| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
25.06.2017, 14:46
| #1 |
 |  Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Guten Tag Trojaner-Board Team, seit mehreren Tagen tritt bei mir vermehrt auf jeder Seite Werbung auf. Selbst in dem Infokasten unter einem Video auf Youtube und auch im Video selbst. Wenn ich einen neuen Tab öffne, ist dort ebenfalls Werbung. Ich werde auch sehr oft beim öffnen einer neuen Seite auf andere Seiten umgeleitet. Die Werbung ist oftmals sehr anstößig und dementsprechend ungeeignet für jüngere Benutzer dieses Computers. Diese Probleme treten anscheinend nur bein Chrome-Browser auf. Hier sind die gewünschten Daten, die Addition.txt findet sich im zweiten Beitrag, da sie zu groß ist. Vielen dank an das Team im voraus  Systemscan mit FRST, FRST.txt : Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-06-2017 01
durchgeführt von Mohamed (Administrator) auf KANADE-PC (25-06-2017 15:05:23)
Gestartet von C:\Users\Mohamed\Desktop
Geladene Profile: Mohamed (Verfügbare Profile: Mohamed)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Eastman Kodak Company) D:\Allgemein\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) D:\Allgemein\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\runSW.exe
(Realtek) C:\Windows\SwUSB.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TunnelBear) D:\Allgemein\TunnelBear\TBear.Maintenance.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\puush\puush.exe
(Akamai Technologies, Inc.) C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Mohamed\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() D:\DSL Soforthilfe\DSL_Soforthilfe.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(GOG.com) D:\GalaxyClient\GalaxyClient.exe
(GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) D:\GalaxyClient\GOG Galaxy Notifications Renderer.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-11] (AVAST Software)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-06] (Intel Corporation)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\System32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [EKStatusMonitor] => D:\Allgemein\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [DSL Soforthilfe] => D:\DSL Soforthilfe\DSL_Soforthilfe.exe [20585888 2013-11-21] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <======= ACHTUNG
HKU\S-1-5-19\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-20\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] ()
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Spotify Web Helper] => C:\Users\Mohamed\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1529456 2016-10-09] (Spotify Ltd)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [GalaxyClient] => D:\GalaxyClient\GalaxyClient.exe [4982336 2017-06-21] (GOG.com)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\MountPoints2: {8d579771-db2c-11e2-bfaa-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\MountPoints2: {df3e928e-db2c-11e2-ad56-b1922c281eda} - F:\pushinst.exe
HKU\S-1-5-18\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-11] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-11] (AVAST Software)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-12-25]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3C023254-6634-4406-9B6D-B65ED5DCBF8F}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{5EC6FE6C-656C-46A2-B1F0-40B40B81FB07}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78AFF4A0-474A-4C67-8A86-DD4C916BE0C3}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DE820F93-8CE5-4F9D-83E3-80290730CD84}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/?utm_source=SDA&utm_medium=plugin&utm_campaign=april2015
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-12] (Microsoft Corporation.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-05-11] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-12] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-05-11] (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-12] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-12] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKU\S-1-5-21-4196016333-305226474-955279301-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
Toolbar: HKU\S-1-5-21-4196016333-305226474-955279301-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default [2017-06-25]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\w43e22wc.default -> Yahoo!
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\w43e22wc.default -> hxxps://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\w43e22wc.default -> Google (avast)
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\w43e22wc.default -> Yahoo!
FF Homepage: Mozilla\Firefox\Profiles\w43e22wc.default -> hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
hxxps://www.google.com
FF Extension: (Firebug) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\firebug@software.joehewitt.com.xpi [2017-03-06]
FF Extension: (AdBlock) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-06-25]
FF Extension: (Avast SafePrice) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\sp@avast.com.xpi [2017-06-05]
FF Extension: (Avast Online Security) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\wrc@avast.com.xpi [2017-06-05]
FF Extension: (DSL Soforthilfe) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{95E05177-EA09-4386-8B79-FEB1EAC063E6} [2016-01-08] [ist nicht signiert]
FF Extension: (Video DownloadHelper) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-06-05]
FF Extension: (Adblock Plus) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-25]
FF SearchPlugin: C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\searchplugins\google-avast.xml [2015-06-10]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4196016333-305226474-955279301-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mohamed\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-10] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://search.conduit.com/?SSPV=&ctid=CT2269050&SearchSource=13&UP=SP468FD9D9-5E50-4721-919E-306D1FED60B2
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default [2017-06-25]
CHR Extension: (ProxFlow) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-01-24]
CHR Extension: (YouTube) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2013-06-29]
CHR Extension: (Adblock Plus) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-21]
CHR Extension: (Google-Suche) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Video Downloader professional) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2016-07-19]
CHR Extension: (Diep Friends - by Creators of Agar.pw) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbhaejibfpkjkblcnhccangahmmlgejd [2016-10-17]
CHR Extension: (WebRTC Control) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjkmabmdepjfammlpliljpnbhleegehm [2017-06-02]
CHR Extension: (AdBlock) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-22]
CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm [2017-06-24]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-06-02]
CHR Extension: (Avast Online Security) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-06-09]
CHR Extension: (ThemeBeta.com) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\keeniajmpmdfifodncbikikeoblejkbi [2015-11-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Better History) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\obciceimmggglbmelaidpjlmodcebijb [2017-06-06]
CHR Extension: (Google Mail) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-11] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-11] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-05-29] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [383016 2017-06-20] (EasyAntiCheat Ltd)
S3 GalaxyClientService; D:\GalaxyClient\GalaxyClientService.exe [488000 2017-06-21] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8077376 2017-06-06] (GOG.com)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [22184 2015-07-29] (Micro-Star Int'l Co., Ltd.)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3760040 2017-05-22] (LogMeIn Inc.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2610808 2017-06-15] (AnchorFree Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 Kodak AiO Network Discovery Service; D:\Allgemein\Kodak\AiO\Center\EKAiOHostService.exe [395640 2014-05-06] (Eastman Kodak Company)
R2 Kodak AiO Status Monitor Service; D:\Allgemein\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [780152 2013-12-11] (Eastman Kodak Company)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-05-18] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2157456 2017-06-09] (Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3127192 2017-06-09] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [207872 2015-07-15] (Power Admin LLC) [Datei ist nicht signiert]
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 TunnelBearMaintenance; D:\Allgemein\TunnelBear\TBear.Maintenance.exe [38272 2017-05-24] (TunnelBear)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WPSService20; C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe [96768 2014-09-02] () [Datei ist nicht signiert]
S2 RealtekWlanU; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe [X]
S2 RTLDHCPService; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [X]
S2 sppsvc; %SystemRoot%\system32\sppsvc.exe [X]
S4 sppuinotify; %SystemRoot%\system32\sppuinotify.dll [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AFTrafMgr1.2; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_2_64.sys [57272 2017-05-08] (AnchorFree Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-11] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-11] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-11] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-11] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-11] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-11] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-11] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-11] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-11] (AVAST Software)
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2016-12-20] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-05-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-05-18] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-05-18] (NVIDIA Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-10-25] (Realtek Semiconductor Corporation )
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [5088024 2017-02-03] (Realtek Semiconductor Corporation )
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-05-17] (Windows (R) Win 7 DDK provider)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2016-03-28] (Anchorfree Inc.)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] ()
S3 ALSysIO; \??\C:\Users\Mohamed\AppData\Local\Temp\ALSysIO64.sys [X] <==== ACHTUNG
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 cpuz130; \??\C:\Users\Mohamed\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 hxsyol; \??\D:\AK\AuraKingdom\avital\hxsy64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-06-25 15:05 - 2017-06-25 15:05 - 00032468 _____ C:\Users\Mohamed\Desktop\FRST.txt
2017-06-25 15:05 - 2017-06-25 15:05 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-25 02:47 - 2017-06-25 15:05 - 00000000 ____D C:\FRST
2017-06-25 02:47 - 2017-06-25 02:46 - 02440704 _____ (Farbar) C:\Users\Mohamed\Desktop\FRST64.exe
2017-06-24 21:42 - 2017-06-24 21:42 - 34790450 _____ C:\Users\Mohamed\Downloads\windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu
2017-06-23 03:55 - 2017-06-25 14:43 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2017-06-21 05:10 - 2017-06-21 05:10 - 00548392 _____ C:\Windows\system32\Drivers\EasyAntiCheat.sys
2017-06-21 04:36 - 2017-06-21 04:36 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\EasyAntiCheat
2017-06-21 04:35 - 2017-06-20 20:40 - 00383016 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2017-06-20 20:37 - 2017-06-20 20:37 - 00000234 _____ C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tom Clancy's Ghost Recon® Wildlands.url
2017-06-17 03:37 - 2017-06-17 03:37 - 00000000 ____D C:\Users\Mohamed\ansel
2017-06-15 17:09 - 2017-06-15 17:10 - 00000000 ____D C:\Users\Mohamed\AppData\Local\NVIDIA
2017-06-15 17:06 - 2017-06-15 17:09 - 00000000 ____D C:\Users\Mohamed\AppData\Local\NVIDIA Corporation
2017-06-15 17:02 - 2017-06-15 17:02 - 00001412 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-06-15 16:28 - 2017-05-18 09:33 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-06-15 16:27 - 2017-06-15 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-06-15 16:27 - 2017-06-15 16:27 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-05-18 09:33 - 01893312 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01477056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 00121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-06-15 16:26 - 2017-05-18 09:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-06-15 16:26 - 2017-05-18 07:48 - 06437824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 02479736 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 01762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00548984 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-06-15 16:26 - 2017-05-18 07:21 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-06-15 16:26 - 2017-05-16 20:09 - 07993157 _____ C:\Windows\system32\nvcoproc.bin
2017-06-15 16:25 - 2017-05-18 09:33 - 40201848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 35349440 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 35282040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 28593088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 20066768 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 17426520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 16436488 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 14271608 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 13402816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 11056456 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 11027968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 10551072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 09248328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 09014976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 08808488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 04090016 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03603672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03437688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03020920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438233.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01606592 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438233.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01600560 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01055680 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00993912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00964216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00914880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00688968 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00577728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00507688 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00499320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00491208 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00426128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00406736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00218040 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00175552 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00148200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00143296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00046008 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00042897 _____ C:\Windows\system32\nvinfo.pb
2017-06-15 16:25 - 2017-05-18 09:33 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-06-15 16:25 - 2017-05-18 09:33 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-06-15 16:16 - 2017-06-15 16:16 - 00004226 _____ C:\Windows\System32\Tasks\AMD Updater
2017-06-14 21:12 - 2017-06-14 21:17 - 00015742 _____ C:\Users\Mohamed\Desktop\Bewerbung, Anna Freud.odt
2017-06-14 20:47 - 2017-06-14 20:47 - 00055362 _____ C:\Users\Mohamed\Desktop\Anmeldebogen Anna Freud.pdf
2017-06-14 20:47 - 2017-06-14 20:47 - 00050086 _____ C:\Users\Mohamed\Desktop\Bestaetigungsformular_FOS-BOS.pdf
2017-06-09 16:59 - 2017-06-25 14:46 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-09 16:58 - 2017-06-15 17:09 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-06-09 16:58 - 2017-06-09 16:58 - 00003298 _____ C:\Windows\System32\Tasks\{51050104-5FDE-4DF0-8731-03E92F73666A}
2017-06-09 16:40 - 2017-06-15 16:27 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-06-09 16:39 - 2017-06-09 16:39 - 00000000 ____D C:\NVIDIA
2017-06-05 19:36 - 2017-06-05 19:36 - 00001610 _____ C:\Users\Public\Desktop\TunnelBear.lnk
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\TunnelBear
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\Users\Mohamed\AppData\Local\IsolatedStorage
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear
2017-05-31 16:37 - 2017-05-31 16:37 - 00003134 _____ C:\Windows\System32\Tasks\ExclusiveTool
2017-05-31 16:37 - 2017-05-31 16:37 - 00000000 ____D C:\ProgramData\DSDCS
2017-05-31 16:37 - 2017-05-31 16:37 - 00000000 ____D C:\ProgramData\Caphyon
2017-05-31 16:36 - 2017-05-31 17:17 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\InputMapper
2017-05-31 16:36 - 2017-05-31 16:36 - 00002019 _____ C:\Users\Public\Desktop\InputMapper.lnk
2017-05-31 16:36 - 2017-05-31 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InputMapper
2017-05-31 16:36 - 2017-05-31 16:36 - 00000000 ____D C:\Program Files (x86)\DSDCS
2017-05-31 16:34 - 2017-05-31 16:36 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\DSDCS
2017-05-29 18:12 - 2017-05-29 18:12 - 00000000 ____D C:\Users\Mohamed\AppData\Local\TslGame
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-06-25 14:46 - 2013-06-25 23:32 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Skype
2017-06-25 14:45 - 2013-11-24 01:33 - 00000000 ____D C:\ProgramData\Kodak
2017-06-25 14:43 - 2017-05-24 10:13 - 00000176 _____ C:\Users\Mohamed\BullseyeCoverageError.txt
2017-06-25 14:43 - 2013-10-06 23:06 - 00000000 ____D C:\Users\Mohamed\AppData\Local\LogMeIn Hamachi
2017-06-25 14:29 - 2013-08-29 13:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-25 14:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-25 03:27 - 2016-11-19 20:20 - 00000000 ____D C:\Users\Mohamed\AppData\LocalLow\Mozilla
2017-06-25 03:23 - 2014-06-12 13:06 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Battle.net
2017-06-25 02:49 - 2017-04-14 13:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-25 02:27 - 2016-11-18 15:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-06-25 01:12 - 2013-06-29 01:16 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-25 00:51 - 2013-06-22 21:31 - 00000000 ____D C:\Program Files (x86)\Steam
2017-06-25 00:33 - 2015-01-16 18:16 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-06-24 21:55 - 2015-04-21 16:52 - 00308200 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-24 21:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-06-21 05:57 - 2013-06-24 22:20 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Ubisoft Game Launcher
2017-06-21 05:04 - 2016-04-15 17:07 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\discord
2017-06-21 04:36 - 2013-06-23 02:14 - 00000000 ____D C:\Users\Mohamed\Documents\my games
2017-06-20 20:36 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-06-18 22:27 - 2013-11-22 17:08 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-18 19:10 - 2011-04-12 09:43 - 00700130 _____ C:\Windows\system32\perfh007.dat
2017-06-18 19:10 - 2011-04-12 09:43 - 00149768 _____ C:\Windows\system32\perfc007.dat
2017-06-18 19:10 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-18 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-17 04:24 - 2015-09-13 01:20 - 00000000 ____D C:\Users\Mohamed\Documents\The Witcher 3
2017-06-17 03:37 - 2013-07-01 17:49 - 00007601 _____ C:\Users\Mohamed\AppData\Local\Resmon.ResmonCfg
2017-06-17 03:37 - 2013-06-22 11:41 - 00000000 ____D C:\Users\Mohamed
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-06-17 00:55 - 2015-05-17 00:11 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-16 21:08 - 2016-12-31 14:34 - 00004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 21:08 - 2016-11-19 05:27 - 00004510 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-06-16 21:08 - 2013-06-29 01:16 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 21:08 - 2013-06-29 01:16 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 21:08 - 2013-06-29 01:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-15 20:29 - 2015-09-06 22:03 - 00000000 ____D C:\Users\Mohamed\AppData\Local\ElevatedDiagnostics
2017-06-15 16:27 - 2015-02-28 22:41 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-06-15 16:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2017-06-15 16:15 - 2017-03-19 18:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-15 16:15 - 2015-12-03 14:48 - 00000000 ____D C:\Users\Mohamed\AppData\Local\AMD
2017-06-15 16:15 - 2015-07-15 01:56 - 00000000 ____D C:\Program Files\AMD
2017-06-15 16:15 - 2013-06-25 23:32 - 00000000 ____D C:\ProgramData\Skype
2017-06-15 16:14 - 2013-07-05 20:09 - 00000000 ____D C:\Users\Mohamed\AppData\Local\CrashDumps
2017-06-14 20:46 - 2015-09-29 16:38 - 00908956 _____ C:\Windows\ntbtlog.txt
2017-06-14 20:38 - 2015-03-28 15:20 - 00017673 _____ C:\Users\Mohamed\Documents\Lebenslauf.odt
2017-06-09 17:00 - 2013-06-24 20:27 - 00000000 ____D C:\ProgramData\Origin
2017-06-09 17:00 - 2013-06-22 11:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-06-09 16:59 - 2016-10-25 16:33 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-06-09 16:56 - 2013-08-01 02:45 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2017-06-09 16:56 - 2013-07-16 15:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2017-06-09 16:55 - 2014-06-07 23:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2017-06-09 16:36 - 2013-06-24 20:28 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Origin
2017-06-09 01:43 - 2016-02-22 23:09 - 00000000 ____D C:\Users\Mohamed\BrawlhallaReplays
2017-06-07 03:43 - 2016-08-25 12:59 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2017-06-04 23:18 - 2013-03-12 21:39 - 01596050 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-06-03 03:08 - 2013-06-23 00:07 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\vlc
2017-05-31 16:38 - 2015-04-21 16:54 - 00065720 _____ C:\Users\Mohamed\AppData\Local\GDIPFONTCACHEV1.DAT
2017-05-31 13:59 - 2017-05-11 16:29 - 00003916 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1494512950
2017-05-29 18:37 - 2013-06-24 04:36 - 00000000 ____D C:\Windows\Minidump
2017-05-29 18:12 - 2016-03-20 03:54 - 00000000 ____D C:\Users\Mohamed\AppData\Local\UnrealEngine
2017-05-27 22:35 - 2017-05-24 15:48 - 00028552 _____ C:\Users\Mohamed\Documents\Szenenanalyse, Die Räuber, Akt 5 Szene 1.odt
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-07-09 21:41 - 2013-06-18 16:21 - 0920472 _____ (Mozilla Corporation) C:\Program Files (x86)\firefox.exe
2008-10-09 15:11 - 2008-10-09 15:11 - 0000029 _____ () C:\Program Files (x86)\firefox.exe.cfg
2016-05-26 12:52 - 2016-05-11 15:00 - 1773360 _____ () C:\Users\Mohamed\AppData\Roaming\ApplicationLauncher.exe
2016-11-19 05:30 - 2016-11-19 05:30 - 26674504 _____ () C:\Users\Mohamed\AppData\Roaming\gameboxsetup.exe
2016-05-26 12:52 - 2016-05-11 15:00 - 131419728 _____ (Telefónica Germany GmbH & Co. OHG) C:\Users\Mohamed\AppData\Roaming\o2_SuiteInstaller.exe
2016-06-28 22:57 - 2016-06-28 22:57 - 0000000 ____H () C:\Users\Mohamed\AppData\Local\BIT57A4.tmp
2013-07-26 22:28 - 2016-03-04 17:25 - 0001269 _____ () C:\Users\Mohamed\AppData\Local\CleanupUninstall.txt
2014-03-30 16:51 - 2016-06-21 22:03 - 0004608 _____ () C:\Users\Mohamed\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-22 21:01 - 2013-10-22 21:01 - 0000869 _____ () C:\Users\Mohamed\AppData\Local\recently-used.xbel
2013-07-01 17:49 - 2017-06-17 03:37 - 0007601 _____ () C:\Users\Mohamed\AppData\Local\Resmon.ResmonCfg
2016-06-28 22:56 - 2016-06-28 22:56 - 0000000 _____ () C:\Users\Mohamed\AppData\Local\{5574D584-D25E-498E-8F51-B70F645CC5B0}
2015-01-01 08:18 - 2015-01-01 08:18 - 0000000 _____ () C:\Users\Mohamed\AppData\Local\{6F82FDA0-E8BA-42F8-9CDE-1332BEBBB790}
2015-04-01 15:15 - 2015-04-01 15:15 - 0000057 _____ () C:\ProgramData\Ament.ini
Einige Dateien in TEMP:
====================
2017-05-24 10:13 - 2017-05-24 10:13 - 0008720 _____ () C:\Users\Mohamed\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-06-22 20:36
==================== Ende von FRST.txt ============================
Das hier ist ein Scan-Log von vor einiger Zeit, wo auch mehrere Bedrohungen gefunden wurden : Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 14.04.2017 Suchlaufzeit: 13:25 Protokolldatei: mgamlog 2.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.04.14.03 Rootkit-Datenbank: v2017.04.02.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Mohamed Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298436 Abgelaufene Zeit: 12 Min., 1 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 5 PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32LDR, In Quarantäne, [47b40de35355b4821ba91298b84af60a], PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, In Quarantäne, [a754df11c0e888ae00942f999c66e719], PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, In Quarantäne, [7c7fec04d2d6dc5ad3c23f89788a31cf], PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\SPPDCOM, In Quarantäne, [c932f3fd2187de58e505061371920af6], PUP.Optional.Spigot, HKU\S-1-5-21-4196016333-305226474-955279301-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D91EA519-2900-4F68-A9AB-AC8B10AD62E6}, In Quarantäne, [ac4fe40cfcacf54132e786222dd55fa1], Registrierungswerte: 10 PUP.Optional.FilesFrog, HKLM\SOFTWARE\CLASSES\SDP\SHELL\OPEN\COMMAND, "C:\Users\Mohamed\AppData\Local\FilesFrog Update Checker\update_checker.exe" /protocol In Quarantäne, [1edd4ea273352016c6d5e2f253af7e82], %5 PUP.Optional.FilesFrog, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SDP\SHELL\OPEN\COMMAND, "C:\Users\Mohamed\AppData\Local\FilesFrog Update Checker\update_checker.exe" /protocol In Quarantäne, [dd1e7d73abfd1d19cccf7c589a6851af], %5 PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130599229072788323, In Quarantäne, [4fac21cf198f96a0586bc3e7b34f9e62] PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130599229072788323, In Quarantäne, [9c5f836ddfc9979f0bb86149bf43a15f] PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130599229072788323, In Quarantäne, [9269ba36990f6fc7408344667092817f] PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130599229072788323, In Quarantäne, [906bde12f0b8270f08bb02a8fc067a86] PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130599229072788323, In Quarantäne, [47b40de35355b4821ba91298b84af60a] PUP.Optional.FilesFrog, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SDP\SHELL\OPEN\COMMAND, "C:\Users\Mohamed\AppData\Local\FilesFrog Update Checker\update_checker.exe" /protocol In Quarantäne, [23d82fc1dbcd56e0009b4a8a2cd613ed], %5 PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\SPPDCOM|TS, 0, In Quarantäne, [c932f3fd2187de58e505061371920af6] PUP.Optional.Spigot, HKU\S-1-5-21-4196016333-305226474-955279301-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D91EA519-2900-4F68-A9AB-AC8B10AD62E6}|URL, https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=830633&p={searchTerms}, In Quarantäne, [ac4fe40cfcacf54132e786222dd55fa1] Registrierungsdaten: 1 PUP.Optional.Spigot, HKU\S-1-5-21-4196016333-305226474-955279301-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/?type=830633&fr=spigot-yhp-ie, Gut: (www.google.com), Schlecht: (https://de.search.yahoo.com/?type=830633&fr=spigot-yhp-ie),Ersetzt,[06f5db155a4e0c2a150cca3ca3606f91] Ordner: 5 Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\6e088ff47f8a1cf8941bcc58b6c47f93, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\9e2b7d6092532741f76431773a1b3a9f, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Dateien: 22 PUP.Optional.Spigot, C:\Users\Mohamed\AppData\Local\Temp\nsa58DC.tmp\SM.dll, In Quarantäne, [78830fe1495f4beb4a7766a714ef0df3], PUP.Optional.DownloadSponsor, C:\Users\Mohamed\AppData\Local\Temp\DMR\dmr_72.exe, In Quarantäne, [21da6b85b3f55bdb67697e7b3ec242be], PUP.Optional.Giga, C:\Users\Mohamed\Downloads\Samsung-USB-Smartphone-Treiber-lnstall.exe, In Quarantäne, [c93217d94c5c3cfaf1ed31bd35cdb848], PUP.Optional.DownloadSponsor, C:\Users\Mohamed\Downloads\Scribus 64 Bit - CHIP-Installer.exe, In Quarantäne, [fcff8c648b1de1550af98ceadf21f709], PUP.Optional.ASK.OL, C:\ProgramData\YTD Video Downloader\ytd_installer.exe, In Quarantäne, [a952f3fdeabef244a2e8e65fe51b649c], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\astyrcuycbziokgx.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\dmr_72.exe, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\dobjjtzcbqwhmozw.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\hwubcizwgedpurnw.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\jqlomzwkfayasmcb.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\lkiaxsuyiytaznfg.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\sclgqgkptwilbaki.dat, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\6e088ff47f8a1cf8941bcc58b6c47f93\scribus-1.4.6-windows-x64.exe, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], Adware.ChinAd, C:\Users\Mohamed\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\9e2b7d6092532741f76431773a1b3a9f\amd-catalyst-15.11.1beta-64bit-win10-win8.1-win7-nov14.exe, In Quarantäne, [ed0e5f919d0bec4a81e2d682d72a8779], PUP.Optional.StartPage24, C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\extensions\ffext_basicvideoext@startpage24.xpi, In Quarantäne, [2fcc549c555372c41ac74adc2fd3b24e], PUP.Optional.ReMarkable, C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, In Quarantäne, [4daeeb056e3a3afcde79b5ef39c95aa6], PUP.Optional.ReMarkable, C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, In Quarantäne, [7e7da64a7731a2946ee9139133cf5ca4], PUP.Optional.Spigot, C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\searchplugins\yahoo_ff.xml, In Quarantäne, [fefd2bc5297f181ebe571296d032a759], PUP.Optional.SearchProtect.AppFlsh, C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, In Quarantäne, [9c5fbf313672ff37d4b2cafeb34f12ee], PUP.Optional.SearchProtect.AppFlsh, C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, In Quarantäne, [c03b866a347441f54a3d1dab0af8af51], PUP.Optional.Spigot, C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=830633&p=");), Ersetzt,[19e2767af2b6e452d19f7c94be456c94] PUP.Optional.Spigot, C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/?type=830633&fr=spigot-), Ersetzt,[867515db3f69e254d12bc54f17ec06fa] Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Dieser Scan-Log ist von heute : Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 25.06.2017 Suchlaufzeit: 01:45 Protokolldatei: mgamlog.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.06.24.09 Rootkit-Datenbank: v2017.05.27.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Mohamed Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 302588 Abgelaufene Zeit: 11 Min., 31 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
25.06.2017, 14:47
| #2 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Systemscan mit FRST, Addition.txt :
__________________Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-06-2017 01
durchgeführt von Mohamed (25-06-2017 15:06:06)
Gestartet von C:\Users\Mohamed\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2013-06-22 09:41:27)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-4196016333-305226474-955279301-500 - Administrator - Disabled)
Gast (S-1-5-21-4196016333-305226474-955279301-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4196016333-305226474-955279301-1243 - Limited - Enabled)
Mohamed (S-1-5-21-4196016333-305226474-955279301-1000 - Administrator - Enabled) => C:\Users\Mohamed
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
3DMark05 (HKLM-x32\...\{2DF7B278-D3B6-40A4-B25C-0E7149F439EA}) (Version: 1.3.2 - Futuremark Corporation)
Adobe Flash Player 26 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.20) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.20 - Adobe Systems Incorporated)
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden
aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden
aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Ansel (Version: 382.33 - NVIDIA Corporation) Hidden
Arma 2 (HKLM-x32\...\Steam App 33900) (Version: - Bohemia Interactive)
ARMA 2 Army of The Czech Republic - Data cache removal (HKLM-x32\...\A2ACR Data cache removal) (Version: - )
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Assassin's Creed(R) III v1.05 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.05 - Ubisoft)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games)
Brothers - A Tale of Two Sons (HKLM-x32\...\Steam App 225080) (Version: - Starbreeze Studios AB)
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.03 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.0.0.15 - concept/design GmbH)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DARK SOULS III (HKLM\...\Steam App 374320) (Version: - FromSoftware, Inc.)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
DayZLauncher version 0.0.2.1 (HKLM-x32\...\{E31045B4-9DB5-9EBD-44DF-BD4E6CFD40DF}_is1) (Version: 0.0.2.1 - Maca134)
Dead by Daylight (HKLM\...\Steam App 381210) (Version: - Behaviour Digital Inc.)
Discord (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.13263.0 - Electronic Arts)
Dragon Saga (HKLM\...\Steam App 381990) (Version: - Gravity Interactive)
DSL Soforthilfe (HKLM-x32\...\DSL Soforthilfe) (Version: 1.1.0.51 - Telefónica Germany GmbH & Co. OHG)
Dual Package (HKLM-x32\...\{37365259-9D37-4FBE-9204-08B4034623B6}) (Version: 2.9 - LG Soft India Pvt Ltd)
Dungeons 2 (HKLM\...\Steam App 262280) (Version: - Realmforge Studios)
Edimax AC1750 Wi-Fi USB Adapter Driver (HKLM-x32\...\{B63CCD1C-A133-4DF8-8306-DA0387231152}) (Version: 1.00.0274 - Edimax Technology Co., Ltd.)
essentials (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
Far Cry 3 Blood Dragon (HKLM-x32\...\{A071F478-73E0-4143-AE55-4DD6BABD74F5}) (Version: 1.01 - Ubisoft)
ffdshow v1.3.4530 [2014-02-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4530.0 - )
FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Git version 2.9.2 (HKLM\...\Git_is1) (Version: 2.9.2 - The Git Development Community)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hotspot Shield 6.8.12 (HKLM-x32\...\{c67c171b-b51a-4ff1-a641-6f4a9fb11bc9}) (Version: 6.8.12.10541 - AnchorFree Inc.)
Hotspot Shield 6.8.12 (x32 Version: 6.8.12 - AnchorFree Inc.) Hidden
Hotspot Shield 6.8.12 (x32 Version: 6.8.12.10541 - AnchorFree Inc.) Hidden
HP Photosmart 5510 series - Grundlegende Software für das Gerät (HKLM\...\{8133D9DE-F412-4CFB-A359-5E3EE38A9A19}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Kodak AIO Printer (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.8.5.2 - Eastman Kodak Company)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.578 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.578 - LogMeIn, Inc.) Hidden
Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version: - Daniel Rebelo)
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MediaInfo 0.7.63 (HKLM\...\MediaInfo) (Version: 0.7.63 - MediaArea.net)
MFC RunTime files (x32 Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office PowerPoint 2003 Template Pack 1 (HKLM-x32\...\{90AB0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 53.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 de)) (Version: 53.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)
MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version: - )
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 5.0.0.16 - MSI)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\Steam App 234670) (Version: - CyberConnect 2)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - )
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.33 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)
NVIDIA Grafiktreiber 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.4.10.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.13.4 - OBS Project)
ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge 2 B13.0403.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.12.59996 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{1b4f0054-29ad-4bdf-acdc-10b177f96b52}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Python 3.5.2 (32-bit) (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)
Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SafeZone Stable 3.55.2393.607 (x32 Version: 3.55.2393.607 - Avast Software) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scribus 1.4.6 (64bit) (HKLM\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
SHIELD Streaming (Version: 7.1.0370 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
Skype™ 7.37 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.37.103 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - Team Meat)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version: - Ubisoft)
TP-LINK TL-WN721N_WN722N Treiber (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.2.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Track-o-Bot version 0.7.1 (HKLM-x32\...\Track-o-Bot_is1) (Version: 0.7.1 - spidy.ch)
Trove (HKLM-x32\...\Steam App 304050) (Version: - Trion Worlds)
TunnelBear (HKLM-x32\...\{a273b995-f102-4f04-b79f-98fcaf899c3c}) (Version: 3.0.36.7 - TunnelBear)
TunnelBear (x32 Version: 3.0.36.7 - TunnelBear) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Unity Web Player (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{7A0D09B0-6575-11E2-89D5-F04DA23A5C58}) (Version: 12.0.486 - Sony)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
White Noise 2 (HKLM\...\Steam App 503350) (Version: - Milkstone Studios)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Witch It Beta (HKLM\...\Steam App 567920) (Version: - Barrel Roll Games)
YGOPro DevPro Launcher (HKLM-x32\...\{8D09DD74-E630-4629-80DC-7FB13AE58F3F}) (Version: 2.0.12 - DevPro, LLC)
YTD Video Downloader 5.1.1 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.1.1 - GreenTree Applications SRL) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {08F4F539-0D57-425B-8D34-4C7F360A49A4} - System32\Tasks\{64DC2916-9EDA-4855-8967-AA240B8C3702} => pcalua.exe -a "C:\Users\Mohamed\AppData\Local\Temp\Temp2_TL-WN722N(DE)_1.0_110701.zip\TL-WN722N(DE) 1.0_110701\Setup.exe" <==== ACHTUNG
Task: {1E8E3BCC-57C0-438D-AAAF-4D43C6DCD731} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_131_pepper.exe [2017-06-16] (Adobe Systems Incorporated)
Task: {277C16A7-DD22-4D81-90A6-3AEBED421DCD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-18] (NVIDIA Corporation)
Task: {5450E304-7E1F-4964-90EB-BDD22362D110} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {5C25051F-FCCC-4739-A83D-FC19FA13D533} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {62810850-0EB3-42BA-A37A-C61FAF0F5D07} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-18] (NVIDIA Corporation)
Task: {62FCA853-8423-4AA9-83B7-E85B651CE43B} - System32\Tasks\{83880217-9EF2-41E4-A119-58E3D7FDD274} => pcalua.exe -a E:\Software\setupstb.exe -d E:\Software
Task: {67ECA94A-33E2-43C0-A226-67B5DCCC7D68} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-18] (NVIDIA Corporation)
Task: {68EB9CF7-87D8-45FB-99F0-BE9B9A8812C5} - System32\Tasks\{ED8B8325-4061-4B00-9723-8ACEF05E609F} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_build_100906.exe -d E:\
Task: {751D43A3-8D5C-41F5-9FAE-1497FF5AC752} - System32\Tasks\{1F686F4F-2F31-4846-8C24-177A7E9DC6A7} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d E:\
Task: {7B63DC21-6B10-4BE7-85F1-7D30EA9A7990} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-18] (NVIDIA Corporation)
Task: {7F7BE1AF-06D6-4EBC-8B11-85A74334C3D5} - System32\Tasks\{BEF6E5F0-E8C7-46FC-8A1F-F58F4FBC7AE7} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d E:\
Task: {866A881D-6798-4BAE-86CD-C7C0C4DBC8CB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-18] (NVIDIA Corporation)
Task: {8AC51527-EED7-4D9A-9E39-3571FD4BDD16} - System32\Tasks\{51050104-5FDE-4DF0-8731-03E92F73666A} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{7A2A107B-9695-423F-9462-8F17C178BD35}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {93F616CC-E632-4B8B-8B1D-100D81317E00} - System32\Tasks\{65CC6E1E-9B39-4C03-870B-E8BAFC8C82E4} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.16.0.102&LastError=404
Task: {98604DB6-FFF6-42C2-B4AE-6CEF1C9BCF99} - System32\Tasks\Logon Screen SkipUAC => C:\Program Files\Logon Screen\Logon Screen.exe [2015-02-15] (Daniel Rebelo)
Task: {9BCBDC9D-6FC3-49FC-B40F-4BE2C530A45A} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\RadeonInstaller.exe [2017-04-24] (Advanced Micro Devices, Inc.)
Task: {A0ED2B71-7EB7-4977-9DBD-394B3ACF7F1B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {A521A77E-A9C4-478D-9226-E448C7223C4E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-11] (AVAST Software)
Task: {A6BF512A-2004-4BED-B5CB-4FE03070A9B0} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-18] (NVIDIA Corporation)
Task: {ACEDF7C1-C21B-4744-8456-EA5DABAD56E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-16] (Adobe Systems Incorporated)
Task: {C26F2A52-5846-4E93-A9FA-3CD812892310} - System32\Tasks\SafeZone scheduled Autoupdate 1494512950 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {C77D5E4F-F82F-4CD9-86D1-588F05B7B02F} - System32\Tasks\{BA492AEB-8314-4035-8EEA-AD2EBD33B036} => pcalua.exe -a D:\TESO\Launcher\vcredist_x64_2010.exe -d D:\TESO\Launcher -c /q
Task: {C7F8E12E-3FBE-4561-9245-8F9960E966F3} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)
Task: {CFEE43FB-F476-4D2E-AB77-61EBFA0CB8F5} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-05-11] (AVAST Software)
Task: {D24FCCAF-2E6F-4083-81F0-D9F90E12E520} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {E696311A-42D3-4192-8630-577BF827C2CB} - System32\Tasks\{4B8CED58-ADE2-4423-91B4-DF7B422B664B} => pcalua.exe -a F:\pushinst.exe -d F:\
Task: {EB342A99-51DE-480C-9D7E-1C5EB21C256D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-18] (NVIDIA Corporation)
Task: {ECD98F2E-6B7C-46CC-BF47-E028B5C31AD5} - System32\Tasks\MSIAfterburner => D:\Löschen (kurz benutzt)\MSI Afterburner\MSIAfterburner.exe [2013-01-23] ()
Task: {F9D67598-8BF7-4BE3-BE32-283E37F413BF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-18] (NVIDIA Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-06-15 16:27 - 2017-05-18 09:33 - 01267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-02-03 22:22 - 2014-12-12 18:24 - 00044760 ____N () C:\Windows\runSW.exe
2017-02-03 15:34 - 2014-09-02 15:25 - 00096768 ____N () C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe
2017-05-24 10:13 - 2017-05-24 10:13 - 00010256 _____ () C:\Windows\TEMP\BullseyeCoverage-2-x64.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00162024 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00825960 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00275776 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2012-01-10 14:41 - 2015-03-30 13:27 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2016-01-08 19:13 - 2013-11-21 22:57 - 20585888 ____N () D:\DSL Soforthilfe\DSL_Soforthilfe.exe
2017-05-09 21:51 - 2017-05-09 11:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
2017-05-09 21:51 - 2017-05-09 11:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-06-24 16:09 - 2017-06-24 16:09 - 05780320 _____ () C:\Program Files\AVAST Software\Avast\defs\17062402\algo.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00230632 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2017-06-15 12:36 - 2017-06-15 12:36 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-05-11 16:27 - 2017-05-11 16:27 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-11 16:27 - 2017-05-11 16:27 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-11 16:26 - 2017-05-11 16:26 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-31 11:41 - 2017-05-31 11:41 - 01982976 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2017-05-24 10:13 - 2017-05-24 10:13 - 00008720 _____ () C:\Users\Mohamed\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 53018112 _____ () D:\GalaxyClient\libcef.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00507968 _____ () D:\GalaxyClient\PocoUtil.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00520768 _____ () D:\GalaxyClient\PocoXML.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00152128 _____ () D:\GalaxyClient\expat.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01589312 _____ () D:\GalaxyClient\PocoFoundation.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00425536 _____ () D:\GalaxyClient\pcre.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00104000 _____ () D:\GalaxyClient\zlib.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00330816 _____ () D:\GalaxyClient\PocoJSON.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01076800 _____ () D:\GalaxyClient\PocoNet.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01854528 _____ () D:\GalaxyClient\PocoData.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00393280 _____ () D:\GalaxyClient\PocoDataSQLite.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00680000 _____ () D:\GalaxyClient\sqlite.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00307776 _____ () D:\GalaxyClient\PocoNetSSL.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00157760 _____ () D:\GalaxyClient\PocoCrypto.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00272448 _____ () D:\GalaxyClient\PocoZip.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 01589312 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoFoundation.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00425536 _____ () C:\ProgramData\GOG.com\Galaxy\redists\pcre.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00104000 _____ () C:\ProgramData\GOG.com\Galaxy\redists\zlib.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00330816 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoJSON.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00507968 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoUtil.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00520768 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoXML.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00152128 _____ () C:\ProgramData\GOG.com\Galaxy\redists\expat.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 01738752 _____ () D:\GalaxyClient\libglesv2.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 00078848 _____ () D:\GalaxyClient\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-16 22:02 - 00000553 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Dual Package.lnk => C:\Windows\pss\Dual Package.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK-Konfigurationstool.lnk => C:\Windows\pss\TP-LINK-Konfigurationstool.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: AVMWlanClient => C:\Program Files (x86)\avmwlanstick\wlangui.exe
MSCONFIG\startupreg: EKIJ5000StatusMonitor => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe
MSCONFIG\startupreg: EKStatusMonitor => D:\Allgemein\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Mohamed\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Mohamed\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{14E89820-05AB-4646-9BEF-F423882F5F72}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D2534A4F-D7D8-4164-B2A0-434C608639A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{00FA231F-0D26-4193-AE66-755320798DFD}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{6EEBAEEA-87EA-41FC-95F1-64452C9BD44F}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{7D5A6F0C-3A76-4CEF-A414-94D6DE2778BB}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{CEB1BB4C-1F61-4789-BB17-8BEA0A8D2CBE}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C58F61A8-CB33-481C-9EF7-17D2346F7163}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{63FA77B8-6EB4-481C-8B82-2905DB4033BA}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{89AB8BCF-643D-444F-8C3F-4A3B8797D0CF}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{CAA4E2C7-8C6D-4ECF-B1D4-12A54084F3E3}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{A1AADADA-DD12-4044-BE77-B4167B7BCF53}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\FC3BDUpdater.exe
FirewallRules: [{9681CC9D-632A-40FB-82FD-8F1C905E7348}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\FC3BDUpdater.exe
FirewallRules: [TCP Query User{392A3A9D-9F32-4FEA-A722-CDFEB62AC130}D:\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{02098C95-1DFA-452C-9DFF-4E60F512B448}D:\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{BDE53A5F-E5DF-4551-88D6-17F2A1EA5BE9}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x86.exe
FirewallRules: [{7D75DC8F-D904-4D06-ACB4-0AE3F9CE5E38}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\launcher.exe
FirewallRules: [{09C8428D-F28F-46F0-8CD9-AE0178450252}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x64.exe
FirewallRules: [{EC71A93A-0137-42F5-A07A-75CC2D46B70E}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\launcher.exe
FirewallRules: [{6B065373-CB79-42CB-AB3A-085B63048D83}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x86.exe
FirewallRules: [{AB8EC3F7-F63C-4D3D-A02C-D7CB9EEC84BC}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x64.exe
FirewallRules: [TCP Query User{D4DE81B1-CBE6-42D8-84F6-88EF23758BE7}D:\allgemein\farcry 3\bin\farcry3_d3d11.exe] => (Allow) D:\allgemein\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{0D3A457A-71DC-47D1-A708-CB3DABBC5BC3}D:\allgemein\farcry 3\bin\farcry3_d3d11.exe] => (Allow) D:\allgemein\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{97B86E3A-2DB1-46B4-B6D7-E0AAA31141F0}D:\allgemein\farcry 3\bin\farcry3.exe] => (Allow) D:\allgemein\farcry 3\bin\farcry3.exe
FirewallRules: [UDP Query User{6339F337-738E-43CB-ABD7-7817660A8699}D:\allgemein\farcry 3\bin\farcry3.exe] => (Allow) D:\allgemein\farcry 3\bin\farcry3.exe
FirewallRules: [TCP Query User{F24AE86E-4DDC-460E-837A-06D7B8E907AA}C:\farcry 3\bin\farcry3_d3d11.exe] => (Allow) C:\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{3FE0FCCA-E2C0-4BE1-9F25-0E8635020643}C:\farcry 3\bin\farcry3_d3d11.exe] => (Allow) C:\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [{49AE94F4-49D7-49DD-91B6-00CA33D2B6F4}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{05BEAC80-1417-4A07-B3D8-BCD5E09A9EA2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A7003A58-BA10-44F2-85A5-A7BB518E0F78}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5DA00EFF-99CA-437F-9403-937586AFB539}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{08F1AA39-6E75-4734-90D2-2C4B89FDB232}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{67125388-3AE5-4200-8ACB-9034CAC51B32}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{6B8ABF81-4AB5-4A8D-B8CE-128BD111B62C}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{08876D6C-AFCF-4AA3-9F71-E1D30BF26117}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{A97373E5-760C-4DA8-BE69-FF93CFC7BC8A}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{542EEB8D-210D-4FD6-8F5D-83427C11997A}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{F2B7D5BF-C575-4C7B-A7AC-81D0D447E9F2}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{AFE8A4A2-FBDF-48EF-B4F4-F1625781D5D8}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [TCP Query User{C51F5BDA-1E87-4025-A1E0-1E96A953642E}C:\users\mohamed\appdata\local\temp\gw2.exe] => (Allow) C:\users\mohamed\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{610D1766-3197-4884-A3D5-CFEB865D7C41}C:\users\mohamed\appdata\local\temp\gw2.exe] => (Allow) C:\users\mohamed\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{FF5D798C-038D-434B-87AE-CF038F4E32B6}D:\guild wars 2\gw2.exe] => (Allow) D:\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{EBE18DEF-6A75-4D16-9ECC-0CB65A6DC2BC}D:\guild wars 2\gw2.exe] => (Allow) D:\guild wars 2\gw2.exe
FirewallRules: [TCP Query User{7B7296E0-7E5C-4473-B772-A9C06933D2C1}D:\allgemein\javax\bin\javaw.exe] => (Allow) D:\allgemein\javax\bin\javaw.exe
FirewallRules: [UDP Query User{60C47383-B53A-4BB7-9FF0-8716AFF48C18}D:\allgemein\javax\bin\javaw.exe] => (Allow) D:\allgemein\javax\bin\javaw.exe
FirewallRules: [TCP Query User{3A1DCFDC-CC8B-4587-A80B-CF5F2E560FD5}D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe] => (Block) D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe
FirewallRules: [UDP Query User{4F372E08-83B5-4D97-ADBD-B4FE116EAC25}D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe] => (Block) D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe
FirewallRules: [{A0B9CBA1-C535-4184-8B74-D6EDB4B33579}] => (Allow) D:\DN\Dragon Nest Europe\DragonNest.exe
FirewallRules: [{4C394860-26B2-45F9-A96F-47C4B9AC0FB5}] => (Allow) D:\DN\Dragon Nest Europe\DragonNest.exe
FirewallRules: [TCP Query User{9E86961E-5DBF-4A7D-B41C-C2A83E780CE1}D:\tera\tera-launcher.exe] => (Allow) D:\tera\tera-launcher.exe
FirewallRules: [UDP Query User{46FC68E0-3223-4C58-BFEE-7B01B6FB1A59}D:\tera\tera-launcher.exe] => (Allow) D:\tera\tera-launcher.exe
FirewallRules: [{74EDB319-077A-42B5-8DC9-65A325178A4D}] => (Block) D:\tera\tera-launcher.exe
FirewallRules: [{89E67603-508A-4D3A-8B30-A5DC3B6F2530}] => (Block) D:\tera\tera-launcher.exe
FirewallRules: [{6DB74B02-FAE0-4C44-BC84-C85649896CBA}] => (Allow) D:\Steam\SteamApps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe
FirewallRules: [{68DBD4B3-E6CC-496D-8BC1-5693C4ACE04F}] => (Allow) D:\Steam\SteamApps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe
FirewallRules: [{DA15FB96-A7C7-4013-A4BC-F36BCEDF823F}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{C4910CD4-69BF-40BE-9DC0-AAE77079143A}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{799FF6B4-B7FD-4D77-A18B-7DE48C6411A1}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{8E64579D-AC36-413D-93B4-0BC386F61D5E}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{5390BF9A-A5A6-4240-982D-F3F1B6BCE755}] => (Allow) LPort=9322
FirewallRules: [{C423DCCD-C67F-4E9C-B973-0524488F085B}] => (Allow) LPort=5353
FirewallRules: [{2AC41EB3-4170-41A2-A790-018EC7562288}] => (Allow) D:\Allgemein\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{149C0AF0-BD18-42EC-8524-1E893EFC7F30}] => (Allow) D:\Allgemein\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{40CEA7C3-47D6-44E1-A7AC-B533BC02350D}] => (Allow) D:\Allgemein\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{3F0D270A-185D-4C4F-B56D-44428A456BFA}] => (Allow) D:\Allgemein\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{56C95B45-4E55-4DC8-AB9B-19624F203A3E}] => (Allow) D:\Allgemein\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{034CF2DF-90C9-48C6-9625-3C3E5C7498DC}] => (Allow) D:\Allgemein\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{622475B1-9730-444B-B4A1-7C208D365A6C}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{5D611739-C23D-455F-A4EB-2D1C84F10B43}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [TCP Query User{C6708A68-CD77-485E-A1C2-8814976F56E4}D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{43D90CFB-1D00-47A2-80A8-DB59F88CCB48}D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{F1F3A20C-56BE-4881-89F5-DBC87E2B729B}C:\users\mohamed\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{21046743-D2EE-424E-9EC6-55C374303887}C:\users\mohamed\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FA904C7D-E7F8-48C6-AB11-05809919E2FD}] => (Block) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FBC1E155-F8A4-4E5F-A725-1B08C244FE9F}] => (Block) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{44662C4A-6BD9-4361-9371-32966C40D083}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{04427FE4-56C5-44C0-8467-2E63A8051429}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{BE6768CE-B26F-4196-9BE8-BAA17177B334}] => (Allow) D:\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{259673D4-9492-4C6C-8C14-6ED0DE047397}] => (Allow) D:\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{5F0AD009-64F8-49A5-985C-45F0628AFB23}] => (Allow) D:\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{297CCD00-4824-49FC-B166-CC70F851AAF1}] => (Allow) D:\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{2CD49EC0-F687-4B12-842E-27AB72F4A879}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{C7B49A8C-367C-41F8-B4E1-0E5573E1F9DA}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{B750792D-81DF-4CF0-A8F8-222525769D42}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{3BFA1042-F688-439F-B5AF-53518A8AD4A5}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{35FFFD43-8546-4E38-AAB6-84CA99573251}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8B29C8DE-C4AA-4F76-9020-CC7F4CCA0D2C}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{F56D8CCB-C811-43DC-AF6E-CD271270675C}D:\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [UDP Query User{CAFF5FC2-C4C8-4DFE-ABB7-62E73C44C90F}D:\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{31E121A2-DCD9-40A4-9EB4-BA5AC272C3D4}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{82DCFD35-9B66-4216-9E0D-267461648BCE}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{60B0433E-D58D-40E6-B573-8E95DAEBFAF3}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{DC06553A-EE4B-46F3-A763-5467CC8A6F1D}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{96C07166-F40B-448D-A398-643C9654A07D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{853C4D4A-837A-424C-B12D-C000CB00CA42}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{9846552B-95BA-44BB-8B72-3425D3D5A44A}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{2134A42B-F1FF-40D5-9A2A-ADB5E58C7C8F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{BC7D87F2-F0BA-411A-AE37-74D44A9FB01A}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{786498C1-EEFF-4EFF-97D4-AD8FE749FD73}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{15510B00-29F8-46B0-BD00-99CAE8449494}] => (Allow) D:\Allgemein\Elsword_DE\data\x2.exe
FirewallRules: [{4EE39720-0B36-45C0-89F4-E88D86193892}] => (Allow) D:\Allgemein\Elsword_DE\data\x2.exe
FirewallRules: [TCP Query User{2702F734-840D-47A9-BF2B-3E2CE1E76F1C}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{06C38309-71C2-4848-AAA7-93422C8A1AC2}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{5D14496F-491D-40AD-BD05-684ABDE4EF1A}] => (Allow) LPort=5353
FirewallRules: [{6CBD92CB-8EE9-47E4-8DC0-11F50DB34ABA}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{7728C59C-7DE2-4DF6-9DC4-5829BCF368B0}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{4E527F03-A9DE-4EDA-A5B0-C59B749F9B37}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{DE8E3DC5-597E-455A-A30B-33E1BFD79EE4}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{C17C0CBD-C6CA-450E-A194-3E97D5825A89}] => (Allow) D:\Allgemein\Battle.net\Battle.net.exe
FirewallRules: [{AD249B68-CA61-4EF3-AFD6-80B0AE4513D4}] => (Allow) D:\Allgemein\Battle.net\Battle.net.exe
FirewallRules: [{25DED8F9-B600-4B45-A90C-EA9EEBA24319}] => (Allow) D:\Allgemein\Hearthstone\Hearthstone.exe
FirewallRules: [{6289C092-1F22-456F-BFBD-5C2A9F59FF26}] => (Allow) D:\Allgemein\Hearthstone\Hearthstone.exe
FirewallRules: [{75249E1F-9FDE-4032-9B64-A2D277B01955}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{F93CDE3A-3634-4E4E-91F5-1FC0235CE189}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{EE9A539B-719F-4831-AE6E-7E9DF35467D8}] => (Allow) D:\Allgemein\AuraKingdom-DE\game.bin
FirewallRules: [{60D8BE5C-123F-48DE-9603-B89C4D08D8DD}] => (Allow) D:\Allgemein\AuraKingdom-DE\game.bin
FirewallRules: [{46E4992A-4679-4F0A-A4EA-52D7F3B17164}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{61441FA2-341B-46BA-830A-1D5D52A4AEB8}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{8D5E1899-6744-411F-96D9-898EA16B1249}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{BEF40735-369F-4736-A9F7-FBB105F94679}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{91BFE349-CD43-4350-8FC8-D42561AB820B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{C1BE8A97-BDD5-409C-86BE-22547D9BDA2A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{ED0020AE-A220-4BF1-9980-FA2349A98F63}] => (Allow) D:\Origin\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{1DBC4E07-90DF-4688-B86F-17506EC23EF8}] => (Allow) D:\Origin\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{357D7CDC-EC49-4BE4-A59C-E238D77FA2D7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{A3C9F0CE-9B50-4A12-A323-5A882EDB4D40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{80D0026A-4814-40EE-9487-5198CFF9CBFD}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{9146E51D-3CCB-43F4-8E66-4F46ADA1CE40}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{E08F9258-BAE1-4E96-A535-0DBD5377B98A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{660378CD-CD07-4402-9340-72D9D360B311}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [TCP Query User{5EEE2BD3-51BA-4D1D-B01F-905EDD89C93F}C:\program files (x86)\java\jre7\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre7\bin\jp2launcher.exe
FirewallRules: [UDP Query User{ABA87706-B088-4CCD-A3EE-797DE203F751}C:\program files (x86)\java\jre7\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre7\bin\jp2launcher.exe
FirewallRules: [{67D88D64-2C46-4BE5-BE0A-F206308E01BF}] => (Allow) LPort=9322
FirewallRules: [{3F23B0D7-BFD4-416C-BBEB-8AC210D8C049}] => (Allow) D:\Allgemein\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{34A83DD1-B7AF-4FEA-91B9-B148B82074CD}] => (Allow) D:\Allgemein\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{146CFAC2-9D76-4E3C-B67D-753F81FB00C1}] => (Allow) D:\Allgemein\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{5DD8350B-8045-4533-ACB8-493FA60409AF}] => (Allow) D:\Allgemein\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{8ED1038B-936E-492A-9677-28B1665E2BC1}] => (Allow) D:\Allgemein\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{F61E6947-C6F2-43C6-AFFA-83C7DF9CF1C6}] => (Allow) D:\Allgemein\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{11A25C17-9E45-46D4-AFDC-E2D72BEFD88D}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{2BD9897A-4056-471F-8FB8-D88533210228}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{0FC11F0D-D758-4A27-AD49-246D936FE4C3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D33A6F43-CF27-465F-B477-8B9585749B9D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D2A92F8E-B83F-40CB-9677-20C23DF17DD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{DAAC5112-020D-4F2A-B6D9-5D600830A0FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{9AAA51CA-C309-49EA-BF11-638231F92A4B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{297CBC56-BF34-4829-8982-35FAF6421784}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1C644953-0527-434B-AC1E-BF91CEF8927D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{A463C364-7736-45F5-953E-333BC4691058}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{CB83E428-EF48-49C2-88F5-F22B1871B318}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{E34AACFD-BEFB-49E3-8CEE-F0F7F1CA0B3D}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{B45C85BC-33C2-402B-93DB-B48B7E393060}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{387AC41F-1C3B-4654-A548-FCDCA63BA937}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{C524AD2B-E7BC-493D-B777-F35AF2EBE05C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{F5EE0AAD-2D9F-4A72-BDE4-CB3FB6B68F35}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{97F00A42-293A-4518-8B70-589DA9DE8A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{04440909-4C10-403F-9606-E6AB69A6833B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{EBBDBFF1-CB49-42F9-8A8D-1365CF447F9F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{02173123-5D37-4377-A4A8-63174CF6D3B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{6C6F7FFE-02A9-4850-85B0-CCAC9602A8A6}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{0A2589A2-2B2B-4981-BEE3-7E429230E7D3}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{26C025B9-87A7-4AC6-9739-9D880A7F7EA5}] => (Allow) LPort=8743
FirewallRules: [{7AA382E1-B371-4222-9C3A-F20650536851}] => (Allow) LPort=8643
FirewallRules: [{8D3996EB-A472-4BC4-82CE-98DBCF934B55}] => (Allow) LPort=7676
FirewallRules: [{4C22F1D2-BCB9-49C3-92AD-8D1BBC56932E}] => (Allow) LPort=7679
FirewallRules: [{F94792A6-091B-48B7-BD9A-1E77F0319757}] => (Allow) LPort=24234
FirewallRules: [{5FC83E06-826E-4CBC-8CAD-D99B93E30696}] => (Allow) LPort=7900
FirewallRules: [{0F2477E0-0BC6-4C20-9929-6D1C7D04DAC1}] => (Allow) LPort=1900
FirewallRules: [{E55EE4AF-63A1-45AF-BC83-D65FEC026897}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{44EEE051-A68C-4B40-8336-2D73D091C014}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{8479C193-DC20-45B4-86C9-67F880CDDF06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{824465EC-C808-4FBA-8BEB-16F4BE0AA19D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{56ECD8F2-A35B-449B-9E63-F99863F14645}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{798ED3CC-0730-4FFF-A59F-32A6366029D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{526B2922-98A7-48A8-8BD9-91E389E3EAD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{27B6CC81-CDF5-4131-B8B0-F218F262AE0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DD800AA1-B6C3-406E-A605-71BCC0D2CED5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{B1E37B8C-AA0E-45ED-B127-C4AC89DD9AB8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{CFF2CD11-6D82-41B0-A16C-A659FC3BF511}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{0C1B30D6-67EF-498B-B871-80DEE82D4A56}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{01E5EFB6-8FC4-4360-8C68-4BD2D8EBADC4}] => (Allow) LPort=49219
FirewallRules: [{AB73BF05-FB52-4842-A525-DD5F35A16AF5}] => (Allow) LPort=5000
FirewallRules: [{67581ECD-EED7-4F1F-9209-37D2A3C94B78}] => (Allow) LPort=53739
FirewallRules: [{86F61D6D-1937-429A-8340-9AB4A828B8FA}] => (Allow) LPort=5000
FirewallRules: [{25B64713-0590-4719-9A06-37929E1540FB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5B3FBF0A-E089-4D6E-9B89-BB2C362DF1F9}] => (Allow) LPort=2869
FirewallRules: [{FF241E83-4A88-438D-8B92-B4C246136F64}] => (Allow) LPort=1900
FirewallRules: [{05EF66B2-A32D-4DC1-B890-97128C7EDAD5}] => (Allow) D:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{0FE86278-DE20-4FB3-8610-F43571F21B6E}] => (Allow) D:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{899B6872-580D-417D-94A9-0C72860017F3}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{57F4E6B0-A15B-41D4-B501-90D7D9254EE4}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{7F8DA614-BBF1-4B84-AC32-FCC19BFB37F2}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{D2537A23-1842-4E14-88DD-3DBC8A7222E1}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{077EB122-1109-4510-B21F-72C3B0628BF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{44061F1E-5FA7-407C-9134-C8DE866999C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{D13611C7-9C52-4F9F-B57F-02E092DF8201}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{94E6A112-158E-4639-86F5-57C2195D0BB2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{C7F631DE-688A-4538-85C3-B05E6F91073E}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{FD44812F-B8E0-489F-AEBE-5BA7F71CA58D}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{B32DF81D-8954-4289-9EC9-5CEE651A261B}] => (Allow) D:\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{83DDF71E-4A32-4A54-9C30-610D49E2A94D}] => (Allow) D:\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{05A340B1-1049-4A9B-92FF-9FE8EBBF6DF9}] => (Allow) D:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{3619C78F-515E-4040-8349-61FA42CD39A0}] => (Allow) D:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{5E078B30-52EB-4AB2-AA12-0CB37568FE3C}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{76E314BE-5BDE-4874-9A67-7B6A16C07FF8}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{EF93FDB3-B842-4167-BC5F-DE1EAC6ECC36}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{80116459-5606-4F8C-BB38-C10A3C26DA43}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{CD4B360F-A310-4C3F-8C08-01E23B2B2D92}] => (Allow) D:\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{A63C2439-D121-4822-B7D5-B49FE71EA9A0}] => (Allow) D:\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{9141B643-B0D2-476F-BF7C-B71C75F91386}] => (Allow) D:\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{C0C7DC4D-D01A-4279-BC4D-AFD81DCC5B3B}] => (Allow) D:\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{1CC2AC3C-6732-4A7A-8DD7-EE927D687C1F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{4D27F5AF-BC82-4148-84AD-B03E5C509816}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{053BB618-4EF7-448A-9613-B329CBEB8613}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{B9FEE203-9C86-4D3B-A5B5-8499C3E9F1AF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{C580E3FB-3747-4B35-9EDD-C5C812163D52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{0D1F314D-2462-4131-A4DD-96147B0B2387}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{24F9D103-91E1-49A3-A031-677DD93B4D8D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D13AF963-1ECA-4C45-8523-CDE033B2F653}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{7FD808C1-AC9B-4275-8AB4-EB96505C6537}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{28AC30B0-60F1-4875-9457-56D42241AABA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{417E9223-EB92-4C4D-9E71-6A0B9B5D82D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{31A71735-727C-4084-BDF9-F456AC136499}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{A459FD55-2C40-4750-89EA-09CE1D72B73D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{C1E413DB-FDC5-4C39-A61A-998FB269D04E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{FB225F62-19BB-48ED-B76B-995221750E06}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C385E199-0266-445A-B04D-588F9DFB0B75}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F886A3E-C7ED-4D65-AA36-0AEFE6E809C5}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{9CE1DCB4-C782-46A3-83F9-BEF92CCA514F}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{9C0295C5-8929-4A47-AFC8-AADF8CD020C0}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{63D2A9E9-82FE-4581-9E4B-637230B53C83}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{E97A8ABB-990E-46E4-B861-FAA02572EDC6}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{1245B978-518F-491F-BE77-BFCDE184DFBB}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{D969EF07-7B2A-4BF8-A652-AE5D6DAEAFC9}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [TCP Query User{FC4B1429-2AD3-4419-B3A6-07B99CE653F6}C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe] => (Allow) C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe
FirewallRules: [UDP Query User{C8693982-A241-4A00-8911-FEBB7F025C5A}C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe] => (Allow) C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe
FirewallRules: [{3FE626FD-59F9-4137-B6DA-A568E85533BE}] => (Allow) D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{A0A75F46-8A60-4BC7-B836-75F42257866B}] => (Allow) D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [TCP Query User{609D75AB-E8F7-4FFD-9D2D-A2FA6248E216}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{8DA6079C-1FFC-479F-A294-2840BA00FDA4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{0C668CC6-A51E-401E-AFA5-0239D79A8F39}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{4A619D01-033C-4EE2-8553-AC1ACF5D9074}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{54E7C9FC-E4DA-4BCA-9B3F-B920280A1D9A}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B3B5EACB-2213-41F5-BCFD-0D705D58FF18}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{38AA5F6F-7328-4E94-AD70-5715383B1226}] => (Allow) D:\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{28129E5B-D49C-43B3-92ED-3EE3CCDDBFD4}] => (Allow) D:\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{4F058B6B-4FC3-4B3E-B955-889FD237B208}] => (Allow) D:\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{FFA23A29-D2A7-4A6D-96DF-F208C7D78A21}] => (Allow) D:\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{14A41BA9-7925-4E37-9B4B-E16C38A733A0}] => (Allow) D:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{EB43C20F-C290-4A53-B6E5-56866AD6BDCD}] => (Allow) D:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{1E567600-125A-4C90-BB50-AFEAF431702F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{32E08088-0D70-47AE-B499-8C555D2EF789}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5F2A0B16-A351-4FF2-B27F-11FD5E55BCAA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C8BB1955-F729-481F-8B21-0C28B3884EDB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragomon Hunter\Game.bin
FirewallRules: [{50DFCE17-7049-44C5-A612-0A901F0114B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragomon Hunter\Game.bin
FirewallRules: [{0E696A1F-1E84-4BDD-9147-62C9EA3D18A0}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{4A61B7DE-06D7-410B-94DF-AF9C72373C22}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [TCP Query User{C3A0F856-8C6D-408A-AC22-07D257584F90}D:\dayzlauncher\dayzlauncher.exe] => (Allow) D:\dayzlauncher\dayzlauncher.exe
FirewallRules: [UDP Query User{8166B365-B5A6-4E71-A2E5-664BDCB8C2D3}D:\dayzlauncher\dayzlauncher.exe] => (Allow) D:\dayzlauncher\dayzlauncher.exe
FirewallRules: [{4FC3A357-2913-4FB4-86F9-3ACAD2162046}] => (Allow) E:\o2CD.exe
FirewallRules: [{B984E09C-9AC6-4332-BA55-20455293DDD0}] => (Allow) E:\o2CD.exe
FirewallRules: [{DAC49487-46D3-45F0-B044-5763F2A4E677}] => (Allow) D:\DSL Soforthilfe\DSL_Soforthilfe.exe
FirewallRules: [{80DB2987-C4B8-480A-B824-0152EB61268B}] => (Allow) D:\DSL Soforthilfe\DSL_Soforthilfe.exe
FirewallRules: [{EC3E0C14-5485-459E-A7C4-7CC2B4460BF8}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{9D6A65BA-C786-44AD-A3D0-02F5FFD78169}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{A49AE117-AD2D-452C-B90B-955E4E2BBD42}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{B8D4B812-A67C-437A-9E88-9834BC6756B9}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{46B110B4-D7CC-4110-BE10-012EF5093E86}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3B5641FC-B519-404F-BAC2-DA192C8DB459}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{31150AC5-9FA8-4772-82E8-52DB7A2C2C35}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\Expansion\beta\arma2oa.exe
FirewallRules: [{EB33771D-87C7-41D7-BC98-F9E3B51E4F61}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\Expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{D92B0D48-43F5-4F44-AB9A-2CD453496444}D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [UDP Query User{42F7243C-D8A9-43F3-85D6-BD2A4A05E430}D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [{2FEBE422-454A-4FFD-90F0-F7317AEA0B23}] => (Allow) D:\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{916DBA2B-CE89-4E3E-ACC2-DB114B4A123A}] => (Allow) D:\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [TCP Query User{E64672B9-C2FC-4DA8-A65D-12A521E620E0}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [UDP Query User{4769253C-A797-47D1-B7EE-B715A7F806E1}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{2C3519DD-AB03-46AE-B959-D84527D457F0}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{EA216286-5D33-4274-A81A-ABAF2A554A23}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{274171DD-1FA8-474E-9661-30F8E29A6B5F}] => (Allow) D:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{D2CEC6BD-137E-4D08-9B8C-604DFBCD5C0D}] => (Allow) D:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{077F033D-C663-43E0-B076-ACF938B3B084}D:\steam\steamapps\common\torchlight ii\torchlight2.exe] => (Allow) D:\steam\steamapps\common\torchlight ii\torchlight2.exe
FirewallRules: [UDP Query User{4FF192D6-3761-4FE7-8915-4235E755E5B7}D:\steam\steamapps\common\torchlight ii\torchlight2.exe] => (Allow) D:\steam\steamapps\common\torchlight ii\torchlight2.exe
FirewallRules: [{2B7C5C7A-076F-4DEA-B5EB-9D1DE89AEBD2}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{85DF3FAC-8AEC-4F37-A250-1952172440B2}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{680BB065-5956-4114-9942-1500DFA90827}] => (Allow) D:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{76E20BD4-6CC7-40BE-93F3-A754531F3155}] => (Allow) D:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{DC5306BA-0CEC-4D4F-BDE8-E6EDC5D8673D}] => (Allow) D:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{962E5FAE-BFFE-4176-AE4C-841B7A93DAE1}] => (Allow) D:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{7567DE72-14FA-4A1E-B472-7A86A8E7956D}] => (Allow) D:\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{6C3C8A92-CE64-4264-959F-EC46A3B49A83}] => (Allow) D:\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{57FAE1F6-7241-474C-98FE-AFE9010531D5}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{541F80A2-B2E6-49C4-ADD0-F263CF5CBAA8}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{F48820A0-0B66-4FF8-BEC5-68558CFFB19B}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D8AB512C-9372-4702-BBC1-19D870554FF6}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [TCP Query User{166CE3D9-101D-4376-B530-2D1A2FBD247C}C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{ECB77E68-27C1-4836-B504-37BF00F8F486}C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe
FirewallRules: [TCP Query User{BA27B9DA-F19B-4A3E-BFD7-8CA07AF772FA}C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{5CBB1B27-F485-4F85-91B9-E3355BF9500F}C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe
FirewallRules: [{1F181E9F-22BA-4B82-99AE-CA096CE0A310}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2C28A93C-6196-420A-9F84-127F3A5B8009}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E58FEA91-30F9-4CAC-910A-7DF6BB3D9992}] => (Allow) D:\Steam\SteamApps\common\White Noise 2\WhiteNoise2.exe
FirewallRules: [{005B8E00-F9CB-4647-B0AF-70F26787751B}] => (Allow) D:\Steam\SteamApps\common\White Noise 2\WhiteNoise2.exe
FirewallRules: [{57DF9370-5BFC-4131-A054-F67125D41085}] => (Allow) D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{D390F52D-CCF6-4415-AC30-78FE64269389}] => (Allow) D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [TCP Query User{DBF937D4-98CF-4B66-8140-56AAE08C5993}C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [UDP Query User{7F179864-9344-4911-88B4-14E591264063}C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [TCP Query User{EE249733-95D1-40C2-A826-E0F18B0F7ED8}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{72FA960E-E1FC-4A3D-B5CC-DC723DD117DC}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe
FirewallRules: [{D0997843-9F79-4E13-9BCF-EF3B88469751}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned_BE.exe
FirewallRules: [{5EBAF0A0-344E-44EA-B1A1-E55A0F4C3280}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned_BE.exe
FirewallRules: [{68232D5B-4347-43C1-AC20-FE60864EC591}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe
FirewallRules: [{3E67F60C-077B-4CBF-90D8-D8E2DB515FEC}] => (Allow) LPort=1542
FirewallRules: [{F2D3615E-F3F8-4669-8890-95A6C997EFF0}] => (Allow) LPort=1542
FirewallRules: [{B7A09BB3-9A78-4E39-B098-D31A4CCF67C5}] => (Allow) LPort=53
FirewallRules: [{5BC9178C-4BE8-46DA-8FF4-0D3104EA3E88}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe
FirewallRules: [{A337F363-0D5E-42BD-902D-34EDE20A65D8}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{64A7BEE9-713C-4FB8-B56E-086FF1373244}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{14EF932D-8FCC-4A8C-A8E9-F894A548052A}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{C15E89C1-7345-4639-B9A5-CCC64B449F16}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{39A72F0D-72C8-495F-9085-097B4D6D2982}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{2B30669B-E4CF-4272-BA4E-971762C34825}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{D068C814-49BC-40A0-B5A3-75073F94BD06}] => (Allow) D:\Steam\SteamApps\common\Dragon Saga\WPLauncher.exe
FirewallRules: [{D73FA1FE-5374-4644-BFD9-7736EFFE0073}] => (Allow) D:\Steam\SteamApps\common\Dragon Saga\WPLauncher.exe
FirewallRules: [TCP Query User{88C2E07A-59D5-439B-AF68-E42E65FB68D6}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe
FirewallRules: [UDP Query User{8CD84100-4993-40A4-BAC4-0F3D8D19D8DD}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe
FirewallRules: [TCP Query User{BDF15FED-24F0-43F1-BD4B-1041B82D6E2F}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe
FirewallRules: [UDP Query User{8D9DADF0-CFD0-478C-9B1E-687E01E1340C}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe
FirewallRules: [TCP Query User{787CAFA4-0009-4303-B9D0-766C032DB076}C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe
FirewallRules: [UDP Query User{7A09C843-104D-4838-9CD4-4ACD30438F49}C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe
FirewallRules: [TCP Query User{91B1CB6E-6BC9-4CBB-982E-7AD12B79D5C8}C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe
FirewallRules: [UDP Query User{39B63EC8-A628-4A11-A0C7-05BA32C82EF6}C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe
FirewallRules: [TCP Query User{AF96564C-9208-46E5-8C94-53BF4391E22A}D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{17D5038D-3091-474F-B524-5F199D518AC2}D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [{D1435742-D200-4539-923D-C831B1F116EF}] => (Allow) D:\Steam\SteamApps\common\Skyforge\Skyforge MyCom\Bin32\Skyforge.exe
FirewallRules: [{EB9E5747-9FF1-4689-9B7A-67B0945B4288}] => (Allow) D:\Steam\SteamApps\common\Skyforge\Skyforge MyCom\Bin32\Skyforge.exe
FirewallRules: [TCP Query User{8F12567C-58F2-48B8-8984-B1DEB09BA68E}D:\overwatch\overwatch.exe] => (Block) D:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{84139C36-8D0A-4DC0-BA71-90DF47317D1F}D:\overwatch\overwatch.exe] => (Block) D:\overwatch\overwatch.exe
FirewallRules: [{D4C30F04-D415-4F19-AF30-01E5133D2B99}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{92CF75FB-9748-4DC0-BAB8-A28A2C5B534E}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe
FirewallRules: [{0E3F7502-F8B0-4820-A8DA-1355F13B78E7}] => (Allow) D:\Steam\SteamApps\common\Witch It Beta\WitchIt.exe
FirewallRules: [{F3B182DE-8570-4134-85E9-0338569DE233}] => (Allow) D:\Steam\SteamApps\common\Witch It Beta\WitchIt.exe
FirewallRules: [{EE145F09-D794-425E-91C3-BCB48BCDECA2}] => (Allow) D:\Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [{00E6F8DD-40BB-41E9-BEE3-07D2138895EA}] => (Allow) D:\Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [TCP Query User{4DE305CB-23B6-4F2C-A432-E70CC0355CE5}D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [UDP Query User{7C3018BB-693C-4E08-AACB-D5017B8199E9}D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [TCP Query User{237B3309-A57C-4B29-9236-ABA8F5A34078}D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{D37F0305-4D75-4DDF-9EB2-794293AC40C0}D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [{3568886B-D530-4C48-A31E-FAD45489174B}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe
FirewallRules: [TCP Query User{0EAE6842-CF34-41E9-BBDD-0542C3247A06}D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
FirewallRules: [UDP Query User{95FB5177-97C6-43D2-923E-DFD0E688A7E5}D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
FirewallRules: [{2130B78E-B5CA-48D5-8274-228B435DD2F1}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{4A2794E9-6B4C-4F07-BE57-13F93BB13C79}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{8D10D3C8-581B-4183-8ACA-C2E88C8F5B70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{E311D9BE-B539-4126-9F80-B14BC5F13A36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{BE63E24F-1468-47A8-935F-1D2AE7F8F2B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9CA80F51-77A6-4214-B203-850D7490DDAA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{70F9463C-2A7B-403E-9C29-32D1AAB61809}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7B105046-ED1A-4BF4-A5DA-51AB865D2E7F}] => (Allow) D:\Steam\SteamApps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{06A70726-D769-4072-ABFA-F916E97660C1}] => (Allow) D:\Steam\SteamApps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{939BCDD7-D004-4B6C-BF5F-24764CCC5DE9}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{909A8FA0-81A8-4846-9D27-C556B9894DA9}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{50ECEAB5-C3A7-461F-BCA0-7FEF7A211C11}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{60A64AA7-A846-4D78-B508-E3F77291B850}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{75F071EF-9CA2-4CCF-A669-D9EAE802358B}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{EE2EE12E-5B47-4C7B-BF6C-80DE6A3DB568}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{3C44227E-F1DC-475C-951C-5B291F4F5748}] => (Allow) D:\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{E4905137-CBBC-469A-9760-567CBE7A8F55}] => (Allow) D:\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{C0166151-2DF0-4A1E-8B80-D114D4656DEA}] => (Allow) D:\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{F176BA23-CA12-41FD-B5CF-CD151E7037B4}] => (Allow) LPort=49249
FirewallRules: [{72819D58-924B-44CF-A81D-1B67BBEE354E}] => (Allow) LPort=49315
==================== Wiederherstellungspunkte =========================
24-06-2017 21:44:10 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (06/25/2017 02:30:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (06/25/2017 02:29:31 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/25/2017 02:29:31 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/25/2017 02:29:31 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/24/2017 09:56:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (06/24/2017 09:55:36 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/24/2017 09:55:36 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/24/2017 09:55:36 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/24/2017 09:52:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (06/24/2017 09:51:13 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Systemfehler:
=============
Error: (06/25/2017 02:33:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (06/25/2017 02:32:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (06/25/2017 02:30:28 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UsbCharger
Error: (06/25/2017 02:30:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "RealtekWlanU" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (06/25/2017 02:30:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (06/25/2017 02:30:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.
Error: (06/24/2017 10:11:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (06/24/2017 10:00:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070002 fehlgeschlagen: Sicherheitsupdate für Windows (KB4012212)
Error: (06/24/2017 09:58:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (06/24/2017 09:57:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
CodeIntegrity:
===================================
Date: 2016-09-20 16:30:24.191
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2016-09-20 16:30:24.189
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:48:47.473
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:48:47.454
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:40:13.561
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:40:13.537
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:03:32.997
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:03:32.942
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-12 22:33:59.564
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-12 22:30:00.380
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1230 v3 @ 3.30GHz
Prozentuale Nutzung des RAM: 66%
Installierter physikalischer RAM: 8137.03 MB
Verfügbarer physikalischer RAM: 2757.55 MB
Summe virtueller Speicher: 16272.25 MB
Verfügbarer virtueller Speicher: 10156.72 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:97.56 GB) (Free:4.85 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Volume) (Fixed) (Total:833.85 GB) (Free:50.27 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F100E8E2)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Not Active) - (Size=100 MB) - (Type=42)
Partition 3: (Active) - (Size=97.6 GB) - (Type=42)
Partition 4: (Not Active) - (Size=833.9 GB) - (Type=42)
==================== Ende von Addition.txt ============================
|
|
30.06.2017, 22:53
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Bitte Avast deinstallieren. Am besten mit Revo, siehe weiter unten. Bei der Gelegengeit hauen wir auch unnötigen und veralteten Krempel mir runter.
__________________Avast können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel. Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!
__________________ |
|
01.07.2017, 01:48
| #4 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Danke erstmal für die Antwort Avast und die anderen Programme sind alle deinstalliert. Gibt es denn eine empfehlenswerte, kostenlose Antivirensoftware? |
|
01.07.2017, 10:42
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.07.2017, 14:26
| #6 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Das Programm hat nichts gefunden. Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2017.07.01.03
rootkit: v2017.05.27.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
Mohamed :: KANADE-PC [administrator]
01.07.2017 14:41:04
mbar-log-2017-07-01 (14-41-04).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 300692
Time elapsed: 16 minute(s), 57 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
01.07.2017, 14:51
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
02.07.2017, 16:20
| #8 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v6.047 - Bericht erstellt am 02/07/2017 um 17:07:48
# Aktualisiert am 19/05/2017 von Malwarebytes
# Datenbank : 2017-06-29.3 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (X64)
# Benutzername : Mohamed - KANADE-PC
# Gestartet von : D:\Löschen (kurz benutzt)\AdwCleaner_6.047.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\Users\Mohamed\AppData\Local\MalwareProtectionLive
[-] Ordner gelöscht: C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
[-] Ordner gelöscht: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ieakfmpjhljbpbfpldjkddkjmmgjmgon
***** [ Dateien ] *****
[-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
***** [ Browser ] *****
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: booedmolknjekdopkepjjeckmjkdpfgl
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: dbkchnicaiglcjpgbmpfmoafckkomdcm
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: flpcjncodpafbgdpnkljologafpionhb
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default] [homepage] Gelöscht: hxxp://search.conduit.com/?SSPV=&ctid=CT2269050&SearchSource=13&UP=SP468FD9D9-5E50-4721-919E-306D1FED60B2
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [3542 Bytes] - [02/07/2017 17:07:48]
C:\AdwCleaner\AdwCleaner[R0].txt - [6067 Bytes] - [12/11/2014 16:15:29]
C:\AdwCleaner\AdwCleaner[S0].txt - [5885 Bytes] - [12/11/2014 16:17:52]
C:\AdwCleaner\AdwCleaner[S1].txt - [3971 Bytes] - [02/07/2017 16:57:37]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [3834 Bytes] ##########
JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 7 Ultimate x64
Ran by Mohamed (Administrator) on 02.07.2017 at 17:14:25,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 52
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\obciceimmggglbmelaidpjlmodcebijb (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gkojfkhlekighikafcpjkiklfbnlmeio (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\obciceimmggglbmelaidpjlmodcebijb (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage-journal (File)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage (File)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_obciceimmggglbmelaidpjlmodcebijb_0.localstorage-journal (File)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_obciceimmggglbmelaidpjlmodcebijb_0.localstorage (File)
Successfully deleted: C:\Users\Mohamed\AppData\Roaming\getrighttogo (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\extensions\trash (Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2IKRVSR9 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RTQOG92 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UR8CX41 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6LQNND3A (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BD4P0X3J (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BSUELLGV (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CX32WCNC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E494XKT8 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDUDWBAE (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIMKZJXC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GVDWT2X5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KSQGCR5P (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XLV2GEXH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1NDIJQM (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y76FMAGT (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mohamed\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YMMLNI40 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2IKRVSR9 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RTQOG92 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UR8CX41 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6LQNND3A (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BD4P0X3J (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BSUELLGV (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CX32WCNC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E494XKT8 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDUDWBAE (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIMKZJXC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GVDWT2X5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KSQGCR5P (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XLV2GEXH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1NDIJQM (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y76FMAGT (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YMMLNI40 (Temporary Internet Files Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.07.2017 at 17:18:26,16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
02.07.2017, 16:55
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Okay, beide Tools bitte zwecks Kontrolle wiederholen.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
03.07.2017, 02:58
| #10 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v6.047 - Bericht erstellt am 03/07/2017 um 03:48:59
# Aktualisiert am 19/05/2017 von Malwarebytes
# Datenbank : 2017-06-29.3 [Lokal]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (X64)
# Benutzername : Mohamed - KANADE-PC
# Gestartet von : D:\Löschen (kurz benutzt)\AdwCleaner_6.047.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: anisearch.de
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: powerpoint-2013.softonic.de
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: dts.search-results.com
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: crawler.com
[-] [C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default] [homepage] Gelöscht: hxxp://search.conduit.com/?SSPV=&ctid=CT2269050&SearchSource=13&UP=SP468FD9D9-5E50-4721-919E-306D1FED60B2
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [3945 Bytes] - [02/07/2017 17:07:48]
C:\AdwCleaner\AdwCleaner[C2].txt - [1761 Bytes] - [03/07/2017 03:48:59]
C:\AdwCleaner\AdwCleaner[R0].txt - [6067 Bytes] - [12/11/2014 16:15:29]
C:\AdwCleaner\AdwCleaner[S0].txt - [5885 Bytes] - [12/11/2014 16:17:52]
C:\AdwCleaner\AdwCleaner[S1].txt - [3971 Bytes] - [02/07/2017 16:57:37]
C:\AdwCleaner\AdwCleaner[S2].txt - [2503 Bytes] - [03/07/2017 03:43:53]
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [2126 Bytes] ##########
JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 7 Ultimate x64
Ran by Mohamed (Administrator) on 03.07.2017 at 3:39:32,49
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 1
Successfully deleted: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio (Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.07.2017 at 3:41:37,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
03.07.2017, 08:21
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
03.07.2017, 12:43
| #12 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Hier einmal die addition.txt FRST Additions Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-07-2017
durchgeführt von Mohamed (03-07-2017 13:37:55)
Gestartet von C:\Users\Mohamed\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2013-06-22 09:41:27)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-4196016333-305226474-955279301-500 - Administrator - Disabled)
Gast (S-1-5-21-4196016333-305226474-955279301-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4196016333-305226474-955279301-1243 - Limited - Enabled)
Mohamed (S-1-5-21-4196016333-305226474-955279301-1000 - Administrator - Enabled) => C:\Users\Mohamed
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 26 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Aeria Ignite (HKLM-x32\...\{73973508-05CE-4F5B-920B-7FAF319F8FC6}) (Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)
aioprnt (HKLM\...\{0645A454-AD44-4F0D-99CF-6B762735AD1F}) (Version: 5.3.1.0 - Eastman Kodak Company) Hidden
aioscnnr (HKLM-x32\...\{376348C2-E372-48BC-A138-E896757BD86A}) (Version: 5.8.10.0 - Your Company Name) Hidden
aioscnnr (HKLM-x32\...\{EF53BFAB-4C10-40DB-A82D-9B07111715C6}) (Version: 7.6.13.10 - Your Company Name) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.33 - NVIDIA Corporation) Hidden
Arma 2 (HKLM-x32\...\Steam App 33900) (Version: - Bohemia Interactive)
ARMA 2 Army of The Czech Republic - Data cache removal (HKLM-x32\...\A2ACR Data cache removal) (Version: - )
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Assassin's Creed(R) III v1.05 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.05 - Ubisoft)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Black Desert Online (HKLM\...\Steam App 582660) (Version: - Pearl Abyss)
Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games)
Brothers - A Tale of Two Sons (HKLM-x32\...\Steam App 225080) (Version: - Starbreeze Studios AB)
Catalyst Control Center Next Localization IT (HKLM\...\{50F75FA1-3CA8-B32F-1E61-1C6C0612B365}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{90D6CCC2-F199-7CF1-C752-723AF7EBF9BC}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.0.0.15 - concept/design GmbH)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DARK SOULS III (HKLM\...\Steam App 374320) (Version: - FromSoftware, Inc.)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
DayZLauncher version 0.0.2.1 (HKLM-x32\...\{E31045B4-9DB5-9EBD-44DF-BD4E6CFD40DF}_is1) (Version: 0.0.2.1 - Maca134)
Dead by Daylight (HKLM\...\Steam App 381210) (Version: - Behaviour Digital Inc.)
Discord (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Dragon Saga (HKLM\...\Steam App 381990) (Version: - Gravity Interactive)
DSL Soforthilfe (HKLM-x32\...\DSL Soforthilfe) (Version: 1.1.0.51 - Telefónica Germany GmbH & Co. OHG)
Dual Package (HKLM-x32\...\{37365259-9D37-4FBE-9204-08B4034623B6}) (Version: 2.9 - LG Soft India Pvt Ltd)
Dungeons 2 (HKLM\...\Steam App 262280) (Version: - Realmforge Studios)
Edimax AC1750 Wi-Fi USB Adapter Driver (HKLM-x32\...\{B63CCD1C-A133-4DF8-8306-DA0387231152}) (Version: 1.00.0274 - Edimax Technology Co., Ltd.)
essentials (HKLM-x32\...\{BE94C681-68E2-4561-8ABC-8D2E799168B4}) (Version: 7.8.0.0 - Eastman Kodak Company) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
Far Cry 3 Blood Dragon (HKLM-x32\...\{A071F478-73E0-4143-AE55-4DD6BABD74F5}) (Version: 1.01 - Ubisoft)
ffdshow v1.3.4530 [2014-02-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4530.0 - )
FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Git version 2.9.2 (HKLM\...\Git_is1) (Version: 2.9.2 - The Git Development Community)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hotspot Shield 6.8.12 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925B1A76C50}) (Version: 6.8.12.10541 - AnchorFree Inc.) Hidden
Hotspot Shield 6.8.12 (HKLM-x32\...\{c67c171b-b51a-4ff1-a641-6f4a9fb11bc9}) (Version: 6.8.12.10541 - AnchorFree Inc.)
Hotspot Shield 6.8.12 (HKLM-x32\...\HotspotShield) (Version: 6.8.12 - AnchorFree Inc.) Hidden
HP Photosmart 5510 series - Grundlegende Software für das Gerät (HKLM\...\{8133D9DE-F412-4CFB-A359-5E3EE38A9A19}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
Kodak AIO Printer (HKLM\...\{27EF8E7F-88D1-4ec5-ADE2-7E447FDF114E}) (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.9.1.1 - Eastman Kodak Company)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
LogMeIn Hamachi (HKLM-x32\...\{E59194A0-A215-4C44-8B92-40780387EBE0}) (Version: 2.2.0.578 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.578 - LogMeIn, Inc.)
Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version: - Daniel Rebelo)
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MediaInfo 0.7.63 (HKLM\...\MediaInfo) (Version: 0.7.63 - MediaArea.net)
MFC RunTime files (HKLM-x32\...\{70C592EC-AE9B-4734-928B-676E824FB41E}) (Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Minecraft1.8 (HKLM-x32\...\Minecraft1.8) (Version: - )
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 54.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 54.0 (x86 de)) (Version: 54.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.0.6368 - Mozilla)
MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version: - )
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 5.0.0.16 - MSI)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\Steam App 234670) (Version: - CyberConnect 2)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - )
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.33 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)
NVIDIA Grafiktreiber 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.10.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.13.4 - OBS Project)
ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.12.59996 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{1b4f0054-29ad-4bdf-acdc-10b177f96b52}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
PreReq (HKLM-x32\...\{DA5BDB2A-12F0-4343-8351-21AAEB293990}) (Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Python 3.5.2 (32-bit) (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)
Python 3.5.2 Core Interpreter (32-bit) (HKLM-x32\...\{EB0611B2-7F10-4D97-BCF2-DCAAB1199498}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Development Libraries (32-bit) (HKLM-x32\...\{5DB2183B-62D3-407F-BBC1-EAD2F36283FA}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Documentation (32-bit) (HKLM-x32\...\{1FBA5182-78DD-4940-9F06-96E5042B7061}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Executables (32-bit) (HKLM-x32\...\{33B10015-A9B1-4210-B50A-26C6443979B0}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 pip Bootstrap (32-bit) (HKLM-x32\...\{9ADF9987-3327-48C6-91B3-B10900366491}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Standard Library (32-bit) (HKLM-x32\...\{FCBB04F4-D2CF-4F55-BE92-B3898696B318}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Tcl/Tk Support (32-bit) (HKLM-x32\...\{C1153533-FDC4-4922-892D-B71810F69566}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Test Suite (32-bit) (HKLM-x32\...\{9D50A6D7-410A-4469-87B7-35FA84CBD479}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Utility Scripts (32-bit) (HKLM-x32\...\{E6DEBF43-7ACF-4E88-9BBF-9B5945683281}) (Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scribus 1.4.6 (64bit) (HKLM\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0370 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
Skype™ 7.37 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.37.103 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - Team Meat)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version: - Ubisoft)
TP-LINK TL-WN721N_WN722N Treiber (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.2.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Track-o-Bot version 0.7.1 (HKLM-x32\...\Track-o-Bot_is1) (Version: 0.7.1 - spidy.ch)
Trove (HKLM-x32\...\Steam App 304050) (Version: - Trion Worlds)
TunnelBear (HKLM-x32\...\{384B89BF-FDE7-4BEB-B5E5-4EA6690B4993}) (Version: 3.0.36.7 - TunnelBear) Hidden
TunnelBear (HKLM-x32\...\{a273b995-f102-4f04-b79f-98fcaf899c3c}) (Version: 3.0.36.7 - TunnelBear)
UE4 Prerequisites (x64) (HKLM\...\{457BE011-43FF-44A7-9FA7-B3BE181E2076}) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
Unity Web Player (HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{7A0D09B0-6575-11E2-89D5-F04DA23A5C58}) (Version: 12.0.486 - Sony)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
White Noise 2 (HKLM\...\Steam App 503350) (Version: - Milkstone Studios)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Witch It Beta (HKLM\...\Steam App 567920) (Version: - Barrel Roll Games)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Keine Datei
ContextMenuHandlers01: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers04: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-05-18] (NVIDIA Corporation)
ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {08F4F539-0D57-425B-8D34-4C7F360A49A4} - System32\Tasks\{64DC2916-9EDA-4855-8967-AA240B8C3702} => pcalua.exe -a "C:\Users\Mohamed\AppData\Local\Temp\Temp2_TL-WN722N(DE)_1.0_110701.zip\TL-WN722N(DE) 1.0_110701\Setup.exe" <==== ACHTUNG
Task: {1E8E3BCC-57C0-438D-AAAF-4D43C6DCD731} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_131_pepper.exe [2017-06-16] (Adobe Systems Incorporated)
Task: {277C16A7-DD22-4D81-90A6-3AEBED421DCD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-18] (NVIDIA Corporation)
Task: {5450E304-7E1F-4964-90EB-BDD22362D110} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {5D77E24F-832A-4522-9207-2D248F5E05D2} - System32\Tasks\MSIAfterburner => D:\Löschen (kurz benutzt)\MSI Afterburner\MSIAfterburner.exe [2013-01-23] ()
Task: {62810850-0EB3-42BA-A37A-C61FAF0F5D07} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-18] (NVIDIA Corporation)
Task: {62FCA853-8423-4AA9-83B7-E85B651CE43B} - System32\Tasks\{83880217-9EF2-41E4-A119-58E3D7FDD274} => pcalua.exe -a E:\Software\setupstb.exe -d E:\Software
Task: {67ECA94A-33E2-43C0-A226-67B5DCCC7D68} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-18] (NVIDIA Corporation)
Task: {68EB9CF7-87D8-45FB-99F0-BE9B9A8812C5} - System32\Tasks\{ED8B8325-4061-4B00-9723-8ACEF05E609F} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_build_100906.exe -d E:\
Task: {751D43A3-8D5C-41F5-9FAE-1497FF5AC752} - System32\Tasks\{1F686F4F-2F31-4846-8C24-177A7E9DC6A7} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d E:\
Task: {7B63DC21-6B10-4BE7-85F1-7D30EA9A7990} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-18] (NVIDIA Corporation)
Task: {7F7BE1AF-06D6-4EBC-8B11-85A74334C3D5} - System32\Tasks\{BEF6E5F0-E8C7-46FC-8A1F-F58F4FBC7AE7} => pcalua.exe -a E:\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d E:\
Task: {866A881D-6798-4BAE-86CD-C7C0C4DBC8CB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-18] (NVIDIA Corporation)
Task: {8AC51527-EED7-4D9A-9E39-3571FD4BDD16} - System32\Tasks\{51050104-5FDE-4DF0-8731-03E92F73666A} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{7A2A107B-9695-423F-9462-8F17C178BD35}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {93F616CC-E632-4B8B-8B1D-100D81317E00} - System32\Tasks\{65CC6E1E-9B39-4C03-870B-E8BAFC8C82E4} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.16.0.102&LastError=404
Task: {98604DB6-FFF6-42C2-B4AE-6CEF1C9BCF99} - System32\Tasks\Logon Screen SkipUAC => C:\Program Files\Logon Screen\Logon Screen.exe [2015-02-15] (Daniel Rebelo)
Task: {9BCBDC9D-6FC3-49FC-B40F-4BE2C530A45A} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\RadeonInstaller.exe [2017-04-24] (Advanced Micro Devices, Inc.)
Task: {A6BF512A-2004-4BED-B5CB-4FE03070A9B0} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-18] (NVIDIA Corporation)
Task: {ACEDF7C1-C21B-4744-8456-EA5DABAD56E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-16] (Adobe Systems Incorporated)
Task: {C77D5E4F-F82F-4CD9-86D1-588F05B7B02F} - System32\Tasks\{BA492AEB-8314-4035-8EEA-AD2EBD33B036} => pcalua.exe -a D:\TESO\Launcher\vcredist_x64_2010.exe -d D:\TESO\Launcher -c /q
Task: {C7F8E12E-3FBE-4561-9245-8F9960E966F3} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)
Task: {D24FCCAF-2E6F-4083-81F0-D9F90E12E520} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {E696311A-42D3-4192-8630-577BF827C2CB} - System32\Tasks\{4B8CED58-ADE2-4423-91B4-DF7B422B664B} => pcalua.exe -a F:\pushinst.exe -d F:\
Task: {EB342A99-51DE-480C-9D7E-1C5EB21C256D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-18] (NVIDIA Corporation)
Task: {F9D67598-8BF7-4BE3-BE32-283E37F413BF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-18] (NVIDIA Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft\Minecraft Debugger.lnk -> C:\Users\Mohamed\AppData\Roaming\.minecraft\minecraft launcher\Debug.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-06-15 16:27 - 2017-05-18 09:33 - 01267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-02-03 22:22 - 2014-12-12 18:24 - 00044760 ____N () C:\Windows\runSW.exe
2017-02-03 15:34 - 2014-09-02 15:25 - 00096768 ____N () C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe
2017-05-24 10:13 - 2017-05-24 10:13 - 00010256 _____ () C:\Windows\TEMP\BullseyeCoverage-2-x64.dll
2013-01-23 08:12 - 2013-01-23 08:12 - 00425016 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\MSIAfterburner.exe
2012-01-10 14:41 - 2015-03-30 13:27 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2016-01-08 19:13 - 2013-11-21 22:57 - 20585888 ____N () D:\DSL Soforthilfe\DSL_Soforthilfe.exe
2017-06-27 22:00 - 2017-06-23 05:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-06-27 22:00 - 2017-06-23 05:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2017-06-15 12:36 - 2017-06-15 12:36 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-01-16 18:01 - 2013-01-16 18:01 - 00069632 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTMUI.dll
2013-01-16 18:00 - 2013-01-16 18:00 - 00061440 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTFC.dll
2013-01-16 18:01 - 2013-01-16 18:01 - 00229376 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTCore.dll
2013-01-16 18:00 - 2013-01-16 18:00 - 00143360 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTUI.dll
2013-01-16 18:01 - 2013-01-16 18:01 - 00348160 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTHAL.dll
2011-04-30 21:04 - 2011-04-30 21:04 - 00013312 _____ () D:\Löschen (kurz benutzt)\MSI Afterburner\RTTSH.dll
2017-05-31 11:41 - 2017-05-31 11:41 - 01982976 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-05-24 10:13 - 2017-05-24 10:13 - 00008720 _____ () C:\Users\Mohamed\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 53018112 _____ () D:\GalaxyClient\libcef.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00507968 _____ () D:\GalaxyClient\PocoUtil.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00520768 _____ () D:\GalaxyClient\PocoXML.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00152128 _____ () D:\GalaxyClient\expat.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01589312 _____ () D:\GalaxyClient\PocoFoundation.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00425536 _____ () D:\GalaxyClient\pcre.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00104000 _____ () D:\GalaxyClient\zlib.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00330816 _____ () D:\GalaxyClient\PocoJSON.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01076800 _____ () D:\GalaxyClient\PocoNet.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 01854528 _____ () D:\GalaxyClient\PocoData.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00393280 _____ () D:\GalaxyClient\PocoDataSQLite.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00680000 _____ () D:\GalaxyClient\sqlite.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00307776 _____ () D:\GalaxyClient\PocoNetSSL.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00157760 _____ () D:\GalaxyClient\PocoCrypto.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00272448 _____ () D:\GalaxyClient\PocoZip.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 01589312 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoFoundation.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00425536 _____ () C:\ProgramData\GOG.com\Galaxy\redists\pcre.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00104000 _____ () C:\ProgramData\GOG.com\Galaxy\redists\zlib.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00330816 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoJSON.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00507968 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoUtil.dll
2015-09-11 22:23 - 2017-06-21 19:01 - 00520768 _____ () C:\ProgramData\GOG.com\Galaxy\redists\PocoXML.dll
2015-09-11 22:23 - 2017-06-21 19:00 - 00152128 _____ () C:\ProgramData\GOG.com\Galaxy\redists\expat.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 01738752 _____ () D:\GalaxyClient\libglesv2.dll
2015-09-11 22:23 - 2016-09-19 14:18 - 00078848 _____ () D:\GalaxyClient\libegl.dll
2013-05-06 17:05 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-12-04 19:58 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2014-12-04 19:58 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2014-12-04 19:58 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-24 14:34 - 2017-06-29 00:42 - 02496800 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 17:18 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 17:18 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 17:18 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 17:18 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 17:18 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-06-06 14:06 - 2017-06-29 00:42 - 00878368 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-02-20 14:16 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-11-04 21:31 - 2017-06-10 00:24 - 73088800 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-06-09 16:32 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2013-05-09 18:12 - 2017-06-29 00:42 - 00385824 _____ () C:\Program Files (x86)\Steam\steam.dll
2014-12-17 15:25 - 2015-09-25 01:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-16 22:02 - 00000553 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Dual Package.lnk => C:\Windows\pss\Dual Package.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK-Konfigurationstool.lnk => C:\Windows\pss\TP-LINK-Konfigurationstool.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: AVMWlanClient => C:\Program Files (x86)\avmwlanstick\wlangui.exe
MSCONFIG\startupreg: EKIJ5000StatusMonitor => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe
MSCONFIG\startupreg: EKStatusMonitor => D:\Allgemein\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Mohamed\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Mohamed\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{14E89820-05AB-4646-9BEF-F423882F5F72}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D2534A4F-D7D8-4164-B2A0-434C608639A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{00FA231F-0D26-4193-AE66-755320798DFD}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{6EEBAEEA-87EA-41FC-95F1-64452C9BD44F}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{7D5A6F0C-3A76-4CEF-A414-94D6DE2778BB}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{CEB1BB4C-1F61-4789-BB17-8BEA0A8D2CBE}] => (Allow) C:\Users\Mohamed\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C58F61A8-CB33-481C-9EF7-17D2346F7163}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{63FA77B8-6EB4-481C-8B82-2905DB4033BA}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{89AB8BCF-643D-444F-8C3F-4A3B8797D0CF}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{CAA4E2C7-8C6D-4ECF-B1D4-12A54084F3E3}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{A1AADADA-DD12-4044-BE77-B4167B7BCF53}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\FC3BDUpdater.exe
FirewallRules: [{9681CC9D-632A-40FB-82FD-8F1C905E7348}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 3 Blood Dragon\bin\FC3BDUpdater.exe
FirewallRules: [TCP Query User{392A3A9D-9F32-4FEA-A722-CDFEB62AC130}D:\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{02098C95-1DFA-452C-9DFF-4E60F512B448}D:\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{BDE53A5F-E5DF-4551-88D6-17F2A1EA5BE9}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x86.exe
FirewallRules: [{7D75DC8F-D904-4D06-ACB4-0AE3F9CE5E38}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\launcher.exe
FirewallRules: [{09C8428D-F28F-46F0-8CD9-AE0178450252}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x64.exe
FirewallRules: [{EC71A93A-0137-42F5-A07A-75CC2D46B70E}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\launcher.exe
FirewallRules: [{6B065373-CB79-42CB-AB3A-085B63048D83}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x86.exe
FirewallRules: [{AB8EC3F7-F63C-4D3D-A02C-D7CB9EEC84BC}] => (Allow) D:\Dragon's Prophet\Dragon's Prophet\dp_x64.exe
FirewallRules: [TCP Query User{F24AE86E-4DDC-460E-837A-06D7B8E907AA}C:\farcry 3\bin\farcry3_d3d11.exe] => (Allow) C:\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{3FE0FCCA-E2C0-4BE1-9F25-0E8635020643}C:\farcry 3\bin\farcry3_d3d11.exe] => (Allow) C:\farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [{49AE94F4-49D7-49DD-91B6-00CA33D2B6F4}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{05BEAC80-1417-4A07-B3D8-BCD5E09A9EA2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A7003A58-BA10-44F2-85A5-A7BB518E0F78}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5DA00EFF-99CA-437F-9403-937586AFB539}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{08F1AA39-6E75-4734-90D2-2C4B89FDB232}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{67125388-3AE5-4200-8ACB-9034CAC51B32}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe
FirewallRules: [{6B8ABF81-4AB5-4A8D-B8CE-128BD111B62C}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{08876D6C-AFCF-4AA3-9F71-E1D30BF26117}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
FirewallRules: [{A97373E5-760C-4DA8-BE69-FF93CFC7BC8A}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{542EEB8D-210D-4FD6-8F5D-83427C11997A}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe
FirewallRules: [{F2B7D5BF-C575-4C7B-A7AC-81D0D447E9F2}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [{AFE8A4A2-FBDF-48EF-B4F4-F1625781D5D8}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe
FirewallRules: [TCP Query User{C51F5BDA-1E87-4025-A1E0-1E96A953642E}C:\users\mohamed\appdata\local\temp\gw2.exe] => (Allow) C:\users\mohamed\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{610D1766-3197-4884-A3D5-CFEB865D7C41}C:\users\mohamed\appdata\local\temp\gw2.exe] => (Allow) C:\users\mohamed\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{FF5D798C-038D-434B-87AE-CF038F4E32B6}D:\guild wars 2\gw2.exe] => (Allow) D:\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{EBE18DEF-6A75-4D16-9ECC-0CB65A6DC2BC}D:\guild wars 2\gw2.exe] => (Allow) D:\guild wars 2\gw2.exe
FirewallRules: [TCP Query User{3A1DCFDC-CC8B-4587-A80B-CF5F2E560FD5}D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe] => (Block) D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe
FirewallRules: [UDP Query User{4F372E08-83B5-4D97-ADBD-B4FE116EAC25}D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe] => (Block) D:\steam\steamapps\common\naruto shippuden ultimate ninja storm 3 full burst\ns3fb.exe
FirewallRules: [{A0B9CBA1-C535-4184-8B74-D6EDB4B33579}] => (Allow) D:\DN\Dragon Nest Europe\DragonNest.exe
FirewallRules: [{4C394860-26B2-45F9-A96F-47C4B9AC0FB5}] => (Allow) D:\DN\Dragon Nest Europe\DragonNest.exe
FirewallRules: [TCP Query User{9E86961E-5DBF-4A7D-B41C-C2A83E780CE1}D:\tera\tera-launcher.exe] => (Allow) D:\tera\tera-launcher.exe
FirewallRules: [UDP Query User{46FC68E0-3223-4C58-BFEE-7B01B6FB1A59}D:\tera\tera-launcher.exe] => (Allow) D:\tera\tera-launcher.exe
FirewallRules: [{74EDB319-077A-42B5-8DC9-65A325178A4D}] => (Block) D:\tera\tera-launcher.exe
FirewallRules: [{89E67603-508A-4D3A-8B30-A5DC3B6F2530}] => (Block) D:\tera\tera-launcher.exe
FirewallRules: [{6DB74B02-FAE0-4C44-BC84-C85649896CBA}] => (Allow) D:\Steam\SteamApps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe
FirewallRules: [{68DBD4B3-E6CC-496D-8BC1-5693C4ACE04F}] => (Allow) D:\Steam\SteamApps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe
FirewallRules: [{DA15FB96-A7C7-4013-A4BC-F36BCEDF823F}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{C4910CD4-69BF-40BE-9DC0-AAE77079143A}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{799FF6B4-B7FD-4D77-A18B-7DE48C6411A1}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{8E64579D-AC36-413D-93B4-0BC386F61D5E}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{5390BF9A-A5A6-4240-982D-F3F1B6BCE755}] => (Allow) LPort=9322
FirewallRules: [{C423DCCD-C67F-4E9C-B973-0524488F085B}] => (Allow) LPort=5353
FirewallRules: [{622475B1-9730-444B-B4A1-7C208D365A6C}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{5D611739-C23D-455F-A4EB-2D1C84F10B43}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [TCP Query User{C6708A68-CD77-485E-A1C2-8814976F56E4}D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{43D90CFB-1D00-47A2-80A8-DB59F88CCB48}D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) D:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{F1F3A20C-56BE-4881-89F5-DBC87E2B729B}C:\users\mohamed\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{21046743-D2EE-424E-9EC6-55C374303887}C:\users\mohamed\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FA904C7D-E7F8-48C6-AB11-05809919E2FD}] => (Block) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FBC1E155-F8A4-4E5F-A725-1B08C244FE9F}] => (Block) C:\users\mohamed\appdata\local\akamai\netsession_win.exe
FirewallRules: [{44662C4A-6BD9-4361-9371-32966C40D083}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{04427FE4-56C5-44C0-8467-2E63A8051429}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{BE6768CE-B26F-4196-9BE8-BAA17177B334}] => (Allow) D:\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{259673D4-9492-4C6C-8C14-6ED0DE047397}] => (Allow) D:\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{5F0AD009-64F8-49A5-985C-45F0628AFB23}] => (Allow) D:\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{297CCD00-4824-49FC-B166-CC70F851AAF1}] => (Allow) D:\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{2CD49EC0-F687-4B12-842E-27AB72F4A879}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{C7B49A8C-367C-41F8-B4E1-0E5573E1F9DA}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{B750792D-81DF-4CF0-A8F8-222525769D42}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{3BFA1042-F688-439F-B5AF-53518A8AD4A5}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{35FFFD43-8546-4E38-AAB6-84CA99573251}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8B29C8DE-C4AA-4F76-9020-CC7F4CCA0D2C}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{F56D8CCB-C811-43DC-AF6E-CD271270675C}D:\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [UDP Query User{CAFF5FC2-C4C8-4DFE-ABB7-62E73C44C90F}D:\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{31E121A2-DCD9-40A4-9EB4-BA5AC272C3D4}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{82DCFD35-9B66-4216-9E0D-267461648BCE}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{60B0433E-D58D-40E6-B573-8E95DAEBFAF3}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{DC06553A-EE4B-46F3-A763-5467CC8A6F1D}] => (Allow) D:\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{96C07166-F40B-448D-A398-643C9654A07D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{853C4D4A-837A-424C-B12D-C000CB00CA42}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{2702F734-840D-47A9-BF2B-3E2CE1E76F1C}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{06C38309-71C2-4848-AAA7-93422C8A1AC2}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{5D14496F-491D-40AD-BD05-684ABDE4EF1A}] => (Allow) LPort=5353
FirewallRules: [{6CBD92CB-8EE9-47E4-8DC0-11F50DB34ABA}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{7728C59C-7DE2-4DF6-9DC4-5829BCF368B0}] => (Allow) D:\AK\AuraKingdom\game.bin
FirewallRules: [{4E527F03-A9DE-4EDA-A5B0-C59B749F9B37}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{DE8E3DC5-597E-455A-A30B-33E1BFD79EE4}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{75249E1F-9FDE-4032-9B64-A2D277B01955}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{F93CDE3A-3634-4E4E-91F5-1FC0235CE189}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{46E4992A-4679-4F0A-A4EA-52D7F3B17164}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{61441FA2-341B-46BA-830A-1D5D52A4AEB8}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{8D5E1899-6744-411F-96D9-898EA16B1249}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{BEF40735-369F-4736-A9F7-FBB105F94679}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{91BFE349-CD43-4350-8FC8-D42561AB820B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{C1BE8A97-BDD5-409C-86BE-22547D9BDA2A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{ED0020AE-A220-4BF1-9980-FA2349A98F63}] => (Allow) D:\Origin\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{1DBC4E07-90DF-4688-B86F-17506EC23EF8}] => (Allow) D:\Origin\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{357D7CDC-EC49-4BE4-A59C-E238D77FA2D7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{A3C9F0CE-9B50-4A12-A323-5A882EDB4D40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{80D0026A-4814-40EE-9487-5198CFF9CBFD}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{9146E51D-3CCB-43F4-8E66-4F46ADA1CE40}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{E08F9258-BAE1-4E96-A535-0DBD5377B98A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{660378CD-CD07-4402-9340-72D9D360B311}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{11A25C17-9E45-46D4-AFDC-E2D72BEFD88D}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{2BD9897A-4056-471F-8FB8-D88533210228}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{0FC11F0D-D758-4A27-AD49-246D936FE4C3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D33A6F43-CF27-465F-B477-8B9585749B9D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D2A92F8E-B83F-40CB-9677-20C23DF17DD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{DAAC5112-020D-4F2A-B6D9-5D600830A0FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{9AAA51CA-C309-49EA-BF11-638231F92A4B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{297CBC56-BF34-4829-8982-35FAF6421784}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1C644953-0527-434B-AC1E-BF91CEF8927D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{A463C364-7736-45F5-953E-333BC4691058}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{CB83E428-EF48-49C2-88F5-F22B1871B318}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{E34AACFD-BEFB-49E3-8CEE-F0F7F1CA0B3D}] => (Allow) D:\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{B45C85BC-33C2-402B-93DB-B48B7E393060}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{387AC41F-1C3B-4654-A548-FCDCA63BA937}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{C524AD2B-E7BC-493D-B777-F35AF2EBE05C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{F5EE0AAD-2D9F-4A72-BDE4-CB3FB6B68F35}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{97F00A42-293A-4518-8B70-589DA9DE8A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{04440909-4C10-403F-9606-E6AB69A6833B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{EBBDBFF1-CB49-42F9-8A8D-1365CF447F9F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{02173123-5D37-4377-A4A8-63174CF6D3B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{6C6F7FFE-02A9-4850-85B0-CCAC9602A8A6}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{0A2589A2-2B2B-4981-BEE3-7E429230E7D3}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{26C025B9-87A7-4AC6-9739-9D880A7F7EA5}] => (Allow) LPort=8743
FirewallRules: [{7AA382E1-B371-4222-9C3A-F20650536851}] => (Allow) LPort=8643
FirewallRules: [{8D3996EB-A472-4BC4-82CE-98DBCF934B55}] => (Allow) LPort=7676
FirewallRules: [{4C22F1D2-BCB9-49C3-92AD-8D1BBC56932E}] => (Allow) LPort=7679
FirewallRules: [{F94792A6-091B-48B7-BD9A-1E77F0319757}] => (Allow) LPort=24234
FirewallRules: [{5FC83E06-826E-4CBC-8CAD-D99B93E30696}] => (Allow) LPort=7900
FirewallRules: [{0F2477E0-0BC6-4C20-9929-6D1C7D04DAC1}] => (Allow) LPort=1900
FirewallRules: [{E55EE4AF-63A1-45AF-BC83-D65FEC026897}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{44EEE051-A68C-4B40-8336-2D73D091C014}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{8479C193-DC20-45B4-86C9-67F880CDDF06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{824465EC-C808-4FBA-8BEB-16F4BE0AA19D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{56ECD8F2-A35B-449B-9E63-F99863F14645}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{798ED3CC-0730-4FFF-A59F-32A6366029D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{526B2922-98A7-48A8-8BD9-91E389E3EAD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{27B6CC81-CDF5-4131-B8B0-F218F262AE0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DD800AA1-B6C3-406E-A605-71BCC0D2CED5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{B1E37B8C-AA0E-45ED-B127-C4AC89DD9AB8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{CFF2CD11-6D82-41B0-A16C-A659FC3BF511}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{0C1B30D6-67EF-498B-B871-80DEE82D4A56}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{01E5EFB6-8FC4-4360-8C68-4BD2D8EBADC4}] => (Allow) LPort=49219
FirewallRules: [{AB73BF05-FB52-4842-A525-DD5F35A16AF5}] => (Allow) LPort=5000
FirewallRules: [{67581ECD-EED7-4F1F-9209-37D2A3C94B78}] => (Allow) LPort=53739
FirewallRules: [{86F61D6D-1937-429A-8340-9AB4A828B8FA}] => (Allow) LPort=5000
FirewallRules: [{25B64713-0590-4719-9A06-37929E1540FB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5B3FBF0A-E089-4D6E-9B89-BB2C362DF1F9}] => (Allow) LPort=2869
FirewallRules: [{FF241E83-4A88-438D-8B92-B4C246136F64}] => (Allow) LPort=1900
FirewallRules: [{05EF66B2-A32D-4DC1-B890-97128C7EDAD5}] => (Allow) D:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{0FE86278-DE20-4FB3-8610-F43571F21B6E}] => (Allow) D:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{899B6872-580D-417D-94A9-0C72860017F3}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{57F4E6B0-A15B-41D4-B501-90D7D9254EE4}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{7F8DA614-BBF1-4B84-AC32-FCC19BFB37F2}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{D2537A23-1842-4E14-88DD-3DBC8A7222E1}D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) D:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{077EB122-1109-4510-B21F-72C3B0628BF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{44061F1E-5FA7-407C-9134-C8DE866999C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{D13611C7-9C52-4F9F-B57F-02E092DF8201}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{94E6A112-158E-4639-86F5-57C2195D0BB2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{C7F631DE-688A-4538-85C3-B05E6F91073E}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{FD44812F-B8E0-489F-AEBE-5BA7F71CA58D}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{B32DF81D-8954-4289-9EC9-5CEE651A261B}] => (Allow) D:\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{83DDF71E-4A32-4A54-9C30-610D49E2A94D}] => (Allow) D:\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{05A340B1-1049-4A9B-92FF-9FE8EBBF6DF9}] => (Allow) D:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{3619C78F-515E-4040-8349-61FA42CD39A0}] => (Allow) D:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{5E078B30-52EB-4AB2-AA12-0CB37568FE3C}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{76E314BE-5BDE-4874-9A67-7B6A16C07FF8}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{EF93FDB3-B842-4167-BC5F-DE1EAC6ECC36}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{80116459-5606-4F8C-BB38-C10A3C26DA43}] => (Allow) D:\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{CD4B360F-A310-4C3F-8C08-01E23B2B2D92}] => (Allow) D:\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{A63C2439-D121-4822-B7D5-B49FE71EA9A0}] => (Allow) D:\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{9141B643-B0D2-476F-BF7C-B71C75F91386}] => (Allow) D:\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{C0C7DC4D-D01A-4279-BC4D-AFD81DCC5B3B}] => (Allow) D:\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{1CC2AC3C-6732-4A7A-8DD7-EE927D687C1F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{4D27F5AF-BC82-4148-84AD-B03E5C509816}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{053BB618-4EF7-448A-9613-B329CBEB8613}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{B9FEE203-9C86-4D3B-A5B5-8499C3E9F1AF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{C580E3FB-3747-4B35-9EDD-C5C812163D52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{0D1F314D-2462-4131-A4DD-96147B0B2387}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{24F9D103-91E1-49A3-A031-677DD93B4D8D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D13AF963-1ECA-4C45-8523-CDE033B2F653}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{7FD808C1-AC9B-4275-8AB4-EB96505C6537}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{28AC30B0-60F1-4875-9457-56D42241AABA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{417E9223-EB92-4C4D-9E71-6A0B9B5D82D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{31A71735-727C-4084-BDF9-F456AC136499}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{A459FD55-2C40-4750-89EA-09CE1D72B73D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{C1E413DB-FDC5-4C39-A61A-998FB269D04E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{FB225F62-19BB-48ED-B76B-995221750E06}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C385E199-0266-445A-B04D-588F9DFB0B75}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F886A3E-C7ED-4D65-AA36-0AEFE6E809C5}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{9CE1DCB4-C782-46A3-83F9-BEF92CCA514F}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{9C0295C5-8929-4A47-AFC8-AADF8CD020C0}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{63D2A9E9-82FE-4581-9E4B-637230B53C83}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{E97A8ABB-990E-46E4-B861-FAA02572EDC6}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{1245B978-518F-491F-BE77-BFCDE184DFBB}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{D969EF07-7B2A-4BF8-A652-AE5D6DAEAFC9}] => (Allow) D:\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [TCP Query User{FC4B1429-2AD3-4419-B3A6-07B99CE653F6}C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe] => (Allow) C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe
FirewallRules: [UDP Query User{C8693982-A241-4A00-8911-FEBB7F025C5A}C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe] => (Allow) C:\program files (x86)\survivors viy\viy new one english multiplayer 2.exe
FirewallRules: [{3FE626FD-59F9-4137-B6DA-A568E85533BE}] => (Allow) D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{A0A75F46-8A60-4BC7-B836-75F42257866B}] => (Allow) D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [TCP Query User{609D75AB-E8F7-4FFD-9D2D-A2FA6248E216}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{8DA6079C-1FFC-479F-A294-2840BA00FDA4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{54E7C9FC-E4DA-4BCA-9B3F-B920280A1D9A}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B3B5EACB-2213-41F5-BCFD-0D705D58FF18}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{38AA5F6F-7328-4E94-AD70-5715383B1226}] => (Allow) D:\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{28129E5B-D49C-43B3-92ED-3EE3CCDDBFD4}] => (Allow) D:\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{4F058B6B-4FC3-4B3E-B955-889FD237B208}] => (Allow) D:\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{FFA23A29-D2A7-4A6D-96DF-F208C7D78A21}] => (Allow) D:\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{14A41BA9-7925-4E37-9B4B-E16C38A733A0}] => (Allow) D:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{EB43C20F-C290-4A53-B6E5-56866AD6BDCD}] => (Allow) D:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{1E567600-125A-4C90-BB50-AFEAF431702F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{32E08088-0D70-47AE-B499-8C555D2EF789}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5F2A0B16-A351-4FF2-B27F-11FD5E55BCAA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C8BB1955-F729-481F-8B21-0C28B3884EDB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragomon Hunter\Game.bin
FirewallRules: [{50DFCE17-7049-44C5-A612-0A901F0114B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragomon Hunter\Game.bin
FirewallRules: [{0E696A1F-1E84-4BDD-9147-62C9EA3D18A0}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{4A61B7DE-06D7-410B-94DF-AF9C72373C22}] => (Allow) D:\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [TCP Query User{C3A0F856-8C6D-408A-AC22-07D257584F90}D:\dayzlauncher\dayzlauncher.exe] => (Allow) D:\dayzlauncher\dayzlauncher.exe
FirewallRules: [UDP Query User{8166B365-B5A6-4E71-A2E5-664BDCB8C2D3}D:\dayzlauncher\dayzlauncher.exe] => (Allow) D:\dayzlauncher\dayzlauncher.exe
FirewallRules: [{4FC3A357-2913-4FB4-86F9-3ACAD2162046}] => (Allow) E:\o2CD.exe
FirewallRules: [{B984E09C-9AC6-4332-BA55-20455293DDD0}] => (Allow) E:\o2CD.exe
FirewallRules: [{DAC49487-46D3-45F0-B044-5763F2A4E677}] => (Allow) D:\DSL Soforthilfe\DSL_Soforthilfe.exe
FirewallRules: [{80DB2987-C4B8-480A-B824-0152EB61268B}] => (Allow) D:\DSL Soforthilfe\DSL_Soforthilfe.exe
FirewallRules: [{A49AE117-AD2D-452C-B90B-955E4E2BBD42}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{B8D4B812-A67C-437A-9E88-9834BC6756B9}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{46B110B4-D7CC-4110-BE10-012EF5093E86}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3B5641FC-B519-404F-BAC2-DA192C8DB459}] => (Allow) D:\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{31150AC5-9FA8-4772-82E8-52DB7A2C2C35}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\Expansion\beta\arma2oa.exe
FirewallRules: [{EB33771D-87C7-41D7-BC98-F9E3B51E4F61}] => (Allow) D:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\Expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{D92B0D48-43F5-4F44-AB9A-2CD453496444}D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [UDP Query User{42F7243C-D8A9-43F3-85D6-BD2A4A05E430}D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) D:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe
FirewallRules: [{2FEBE422-454A-4FFD-90F0-F7317AEA0B23}] => (Allow) D:\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{916DBA2B-CE89-4E3E-ACC2-DB114B4A123A}] => (Allow) D:\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [TCP Query User{E64672B9-C2FC-4DA8-A65D-12A521E620E0}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [UDP Query User{4769253C-A797-47D1-B7EE-B715A7F806E1}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{274171DD-1FA8-474E-9661-30F8E29A6B5F}] => (Allow) D:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{D2CEC6BD-137E-4D08-9B8C-604DFBCD5C0D}] => (Allow) D:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{077F033D-C663-43E0-B076-ACF938B3B084}D:\steam\steamapps\common\torchlight ii\torchlight2.exe] => (Allow) D:\steam\steamapps\common\torchlight ii\torchlight2.exe
FirewallRules: [UDP Query User{4FF192D6-3761-4FE7-8915-4235E755E5B7}D:\steam\steamapps\common\torchlight ii\torchlight2.exe] => (Allow) D:\steam\steamapps\common\torchlight ii\torchlight2.exe
FirewallRules: [{2B7C5C7A-076F-4DEA-B5EB-9D1DE89AEBD2}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{85DF3FAC-8AEC-4F37-A250-1952172440B2}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{680BB065-5956-4114-9942-1500DFA90827}] => (Allow) D:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{76E20BD4-6CC7-40BE-93F3-A754531F3155}] => (Allow) D:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{DC5306BA-0CEC-4D4F-BDE8-E6EDC5D8673D}] => (Allow) D:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{962E5FAE-BFFE-4176-AE4C-841B7A93DAE1}] => (Allow) D:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{7567DE72-14FA-4A1E-B472-7A86A8E7956D}] => (Allow) D:\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{6C3C8A92-CE64-4264-959F-EC46A3B49A83}] => (Allow) D:\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{57FAE1F6-7241-474C-98FE-AFE9010531D5}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{541F80A2-B2E6-49C4-ADD0-F263CF5CBAA8}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{F48820A0-0B66-4FF8-BEC5-68558CFFB19B}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D8AB512C-9372-4702-BBC1-19D870554FF6}] => (Allow) D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [TCP Query User{166CE3D9-101D-4376-B530-2D1A2FBD247C}C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{ECB77E68-27C1-4836-B504-37BF00F8F486}C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799250\windows\resource\jre\bin\javaw.exe
FirewallRules: [TCP Query User{BA27B9DA-F19B-4A3E-BFD7-8CA07AF772FA}C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{5CBB1B27-F485-4F85-91B9-E3355BF9500F}C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mohamed\appdata\local\temp\i1474799542\windows\resource\jre\bin\javaw.exe
FirewallRules: [{1F181E9F-22BA-4B82-99AE-CA096CE0A310}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2C28A93C-6196-420A-9F84-127F3A5B8009}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E58FEA91-30F9-4CAC-910A-7DF6BB3D9992}] => (Allow) D:\Steam\SteamApps\common\White Noise 2\WhiteNoise2.exe
FirewallRules: [{005B8E00-F9CB-4647-B0AF-70F26787751B}] => (Allow) D:\Steam\SteamApps\common\White Noise 2\WhiteNoise2.exe
FirewallRules: [{57DF9370-5BFC-4131-A054-F67125D41085}] => (Allow) D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{D390F52D-CCF6-4415-AC30-78FE64269389}] => (Allow) D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [TCP Query User{DBF937D4-98CF-4B66-8140-56AAE08C5993}C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [UDP Query User{7F179864-9344-4911-88B4-14E591264063}C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [TCP Query User{EE249733-95D1-40C2-A826-E0F18B0F7ED8}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{72FA960E-E1FC-4A3D-B5CC-DC723DD117DC}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe
FirewallRules: [{D0997843-9F79-4E13-9BCF-EF3B88469751}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned_BE.exe
FirewallRules: [{5EBAF0A0-344E-44EA-B1A1-E55A0F4C3280}] => (Allow) D:\Steam\SteamApps\common\Unturned\Unturned_BE.exe
FirewallRules: [{68232D5B-4347-43C1-AC20-FE60864EC591}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe
FirewallRules: [{3E67F60C-077B-4CBF-90D8-D8E2DB515FEC}] => (Allow) LPort=1542
FirewallRules: [{F2D3615E-F3F8-4669-8890-95A6C997EFF0}] => (Allow) LPort=1542
FirewallRules: [{B7A09BB3-9A78-4E39-B098-D31A4CCF67C5}] => (Allow) LPort=53
FirewallRules: [{5BC9178C-4BE8-46DA-8FF4-0D3104EA3E88}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe
FirewallRules: [{A337F363-0D5E-42BD-902D-34EDE20A65D8}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{64A7BEE9-713C-4FB8-B56E-086FF1373244}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{14EF932D-8FCC-4A8C-A8E9-F894A548052A}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{C15E89C1-7345-4639-B9A5-CCC64B449F16}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{39A72F0D-72C8-495F-9085-097B4D6D2982}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{2B30669B-E4CF-4272-BA4E-971762C34825}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{D068C814-49BC-40A0-B5A3-75073F94BD06}] => (Allow) D:\Steam\SteamApps\common\Dragon Saga\WPLauncher.exe
FirewallRules: [{D73FA1FE-5374-4644-BFD9-7736EFFE0073}] => (Allow) D:\Steam\SteamApps\common\Dragon Saga\WPLauncher.exe
FirewallRules: [TCP Query User{88C2E07A-59D5-439B-AF68-E42E65FB68D6}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe
FirewallRules: [UDP Query User{8CD84100-4993-40A4-BAC4-0F3D8D19D8DD}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe
FirewallRules: [TCP Query User{BDF15FED-24F0-43F1-BD4B-1041B82D6E2F}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe
FirewallRules: [UDP Query User{8D9DADF0-CFD0-478C-9B1E-687E01E1340C}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe
FirewallRules: [TCP Query User{787CAFA4-0009-4303-B9D0-766C032DB076}C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe
FirewallRules: [UDP Query User{7A09C843-104D-4838-9CD4-4ACD30438F49}C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8539\battle.net.exe
FirewallRules: [TCP Query User{91B1CB6E-6BC9-4CBB-982E-7AD12B79D5C8}C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe
FirewallRules: [UDP Query User{39B63EC8-A628-4A11-A0C7-05BA32C82EF6}C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe] => (Block) C:\program files (x86)\battle.net\battle.net.8600\battle.net.exe
FirewallRules: [TCP Query User{AF96564C-9208-46E5-8C94-53BF4391E22A}D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{17D5038D-3091-474F-B524-5F199D518AC2}D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) D:\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [{D1435742-D200-4539-923D-C831B1F116EF}] => (Allow) D:\Steam\SteamApps\common\Skyforge\Skyforge MyCom\Bin32\Skyforge.exe
FirewallRules: [{EB9E5747-9FF1-4689-9B7A-67B0945B4288}] => (Allow) D:\Steam\SteamApps\common\Skyforge\Skyforge MyCom\Bin32\Skyforge.exe
FirewallRules: [TCP Query User{8F12567C-58F2-48B8-8984-B1DEB09BA68E}D:\overwatch\overwatch.exe] => (Block) D:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{84139C36-8D0A-4DC0-BA71-90DF47317D1F}D:\overwatch\overwatch.exe] => (Block) D:\overwatch\overwatch.exe
FirewallRules: [{0E3F7502-F8B0-4820-A8DA-1355F13B78E7}] => (Allow) D:\Steam\SteamApps\common\Witch It Beta\WitchIt.exe
FirewallRules: [{F3B182DE-8570-4134-85E9-0338569DE233}] => (Allow) D:\Steam\SteamApps\common\Witch It Beta\WitchIt.exe
FirewallRules: [{EE145F09-D794-425E-91C3-BCB48BCDECA2}] => (Allow) D:\Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [{00E6F8DD-40BB-41E9-BEE3-07D2138895EA}] => (Allow) D:\Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [TCP Query User{4DE305CB-23B6-4F2C-A432-E70CC0355CE5}D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [UDP Query User{7C3018BB-693C-4E08-AACB-D5017B8199E9}D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\witch it beta\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [TCP Query User{237B3309-A57C-4B29-9236-ABA8F5A34078}D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{D37F0305-4D75-4DDF-9EB2-794293AC40C0}D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [TCP Query User{0EAE6842-CF34-41E9-BBDD-0542C3247A06}D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
FirewallRules: [UDP Query User{95FB5177-97C6-43D2-923E-DFD0E688A7E5}D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) D:\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
FirewallRules: [{2130B78E-B5CA-48D5-8274-228B435DD2F1}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{4A2794E9-6B4C-4F07-BE57-13F93BB13C79}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{8D10D3C8-581B-4183-8ACA-C2E88C8F5B70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{E311D9BE-B539-4126-9F80-B14BC5F13A36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{BE63E24F-1468-47A8-935F-1D2AE7F8F2B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9CA80F51-77A6-4214-B203-850D7490DDAA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{70F9463C-2A7B-403E-9C29-32D1AAB61809}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7B105046-ED1A-4BF4-A5DA-51AB865D2E7F}] => (Allow) D:\Steam\SteamApps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{06A70726-D769-4072-ABFA-F916E97660C1}] => (Allow) D:\Steam\SteamApps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{939BCDD7-D004-4B6C-BF5F-24764CCC5DE9}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{909A8FA0-81A8-4846-9D27-C556B9894DA9}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{50ECEAB5-C3A7-461F-BCA0-7FEF7A211C11}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{60A64AA7-A846-4D78-B508-E3F77291B850}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{75F071EF-9CA2-4CCF-A669-D9EAE802358B}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{EE2EE12E-5B47-4C7B-BF6C-80DE6A3DB568}] => (Allow) D:\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{3C44227E-F1DC-475C-951C-5B291F4F5748}] => (Allow) D:\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{E4905137-CBBC-469A-9760-567CBE7A8F55}] => (Allow) D:\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{C0166151-2DF0-4A1E-8B80-D114D4656DEA}] => (Allow) D:\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{F4731BF2-F01C-456D-8AC0-B4103077E983}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{6F4D2BEE-E656-4168-9B53-69C792B268EF}] => (Allow) LPort=9322
FirewallRules: [{1E05240C-10BC-4A97-8A74-0F7E16E66A0D}] => (Allow) LPort=5353
FirewallRules: [{A108A643-A95C-459F-9F94-79920338AEC5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{882C6A24-C9A1-4CCD-9451-91620D20E207}] => (Allow) LPort=49182
FirewallRules: [{5D7B3772-142B-4E13-A3CC-DA2A1E70390F}] => (Allow) LPort=49200
==================== Wiederherstellungspunkte =========================
01-07-2017 01:44:45 Revo Uninstaller's restore point - Adobe Reader XI (11.0.20) - Deutsch
01-07-2017 02:16:16 Revo Uninstaller's restore point - 3DMark05
01-07-2017 02:16:51 Removed 3DMark05
01-07-2017 02:19:23 Revo Uninstaller's restore point - CCleaner
01-07-2017 02:20:43 Revo Uninstaller's restore point - DivX-Setup
01-07-2017 02:22:33 Revo Uninstaller's restore point - Java 7 Update 67
01-07-2017 02:22:45 Removed Java 7 Update 67
01-07-2017 02:24:07 Revo Uninstaller's restore point - JDownloader 0.9
01-07-2017 02:30:00 Revo Uninstaller's restore point - YTD Video Downloader 5.1.1
01-07-2017 02:31:20 Revo Uninstaller's restore point - VLC media player 2.0.7
01-07-2017 02:33:27 Revo Uninstaller's restore point - Microsoft Office PowerPoint 2003 Template Pack 1
01-07-2017 02:36:16 Revo Uninstaller's restore point - Avast Free Antivirus
02-07-2017 17:13:53 JRT Pre-Junkware Removal
02-07-2017 17:14:25 JRT Pre-Junkware Removal
02-07-2017 19:00:01 Windows-Sicherung
03-07-2017 03:39:33 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (07/03/2017 01:31:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (07/03/2017 01:29:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/03/2017 01:29:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/03/2017 01:29:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/03/2017 03:51:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (07/03/2017 03:50:02 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/03/2017 03:50:02 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/03/2017 03:50:02 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (07/02/2017 11:51:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18103, Zeitstempel: 0x512d9f39
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000179c68
ID des fehlerhaften Prozesses: 0xb08
Startzeit der fehlerhaften Anwendung: 0x01d2f345492bd9cd
Pfad der fehlerhaften Anwendung: C:\Windows\Explorer.EXE
Pfad des fehlerhaften Moduls: C:\Windows\system32\SHELL32.dll
Berichtskennung: a25333f9-5f70-11e7-bb7b-94de807f6f34
Error: (07/02/2017 05:10:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Systemfehler:
=============
Error: (07/03/2017 01:33:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (07/03/2017 01:32:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (07/03/2017 01:30:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UsbCharger
Error: (07/03/2017 01:30:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "RealtekWlanU" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (07/03/2017 01:30:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (07/03/2017 01:30:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.
Error: (07/03/2017 01:29:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Kodak AiO Status Monitor Service erreicht.
Error: (07/03/2017 03:52:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "sppsvc" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (07/03/2017 03:50:38 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UsbCharger
Error: (07/03/2017 03:50:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "RealtekWlanU" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
CodeIntegrity:
===================================
Date: 2016-09-20 16:30:24.191
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2016-09-20 16:30:24.189
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:48:47.473
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:48:47.454
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:40:13.561
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:40:13.537
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:03:32.997
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-08 00:03:32.942
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-12 22:33:59.564
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-12 22:30:00.380
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1230 v3 @ 3.30GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 8137.03 MB
Verfügbarer physikalischer RAM: 5401.21 MB
Summe virtueller Speicher: 16272.25 MB
Verfügbarer virtueller Speicher: 13359.46 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:97.56 GB) (Free:3.22 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Volume) (Fixed) (Total:833.85 GB) (Free:13.32 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F100E8E2)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Not Active) - (Size=100 MB) - (Type=42)
Partition 3: (Active) - (Size=97.6 GB) - (Type=42)
Partition 4: (Not Active) - (Size=833.9 GB) - (Type=42)
==================== Ende von Addition.txt ============================
[/CODE] |
|
03.07.2017, 12:44
| #13 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert Und hier die FRST.txt im zweiten Post, da die addition.txt zu lang war FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2017
durchgeführt von Mohamed (Administrator) auf KANADE-PC (03-07-2017 13:36:13)
Gestartet von C:\Users\Mohamed\Desktop
Geladene Profile: Mohamed (Verfügbare Profile: Mohamed)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Eastman Kodak Company) D:\Allgemein\Kodak\AiO\Center\EKAiOHostService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\runSW.exe
(Realtek) C:\Windows\SwUSB.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TunnelBear) D:\Allgemein\TunnelBear\TBear.Maintenance.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() D:\Löschen (kurz benutzt)\MSI Afterburner\MSIAfterburner.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
() C:\Program Files (x86)\puush\puush.exe
(Akamai Technologies, Inc.) C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Mohamed\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Akamai Technologies, Inc.) C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() D:\DSL Soforthilfe\DSL_Soforthilfe.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(GOG.com) D:\GalaxyClient\GalaxyClient.exe
(GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) D:\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) D:\GalaxyClient\GOG Galaxy Notifications Renderer.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-06] (Intel Corporation)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\System32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [DSL Soforthilfe] => D:\DSL Soforthilfe\DSL_Soforthilfe.exe [20585888 2013-11-21] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.)
HKU\S-1-5-19\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-20\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] ()
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Mohamed\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Spotify Web Helper] => C:\Users\Mohamed\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1529456 2016-10-09] (Spotify Ltd)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [GalaxyClient] => D:\GalaxyClient\GalaxyClient.exe [4982336 2017-06-21] (GOG.com)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\MountPoints2: {8d579771-db2c-11e2-bfaa-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4196016333-305226474-955279301-1000\...\MountPoints2: {df3e928e-db2c-11e2-ad56-b1922c281eda} - F:\pushinst.exe
HKU\S-1-5-18\...\Run: [TunnelBear] => D:\Allgemein\TunnelBear\TunnelBear.UI.exe [1352064 2017-05-24] (TunnelBear)
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-12-25]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3C023254-6634-4406-9B6D-B65ED5DCBF8F}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{5EC6FE6C-656C-46A2-B1F0-40B40B81FB07}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78AFF4A0-474A-4C67-8A86-DD4C916BE0C3}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DE820F93-8CE5-4F9D-83E3-80290730CD84}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKU\S-1-5-21-4196016333-305226474-955279301-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/?utm_source=SDA&utm_medium=plugin&utm_campaign=april2015
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-12] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-12] (Microsoft Corporation.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-12] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-12] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKU\S-1-5-21-4196016333-305226474-955279301-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
Toolbar: HKU\S-1-5-21-4196016333-305226474-955279301-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default [2017-06-25]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\w43e22wc.default -> Yahoo!
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\w43e22wc.default -> hxxps://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\w43e22wc.default -> Google (avast)
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\w43e22wc.default -> Yahoo!
FF Homepage: Mozilla\Firefox\Profiles\w43e22wc.default -> hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
hxxps://www.google.com
FF Extension: (Firebug) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\firebug@software.joehewitt.com.xpi [2017-03-06]
FF Extension: (AdBlock) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-06-25]
FF Extension: (DSL Soforthilfe) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{95E05177-EA09-4386-8B79-FEB1EAC063E6} [2016-01-08] [ist nicht signiert]
FF Extension: (Video DownloadHelper) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-06-05]
FF Extension: (Adblock Plus) - C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-25]
FF SearchPlugin: C:\Users\Mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\w43e22wc.default\searchplugins\google-avast.xml [2015-06-10]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin HKU\S-1-5-21-4196016333-305226474-955279301-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mohamed\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-10] (Unity Technologies ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://search.conduit.com/?SSPV=&ctid=CT2269050&SearchSource=13&UP=SP468FD9D9-5E50-4721-919E-306D1FED60B2
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default [2017-07-03]
CHR Extension: (ProxFlow) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-01-24]
CHR Extension: (YouTube) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2013-06-29]
CHR Extension: (Adblock Plus) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-21]
CHR Extension: (Google-Suche) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Video Downloader professional) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2016-07-19]
CHR Extension: (Diep Friends - by Creators of Agar.pw) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbhaejibfpkjkblcnhccangahmmlgejd [2016-10-17]
CHR Extension: (WebRTC Control) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjkmabmdepjfammlpliljpnbhleegehm [2017-06-02]
CHR Extension: (AdBlock) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-27]
CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm [2017-06-26]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-07-03]
CHR Extension: (Avast Online Security) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-06-09]
CHR Extension: (ThemeBeta.com) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\keeniajmpmdfifodncbikikeoblejkbi [2015-11-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Google Mail) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-28]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-05-29] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [383016 2017-06-20] (EasyAntiCheat Ltd)
S3 GalaxyClientService; D:\GalaxyClient\GalaxyClientService.exe [488000 2017-06-21] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8077376 2017-06-06] (GOG.com)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [22184 2015-07-29] (Micro-Star Int'l Co., Ltd.)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3760040 2017-05-22] (LogMeIn Inc.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2610808 2017-06-15] (AnchorFree Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 Kodak AiO Network Discovery Service; D:\Allgemein\Kodak\AiO\Center\EKAiOHostService.exe [407016 2016-04-13] (Eastman Kodak Company)
S2 Kodak AiO Status Monitor Service; D:\Allgemein\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [780152 2013-12-11] (Eastman Kodak Company)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-05-18] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2157456 2017-06-09] (Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3127192 2017-06-09] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [207872 2015-07-15] (Power Admin LLC) [Datei ist nicht signiert]
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 TunnelBearMaintenance; D:\Allgemein\TunnelBear\TBear.Maintenance.exe [38272 2017-05-24] (TunnelBear)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WPSService20; C:\Program Files (x86)\Edimax\Edimax AC1750 Wi-Fi USB Adapter Driver\WPSService20.exe [96768 2014-09-02] () [Datei ist nicht signiert]
S2 RealtekWlanU; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe [X]
S2 RTLDHCPService; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [X]
S2 sppsvc; %SystemRoot%\system32\sppsvc.exe [X]
S4 sppuinotify; %SystemRoot%\system32\sppuinotify.dll [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AFTrafMgr1.2; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_2_64.sys [57272 2017-05-08] (AnchorFree Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2016-12-20] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-05-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-05-18] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-05-18] (NVIDIA Corporation)
R3 RTCore64; D:\Löschen (kurz benutzt)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-10-25] (Realtek Semiconductor Corporation )
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [5088024 2017-02-03] (Realtek Semiconductor Corporation )
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-05-17] (Windows (R) Win 7 DDK provider)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2016-03-28] (Anchorfree Inc.)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] ()
S3 ALSysIO; \??\C:\Users\Mohamed\AppData\Local\Temp\ALSysIO64.sys [X] <==== ACHTUNG
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 cpuz130; \??\C:\Users\Mohamed\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 hxsyol; \??\D:\AK\AuraKingdom\avital\hxsy64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-07-03 13:36 - 2017-07-03 13:36 - 00000000 ____D C:\Users\Mohamed\Desktop\FRST-OlderVersion
2017-07-02 17:18 - 2017-07-03 03:41 - 00000692 _____ C:\Users\Mohamed\Desktop\JRT.txt
2017-07-02 16:12 - 2017-07-02 16:13 - 00000000 ____D C:\Users\Mohamed\Desktop\Mageda
2017-07-01 14:40 - 2017-07-01 16:04 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-07-01 14:39 - 2017-07-01 16:04 - 00000000 ____D C:\Users\Mohamed\Desktop\mbar
2017-07-01 01:03 - 2017-07-01 01:03 - 00000773 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-07-01 01:03 - 2017-07-01 01:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-06-30 14:17 - 2017-06-30 14:17 - 00000049 _____ C:\Users\Mohamed\Desktop\6.07, Rabbiner.txt
2017-06-29 23:55 - 2017-06-29 23:55 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\NVIDIA
2017-06-29 23:54 - 2017-06-29 23:54 - 00002135 _____ C:\Users\Mohamed\Desktop\Minecraft.lnk
2017-06-29 23:54 - 2017-06-29 23:54 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2017-06-29 22:29 - 2017-06-29 22:29 - 00000039 _____ C:\Windows\SysWOW64\nativelog.txt
2017-06-28 21:49 - 2017-06-28 21:49 - 00000000 ____D C:\Users\Mohamed\.TeamSpeak 3
2017-06-28 20:31 - 2017-06-28 20:31 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\KODAK AiO Home Center520167284
2017-06-28 19:23 - 2017-06-28 19:23 - 00000000 ____D C:\Windows\SysWOW64\kodak
2017-06-25 15:29 - 2017-06-25 15:29 - 00009036 _____ C:\Users\Mohamed\Desktop\mgamlog 2.txt
2017-06-25 15:24 - 2017-06-25 15:24 - 00001215 _____ C:\Users\Mohamed\Desktop\mgamlog.txt
2017-06-25 15:15 - 2017-06-25 15:15 - 00101932 _____ C:\Users\Mohamed\Desktop\addition.txt
2017-06-25 15:05 - 2017-07-03 13:37 - 00027206 _____ C:\Users\Mohamed\Desktop\FRST.txt
2017-06-25 02:47 - 2017-07-03 13:36 - 02435584 _____ (Farbar) C:\Users\Mohamed\Desktop\FRST64.exe
2017-06-25 02:47 - 2017-07-03 13:36 - 00000000 ____D C:\FRST
2017-06-24 21:42 - 2017-06-24 21:42 - 34790450 _____ C:\Users\Mohamed\Downloads\windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu
2017-06-23 03:55 - 2017-07-03 04:02 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2017-06-21 05:10 - 2017-06-21 05:10 - 00548392 _____ C:\Windows\system32\Drivers\EasyAntiCheat.sys
2017-06-21 04:36 - 2017-06-21 04:36 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\EasyAntiCheat
2017-06-21 04:35 - 2017-06-20 20:40 - 00383016 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2017-06-20 20:37 - 2017-06-20 20:37 - 00000234 _____ C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tom Clancy's Ghost Recon® Wildlands.url
2017-06-17 03:37 - 2017-06-17 03:37 - 00000000 ____D C:\Users\Mohamed\ansel
2017-06-15 17:09 - 2017-06-15 17:10 - 00000000 ____D C:\Users\Mohamed\AppData\Local\NVIDIA
2017-06-15 17:06 - 2017-06-15 17:09 - 00000000 ____D C:\Users\Mohamed\AppData\Local\NVIDIA Corporation
2017-06-15 17:02 - 2017-06-15 17:02 - 00001412 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-06-15 16:28 - 2017-05-18 09:33 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-06-15 16:27 - 2017-06-15 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-06-15 16:27 - 2017-06-15 16:27 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-06-15 16:27 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-06-15 16:27 - 2017-05-18 09:33 - 01893312 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01477056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 00121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-06-15 16:27 - 2017-05-18 09:33 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-06-15 16:26 - 2017-05-18 09:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-06-15 16:26 - 2017-05-18 07:48 - 06437824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 02479736 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 01762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00548984 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-06-15 16:26 - 2017-05-18 07:48 - 00069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-06-15 16:26 - 2017-05-18 07:21 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-06-15 16:26 - 2017-05-16 20:09 - 07993157 _____ C:\Windows\system32\nvcoproc.bin
2017-06-15 16:25 - 2017-05-18 09:33 - 40201848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 35349440 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 35282040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 28593088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 20066768 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 17426520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 16436488 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 14271608 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 13402816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 11056456 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 11027968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 10551072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 09248328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 09014976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 08808488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 04090016 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03603672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03437688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 03020920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438233.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01606592 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438233.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01600560 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 01055680 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00993912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00964216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00914880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00688968 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00577728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00507688 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00499320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00491208 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00426128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00406736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00218040 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00175552 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00148200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00143296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-06-15 16:25 - 2017-05-18 09:33 - 00046008 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-06-15 16:25 - 2017-05-18 09:33 - 00042897 _____ C:\Windows\system32\nvinfo.pb
2017-06-15 16:25 - 2017-05-18 09:33 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-06-15 16:25 - 2017-05-18 09:33 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-06-15 16:16 - 2017-06-15 16:16 - 00004226 _____ C:\Windows\System32\Tasks\AMD Updater
2017-06-14 21:12 - 2017-06-14 21:17 - 00015742 _____ C:\Users\Mohamed\Desktop\Bewerbung, Anna Freud.odt
2017-06-14 20:47 - 2017-06-14 20:47 - 00055362 _____ C:\Users\Mohamed\Desktop\Anmeldebogen Anna Freud.pdf
2017-06-14 20:47 - 2017-06-14 20:47 - 00050086 _____ C:\Users\Mohamed\Desktop\Bestaetigungsformular_FOS-BOS.pdf
2017-06-09 16:59 - 2017-07-03 13:34 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-09 16:58 - 2017-06-15 17:09 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-06-09 16:58 - 2017-06-09 16:58 - 00003298 _____ C:\Windows\System32\Tasks\{51050104-5FDE-4DF0-8731-03E92F73666A}
2017-06-09 16:40 - 2017-06-15 16:27 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-06-09 16:39 - 2017-06-09 16:39 - 00000000 ____D C:\NVIDIA
2017-06-05 19:36 - 2017-06-05 19:36 - 00001610 _____ C:\Users\Public\Desktop\TunnelBear.lnk
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\TunnelBear
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\Users\Mohamed\AppData\Local\IsolatedStorage
2017-06-05 19:36 - 2017-06-05 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-07-03 13:35 - 2013-06-25 23:32 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Skype
2017-07-03 13:35 - 2013-06-22 21:31 - 00000000 ____D C:\Program Files (x86)\Steam
2017-07-03 13:32 - 2017-05-24 10:13 - 00000176 _____ C:\Users\Mohamed\BullseyeCoverageError.txt
2017-07-03 13:32 - 2013-10-06 23:06 - 00000000 ____D C:\Users\Mohamed\AppData\Local\LogMeIn Hamachi
2017-07-03 13:29 - 2013-11-24 01:33 - 00000000 ____D C:\ProgramData\Kodak
2017-07-03 13:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-03 03:55 - 2017-04-14 13:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-03 03:48 - 2014-11-12 16:15 - 00000000 ____D C:\AdwCleaner
2017-07-03 02:01 - 2014-06-12 13:06 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Battle.net
2017-07-02 23:56 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-07-02 23:51 - 2013-07-05 20:09 - 00000000 ____D C:\Users\Mohamed\AppData\Local\CrashDumps
2017-07-02 21:45 - 2013-08-01 01:34 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\TS3Client
2017-07-02 17:30 - 2015-01-16 18:16 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-07-02 16:15 - 2011-04-12 09:43 - 00700130 _____ C:\Windows\system32\perfh007.dat
2017-07-02 16:15 - 2011-04-12 09:43 - 00149768 _____ C:\Windows\system32\perfc007.dat
2017-07-02 16:15 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-02 16:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-07-02 16:13 - 2013-06-29 01:16 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-07-01 15:24 - 2017-04-14 13:24 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-07-01 14:30 - 2015-12-04 15:21 - 00000000 ____D C:\Program Files\Common Files\AV
2017-07-01 14:30 - 2014-03-30 16:34 - 00000000 ____D C:\ProgramData\DivX
2017-07-01 14:30 - 2013-06-22 17:04 - 00000000 ____D C:\ProgramData\AVAST Software
2017-07-01 02:23 - 2014-03-30 16:35 - 00000000 ____D C:\Program Files\DivX
2017-07-01 02:17 - 2013-06-22 11:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-07-01 01:46 - 2014-03-11 16:26 - 00000000 ____D C:\ProgramData\Adobe
2017-07-01 00:37 - 2013-06-23 00:07 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\vlc
2017-06-29 23:57 - 2014-03-14 16:15 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\.minecraft
2017-06-29 22:29 - 2015-06-24 19:18 - 00000000 ____D C:\Program Files (x86)\Minecraft
2017-06-28 23:45 - 2015-09-06 22:03 - 00000000 ____D C:\Users\Mohamed\AppData\Local\ElevatedDiagnostics
2017-06-28 23:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2017-06-28 21:49 - 2015-02-07 17:46 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-06-28 21:49 - 2013-06-22 11:41 - 00000000 ____D C:\Users\Mohamed
2017-06-28 20:29 - 2013-11-24 01:37 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Eastman_Kodak_Company
2017-06-28 19:24 - 2013-11-24 01:37 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Eastman Kodak Company
2017-06-28 19:24 - 2013-11-24 01:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak
2017-06-27 22:00 - 2016-11-20 19:59 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-27 22:00 - 2016-11-20 19:59 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-06-26 23:47 - 2013-08-29 13:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-25 21:38 - 2015-03-28 15:20 - 00018103 _____ C:\Users\Mohamed\Documents\Lebenslauf.odt
2017-06-25 20:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-06-25 15:45 - 2016-11-19 20:20 - 00000000 ____D C:\Users\Mohamed\AppData\LocalLow\Mozilla
2017-06-25 15:44 - 2016-11-18 15:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-06-24 21:55 - 2015-04-21 16:52 - 00308200 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-24 21:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-06-21 05:57 - 2013-06-24 22:20 - 00000000 ____D C:\Users\Mohamed\AppData\Local\Ubisoft Game Launcher
2017-06-21 05:04 - 2016-04-15 17:07 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\discord
2017-06-21 04:36 - 2013-06-23 02:14 - 00000000 ____D C:\Users\Mohamed\Documents\my games
2017-06-18 22:27 - 2013-11-22 17:08 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-17 04:24 - 2015-09-13 01:20 - 00000000 ____D C:\Users\Mohamed\Documents\The Witcher 3
2017-06-17 03:37 - 2013-07-01 17:49 - 00007601 _____ C:\Users\Mohamed\AppData\Local\Resmon.ResmonCfg
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-06-17 00:55 - 2016-04-10 01:43 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-06-17 00:55 - 2015-05-17 00:11 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-16 21:08 - 2016-12-31 14:34 - 00004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 21:08 - 2016-11-19 05:27 - 00004510 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-06-16 21:08 - 2013-06-29 01:16 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 21:08 - 2013-06-29 01:16 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 21:08 - 2013-06-29 01:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-15 16:27 - 2015-02-28 22:41 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-06-15 16:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2017-06-15 16:15 - 2017-03-19 18:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-15 16:15 - 2015-12-03 14:48 - 00000000 ____D C:\Users\Mohamed\AppData\Local\AMD
2017-06-15 16:15 - 2015-07-15 01:56 - 00000000 ____D C:\Program Files\AMD
2017-06-15 16:15 - 2013-06-25 23:32 - 00000000 ____D C:\ProgramData\Skype
2017-06-14 20:46 - 2015-09-29 16:38 - 00908956 _____ C:\Windows\ntbtlog.txt
2017-06-09 17:00 - 2013-06-24 20:27 - 00000000 ____D C:\ProgramData\Origin
2017-06-09 16:59 - 2016-10-25 16:33 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-06-09 16:56 - 2013-08-01 02:45 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2017-06-09 16:56 - 2013-07-16 15:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2017-06-09 16:55 - 2014-06-07 23:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2017-06-09 16:36 - 2013-06-24 20:28 - 00000000 ____D C:\Users\Mohamed\AppData\Roaming\Origin
2017-06-09 01:43 - 2016-02-22 23:09 - 00000000 ____D C:\Users\Mohamed\BrawlhallaReplays
2017-06-07 03:43 - 2016-08-25 12:59 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2017-06-04 23:18 - 2013-03-12 21:39 - 01596050 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-07-09 21:41 - 2013-06-18 16:21 - 0920472 _____ (Mozilla Corporation) C:\Program Files (x86)\firefox.exe
2008-10-09 15:11 - 2008-10-09 15:11 - 0000029 _____ () C:\Program Files (x86)\firefox.exe.cfg
2016-05-26 12:52 - 2016-05-11 15:00 - 1773360 _____ () C:\Users\Mohamed\AppData\Roaming\ApplicationLauncher.exe
2016-11-19 05:30 - 2016-11-19 05:30 - 26674504 _____ () C:\Users\Mohamed\AppData\Roaming\gameboxsetup.exe
2016-05-26 12:52 - 2016-05-11 15:00 - 131419728 _____ (Telefónica Germany GmbH & Co. OHG) C:\Users\Mohamed\AppData\Roaming\o2_SuiteInstaller.exe
2016-06-28 22:57 - 2016-06-28 22:57 - 0000000 ____H () C:\Users\Mohamed\AppData\Local\BIT57A4.tmp
2013-07-26 22:28 - 2016-03-04 17:25 - 0001269 _____ () C:\Users\Mohamed\AppData\Local\CleanupUninstall.txt
2014-03-30 16:51 - 2016-06-21 22:03 - 0004608 _____ () C:\Users\Mohamed\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-22 21:01 - 2013-10-22 21:01 - 0000869 _____ () C:\Users\Mohamed\AppData\Local\recently-used.xbel
2013-07-01 17:49 - 2017-06-17 03:37 - 0007601 _____ () C:\Users\Mohamed\AppData\Local\Resmon.ResmonCfg
2016-06-28 22:56 - 2016-06-28 22:56 - 0000000 _____ () C:\Users\Mohamed\AppData\Local\{5574D584-D25E-498E-8F51-B70F645CC5B0}
2015-01-01 08:18 - 2015-01-01 08:18 - 0000000 _____ () C:\Users\Mohamed\AppData\Local\{6F82FDA0-E8BA-42F8-9CDE-1332BEBBB790}
2015-04-01 15:15 - 2015-04-01 15:15 - 0000057 _____ () C:\ProgramData\Ament.ini
Einige Dateien in TEMP:
====================
2017-05-24 10:13 - 2017-05-24 10:13 - 0008720 _____ () C:\Users\Mohamed\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
2014-11-08 10:33 - 2014-11-09 20:27 - 0601088 _____ () C:\Users\Mohamed\AppData\Local\Temp\Quarantine.exe
2014-11-08 10:47 - 2014-10-17 13:39 - 0665682 _____ (SQLite Development Team) C:\Users\Mohamed\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-07-02 20:06
==================== Ende von FRST.txt ============================
[/CODE] |
|
03.07.2017, 13:15
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {08F4F539-0D57-425B-8D34-4C7F360A49A4} - System32\Tasks\{64DC2916-9EDA-4855-8967-AA240B8C3702} => pcalua.exe -a "C:\Users\Mohamed\AppData\Local\Temp\Temp2_TL-WN722N(DE)_1.0_110701.zip\TL-WN722N(DE) 1.0_110701\Setup.exe" <==== ACHTUNG
S3 ALSysIO; \??\C:\Users\Mohamed\AppData\Local\Temp\ALSysIO64.sys [X] <==== ACHTUNG
S3 cpuz130; \??\C:\Users\Mohamed\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\w43e22wc.default -> Google (avast)
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
03.07.2017, 13:42
| #15 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiertCode:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-07-2017
durchgeführt von Mohamed (03-07-2017 14:33:00) Run:1
Gestartet von C:\Users\Mohamed\Desktop
Geladene Profile: Mohamed (Verfügbare Profile: Mohamed)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
Task: {08F4F539-0D57-425B-8D34-4C7F360A49A4} - System32\Tasks\{64DC2916-9EDA-4855-8967-AA240B8C3702} => pcalua.exe -a "C:\Users\Mohamed\AppData\Local\Temp\Temp2_TL-WN722N(DE)_1.0_110701.zip\TL-WN722N(DE) 1.0_110701\Setup.exe" <==== ACHTUNG
S3 ALSysIO; \??\C:\Users\Mohamed\AppData\Local\Temp\ALSysIO64.sys [X] <==== ACHTUNG
S3 cpuz130; \??\C:\Users\Mohamed\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\w43e22wc.default -> Google (avast)
emptytemp:
*****************
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{08F4F539-0D57-425B-8D34-4C7F360A49A4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08F4F539-0D57-425B-8D34-4C7F360A49A4} => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{64DC2916-9EDA-4855-8967-AA240B8C3702} => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{64DC2916-9EDA-4855-8967-AA240B8C3702} => Schlüssel erfolgreich entfernt
HKLM\System\CurrentControlSet\Services\ALSysIO => Schlüssel erfolgreich entfernt
ALSysIO => Dienst erfolgreich entfernt
HKLM\System\CurrentControlSet\Services\cpuz130 => Schlüssel erfolgreich entfernt
cpuz130 => Dienst erfolgreich entfernt
Firefox SearchEngineOrder.1 erfolgreich entfernt
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30956129 B
Java, Flash, Steam htmlcache => 336660753 B
Windows/system/drivers => 106618831 B
Edge => 0 B
Chrome => 607546866 B
Firefox => 212836244 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 16802 B
systemprofile32 => 66392 B
LocalService => 0 B
NetworkService => 1401464 B
Mohamed => 457813880 B
RecycleBin => 5814681 B
EmptyTemp: => 1.6 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 14:34:04 ====
edit: Ich hab nur Malwarebytes Anti-Malware, reicht es bei dem Virenscanner, wenn ich den nicht starte oder muss ich den manuell deaktivieren? |
|
| Themen zu Windows 7: Webseiten werden auf Werbung umgeleitet und Werbung wird überall generiert |
| akamai, antivirus, avast, defender, downloader, dsl, explorer, flash player, google, homepage, installation, mozilla, node.js, proxy, prozesse, realtek, registry, rundll, security, services.exe, software, stick, svchost.exe, temp, umleitung auf andere seiten, unerwünschte werbung, werbung, werbung auf jeder internetseite, windows |
dann auf 
und dann auf 
. 
Linear-Darstellung
