODE-Tags posten

Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]

Plagegeister aller Art und deren Bekämpfung: Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]