Addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-10-2016
durchgeführt von Alex (03-10-2016 14:19:04)
Gestartet von C:\Users\Alex\Downloads
Windows 10 Pro Version 1511 (X64) (2015-11-12 14:55:27)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2483748350-3972836390-758131696-500 - Administrator - Disabled)
Alex (S-1-5-21-2483748350-3972836390-758131696-1001 - Administrator - Enabled) => C:\Users\Alex
DefaultAccount (S-1-5-21-2483748350-3972836390-758131696-503 - Limited - Disabled)
Gast (S-1-5-21-2483748350-3972836390-758131696-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 9.0.402.1 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 9.0.402.1 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personal Firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
1001 Spikes (HKLM-x32\...\Steam App 260790) (Version: - Nicalis, Inc.)
Abomination Tower (HKLM-x32\...\Steam App 340390) (Version: - Amethyst Quarter)
Absolute Drift (HKLM\...\Steam App 320140) (Version: - Funselektor Labs Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.30.0 - Mirillis)
Adobe After Effects CC 2015.3 (HKLM-x32\...\AEFT_13_8_0) (Version: 13.8.0 - Adobe Systems Incorporated)
Adobe Animate CC 2015.2 (HKLM-x32\...\FLPR_15_2) (Version: 15.2 - Adobe Systems Incorporated)
Adobe Illustrator CC 2015.3 (HKLM-x32\...\ILST_20_0_0) (Version: 20.0.0 - Adobe Systems Incorporated)
Adobe InDesign CC 2015 (HKLM-x32\...\{DBFD0312-6E55-1014-8952-E78D43BC0147}) (Version: 11.4.0.090 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2015.3 (HKLM-x32\...\AME_10_3_0) (Version: 10.3.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015.5 (HKLM-x32\...\PHSP_17_0) (Version: 17.0.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2015.3 (HKLM-x32\...\PPRO_10_3_0) (Version: 10.3.0 - Adobe Systems Incorporated)
Adobe Update Management Tool (HKLM-x32\...\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 8.0 - PainteR)
Awesomenauts (HKLM\...\Steam App 204300) (Version: - Ronimo Games)
bomi (HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\{2fefec53-b756-46db-b1f6-48b8e7e3426f}) (Version: 0.9.11 - xylosper)
Distance (HKLM-x32\...\Steam App 233610) (Version: - Refract)
Downwell (HKLM-x32\...\Steam App 360740) (Version: - Moppin)
Dr. Langeskov, The Tiger, and The Terribly Cursed Emerald: A Whirlwind Heist (HKLM-x32\...\Steam App 409160) (Version: - Crows Crows Crows)
Dr.Green (HKLM-x32\...\Steam App 340290) (Version: - Johan Aronsson)
Dropbox (HKLM-x32\...\Dropbox) (Version: 4.4.29 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.35 - Dropbox, Inc.) Hidden
Dungeons & Dragons: Chronicles of Mystara (HKLM-x32\...\Steam App 229480) (Version: - Iron Galaxy Studios)
ESET Smart Security (HKLM\...\{74682D6B-2A0D-4095-902C-BA0BCB496D5D}) (Version: 9.0.318.20 - ESET, spol. s r.o.)
f.lux (HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\Flux) (Version: - )
Fallout 4 (HKLM\...\Steam App 377160) (Version: - Bethesda Game Studios)
FileZilla Client 3.21.0 (HKLM-x32\...\FileZilla Client) (Version: 3.21.0 - Tim Kosse)
First Impression (HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\FirstImpression) (Version: - )
foobar2000 v1.3.12 (HKLM-x32\...\foobar2000) (Version: 1.3.12 - Peter Pawlowski)
Forge of Gods (RPG) (HKLM\...\Steam App 461910) (Version: - Panoramik Inc)
Google Update Helper (x32 Version: 1.3.25.3 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version: - Rockstar North)
Grand Theft Auto V Update (HKLM-x32\...\R3JhbmRUaGVmdEF1dG9W_is1) (Version: 1 - )
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
Hell Yeah! (HKLM-x32\...\Steam App 205230) (Version: - Arkedo)
HLSW v1.4.0.5 (HKLM-x32\...\HLSW_is1) (Version: - Stripf Software)
HostsMan 4.6.103 (HKLM-x32\...\{1A3DD1A9-7B7B-4ECA-AD2F-98466F49F62C}_is1) (Version: 4.6.103.0 - abelhadigital.com)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.4.0.118 - IObit)
Jet Set Radio (HKLM-x32\...\Steam App 205950) (Version: - Blit Software)
JumpJet Rex (HKLM\...\Steam App 329460) (Version: - TreeFortress Games)
KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.9.0.3 - QFX Software Corporation)
Kodi (HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\Kodi) (Version: - XBMC-Foundation)
Little Racers STREET (HKLM-x32\...\Steam App 262690) (Version: - Milkstone Studios)
Love (HKLM-x32\...\Steam App 269270) (Version: - Fred Wood)
Macrium Reflect Workstation Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.)
Macrium Reflect Workstation Edition (Version: 6.1.887 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Workstation Version 6.1.887 (HKLM-x32\...\{81628F0B-90E2-4B85-BF13-492539C1BD00}_is1) (Version: 6.1.887 - .I. -.- .I.)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7167.2060 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{E4A1FDA3-689D-44DA-9B39-86BD2270F522}) (Version: 11.2.5058.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{99AC7F47-A4E0-4706-9C65-8948775C2652}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 49.0.1 (x64 de) (HKLM\...\Mozilla Firefox 49.0.1 (x64 de)) (Version: 49.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.1.6109 - Mozilla)
Mozilla Thunderbird 47.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 47.0 (x86 de)) (Version: 47.0 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSI Kombustor 3.5.1 (HKLM\...\{9598DA62-2AE8-426D-9C86-BEA96AC6721E}_is1) (Version: - MSI Co., LTD)
Mumble 1.2.16 (HKLM-x32\...\{E938AC6B-A1EB-40C7-8FFE-D4A325C1EA5D}) (Version: 1.2.16 - Thorvald Natvig)
Mumble 1.3.0 (HKLM\...\{88EBAF5D-7A0E-45EB-B919-65E94FE3141A}) (Version: 1.3.0 - The Mumble Developers)
Nexus 15.7 (HKLM-x32\...\Winstep Xtreme_is1) (Version: - )
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
NVIDIA Update 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.11.4.0 - NVIDIA Corporation)
Oddworld: Abe's Oddysee (HKLM-x32\...\Steam App 15700) (Version: - Oddworld Inhabitants)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7167.2060 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7167.2060 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7167.2060 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 5.0.0 (HKLM\...\{FCD0B365-2189-45F3-9AF2-2BCED86C121A}) (Version: 5.0.0 - Oracle Corporation)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.10 - Topaz Labs)
Pink Heaven (HKLM-x32\...\Steam App 409690) (Version: - Studio Pixel)
Pink Hour (HKLM-x32\...\Steam App 409670) (Version: - Studio Pixel)
Princess Remedy in a World of Hurt (HKLM-x32\...\Steam App 407900) (Version: - Ludosity)
Prompt (HKLM\...\Steam App 366590) (Version: - Peter Gutenko)
Python 3.5.1 (64-bit) (HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\{b8440650-9dbe-4b7d-8167-6e0e3dcdf5d0}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Core Interpreter (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{EC00AEF9-6544-4FEC-8152-C8949CDDCC85}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (64-bit) (Version: 3.5.1150.0 - Python Software Foundation) Hidden
qBittorrent 3.3.6 (HKLM-x32\...\qBittorrent) (Version: 3.3.6 - The qBittorrent project)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7917 - Realtek Semiconductor Corp.)
Relic Hunters Zero (HKLM-x32\...\Steam App 382490) (Version: - Rogue Snail)
Rex Rocket (HKLM-x32\...\Steam App 288020) (Version: - Castle Pixel, LLC.)
RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.9.7 - Samsung Electronics)
Sandboxie 5.12 (64-bit) (HKLM\...\Sandboxie) (Version: 5.12 - Sandboxie Holdings, LLC)
SEGA Genesis & Mega Drive Classics (HKLM-x32\...\Steam App 34270) (Version: - Sega)
ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 11.3.0 - ShareX Team)
StepMania 5 (HKLM-x32\...\StepMania 5) (Version: 5.0.9 - StepMania)
Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.1.0 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 6 (HKLM-x32\...\Topaz DeNoise 6) (Version: 6.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.2.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 5 (HKLM-x32\...\Topaz ReMask 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz ReStyle (HKLM-x32\...\Topaz ReStyle) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.1.1 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TrackMania Nations Forever (HKLM\...\Steam App 11020) (Version: - Nadeo)
TrackMania² Stadium (HKLM\...\Steam App 232910) (Version: - Nadeo)
Unreal Development Kit: 2015-01 (HKLM\...\UDK-75782b03-b9b6-433f-b93e-6e94a6283f17) (Version: - Epic Games, Inc.)
Veeam Endpoint Backup (HKLM\...\{A3F8904A-0B9F-4E78-ACA5-590894D38FEA}) (Version: 1.1.2.119 - Veeam Software AG)
Velocibox (HKLM-x32\...\Steam App 317710) (Version: - Shawn Beck)
Visual Studio 2010 SP1 Runtime x64 (HKLM\...\{F6305232-7952-4CCE-BDCD-9B2E66591C4A}) (Version: 1.0.0 - Microsoft Corporation)
Visual Studio 2010 SP1 Runtime x86 (HKLM-x32\...\{AEA163A5-BA2F-4E63-9529-DE8606AC82A4}) (Version: 1.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
WebP Codec for Windows 0.19 (HKLM\...\{9D2F4EB8-98AD-4C8B-A0C5-4C114B3F1287}) (Version: 0.19.9 - Google Inc)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2483748350-3972836390-758131696-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-07726D647F07}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0DC649CF-F5D2-492F-8460-5DAC50E055A6} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2016-05-13] (Samsung Electronics.)
Task: {1B313627-4357-49EE-9106-0E3D5D143D19} - System32\Tasks\AdobeAAMUpdater-1.0-ALEX-PC-Alex => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {2280E15D-1C32-4D8C-B6CC-F32785B43E9C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-09-05] (Microsoft Corporation)
Task: {389025AF-1F6A-4789-BC39-40D6DFAB1185} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-13] (Dropbox, Inc.)
Task: {3CAE252A-9C84-48B4-8F96-C77EDEE81C31} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-26] (Google Inc.)
Task: {7B85CA3B-DCA2-4D77-908A-8C5649FFFB50} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-09-05] (Microsoft Corporation)
Task: {7F387FF6-7E1D-42F3-905D-039913D8ADE2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-13] (Dropbox, Inc.)
Task: {A927D08B-12D9-40B7-AA74-058BA06FC2E7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-26] (Google Inc.)
Task: {E10D654E-688E-4628-9016-7B8A423A880D} - System32\Tasks\Uninstaller_SkipUac_Alex => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-05-26] (IObit)
Task: {EC68CDC2-72FC-4DCF-8E10-1DAADC4F2266} - System32\Tasks\Macrium-Backup-{F154F2BC-3C8C-49D9-84D5-9ED5DAF0DDAE} => C:\Program Files\Macrium\Reflect\Reflect.exe [2015-10-26] (Paramount Software UK Ltd)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Macrium-Backup-{F154F2BC-3C8C-49D9-84D5-9ED5DAF0DDAE}.job => C:\Program Files\Macrium\Reflect\Reflect.exeg-e -w C:\Users\Alex\Documents\Reflect\Alex Backup.xml
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Alex.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\First Impression\Website.lnk -> hxxp://www.utilhaven.com/
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\62d757ab9d1d0be\FlashPeak Slimjet.lnk -> C:\Users\Alex\Desktop\SlimJet 32\slimjet.exe (FlashPeak Inc.) -> --profile-directory=Default
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-08-09 17:48 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-08-09 17:48 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-18 03:23 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-08-09 17:49 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-08-09 17:49 - 2016-07-01 05:49 - 00674816 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
2016-08-09 17:48 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-08-09 17:48 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-08-09 17:48 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-08-09 17:48 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-07-20 18:29 - 2016-07-20 18:29 - 15855104 _____ () C:\Program Files (x86)\qBittorrent\qbittorrent.exe
2016-05-21 14:04 - 2016-09-24 20:15 - 02485760 _____ () C:\Users\Alex\Desktop\chromium portable\bin\libglesv2.dll
2016-05-21 14:04 - 2016-09-24 20:15 - 00092672 _____ () C:\Users\Alex\Desktop\chromium portable\bin\libegl.dll
2015-08-01 03:18 - 2012-06-08 20:40 - 01086176 _____ () C:\Program Files (x86)\Winstep\wodTelnetDLX.dll
2016-09-08 19:51 - 2016-08-24 04:01 - 01734656 _____ () C:\Users\Alex\Desktop\SlimJet 32\libglesv2.dll
2016-09-08 19:51 - 2016-08-24 04:01 - 00080384 _____ () C:\Users\Alex\Desktop\SlimJet 32\libegl.dll
2016-04-04 09:42 - 2016-04-04 09:42 - 00095696 _____ () C:\Program Files (x86)\foobar2000\zlib1.dll
2016-09-16 12:41 - 2016-09-16 12:41 - 00156160 _____ () C:\Program Files (x86)\foobar2000\shared.dll
2016-03-30 13:45 - 2016-03-30 13:45 - 00307200 _____ () C:\Program Files (x86)\foobar2000\components\foo_freedb2.dll
2016-09-16 12:42 - 2016-09-16 12:42 - 00309760 _____ () C:\Program Files (x86)\foobar2000\components\foo_cdda.dll
2016-09-16 12:42 - 2016-09-16 12:42 - 00276480 _____ () C:\Program Files (x86)\foobar2000\components\foo_unpack.dll
2016-09-16 12:42 - 2016-09-16 12:42 - 00296448 _____ () C:\Program Files (x86)\foobar2000\components\foo_fileops.dll
2016-09-16 12:42 - 2016-09-16 12:42 - 00536576 _____ () C:\Program Files (x86)\foobar2000\components\foo_converter.dll
2016-09-16 12:43 - 2016-09-16 12:43 - 01423360 _____ () C:\Program Files (x86)\foobar2000\components\foo_input_std.dll
2016-03-30 13:44 - 2016-03-30 13:44 - 00375296 _____ () C:\Program Files (x86)\foobar2000\components\foo_rgscan.dll
2016-09-16 12:43 - 2016-09-16 12:43 - 00205312 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_eq.dll
2016-09-16 12:43 - 2016-09-16 12:43 - 01083392 _____ () C:\Program Files (x86)\foobar2000\components\foo_ui_std.dll
2016-09-16 12:43 - 2016-09-16 12:43 - 00250880 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_std.dll
2016-03-30 13:46 - 2016-03-30 13:46 - 00356352 _____ () C:\Program Files (x86)\foobar2000\components\foo_albumlist.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\100sexlinks.com -> 100sexlinks.com
Da befinden sich 4788 mehr Seiten.
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-10-03 11:35 - 2016-10-03 11:35 - 02485677 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 localhost
0.0.0.0 137.116.81.24
0.0.0.0 204.79.197.200
0.0.0.0 23.218.212.69
0.0.0.0 65.39.117.230
0.0.0.0 65.55.108.23
0.0.0.0 a-0001.a-msedge.net
0.0.0.0 a-0002.a-msedge.net
0.0.0.0 a-0003.a-msedge.net
0.0.0.0 a-0004.a-msedge.net
0.0.0.0 a-0005.a-msedge.net
0.0.0.0 a-0006.a-msedge.net
0.0.0.0 a-0007.a-msedge.net
0.0.0.0 a-0008.a-msedge.net
0.0.0.0 a-0009.a-msedge.net
0.0.0.0 a-msedge.net
0.0.0.0 ac3.msn.com
0.0.0.0 adnexus.net
0.0.0.0 apps.skype.com
0.0.0.0 az361816.vo.msecnd.net
0.0.0.0 az512334.vo.msecnd.net
0.0.0.0 bingads.microsoft.com
0.0.0.0 ca.telemetry.microsoft.com
0.0.0.0 cache.datamart.windows.com
0.0.0.0 cds26.ams9.msecn.net
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 clients2.google.com
0.0.0.0 compatexchange.cloudapp.net
0.0.0.0 corp.sts.microsoft.com
0.0.0.0 cs1.wpc.v0cdn.net
Da befinden sich 69005 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2483748350-3972836390-758131696-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alex\Desktop\1470770154987.jpg
DNS Servers: 192.168.0.1 - 192.168.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupreg: Adobe Creative Cloud => "c:\program files (x86)\adobe\adobe creative cloud\acc\creative cloud.exe" --showwindow=false --onosstartup=true
MSCONFIG\startupreg: Dropbox => "c:\program files (x86)\dropbox\client\dropbox.exe" /systemstartup
MSCONFIG\startupreg: OneDrive.exe => "C:\Users\Alex\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Veeam.EndPoint.Tray.exe"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run32: => "vmware-tray.exe"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "CAM"
HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\StartupApproved\Run: => "Advanced SystemCare 8"
HKU\S-1-5-21-2483748350-3972836390-758131696-1001\...\StartupApproved\Run: => "BlueStacks Agent"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{6490AEF9-4A9D-47E2-B7FA-9F9858A9308D}] => (Allow) E:\Games\Steam\SteamApps\common\Pink Hour\PinkHour.exe
FirewallRules: [{36080946-29D0-499C-ACD9-868F5191EB97}] => (Allow) E:\Games\Steam\SteamApps\common\Pink Hour\PinkHour.exe
FirewallRules: [{FCC2AF5F-50BA-4757-B1F4-847FA4FDA362}] => (Allow) D:\games\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{F7C89466-F676-40C6-80C0-D64491762BE0}] => (Allow) D:\games\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{7EF8AB58-69D8-4967-98F6-7C0E45C96CFE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3DBBB961-2180-42C0-B46D-FEFD7E685A53}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0D1C8958-0092-4268-8D9C-62400608E233}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\VeeamDeploymentSvc.exe
FirewallRules: [{35250DC3-EEE0-4186-A7E5-8B027C39E648}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\VeeamDeploymentSvc.exe
FirewallRules: [{B92E938D-B1FF-4886-AA0E-5F751217457D}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x86\VeeamAgent.exe
FirewallRules: [{AD6B82EE-8526-4CF7-B19B-03112641167D}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x86\VeeamAgent.exe
FirewallRules: [{0D1352AC-58A7-45AC-8C77-6619AEDD306C}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x64\VeeamAgent.exe
FirewallRules: [{E29F9070-804E-4A11-837D-ECCFFC50170E}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x64\VeeamAgent.exe
FirewallRules: [{89AC490D-F783-4BC6-9E66-CC1E8DD7307A}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe
FirewallRules: [{95F8D76F-1C4D-4B8C-BA29-2B845BA5475E}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe
FirewallRules: [{FD64343E-ACBF-4201-80EC-2AA548AB807F}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Recovery.exe
FirewallRules: [{D9F4495E-5650-45B2-BE3D-5631D726107D}] => (Allow) E:\Games\Steam\SteamApps\common\Volgarr\Volgarr.exe
FirewallRules: [{56C9A3AD-CE36-47A8-A5C3-1464F8E017C3}] => (Allow) E:\Games\Steam\SteamApps\common\Volgarr\Volgarr.exe
FirewallRules: [{E932C988-8F86-4917-9568-44BBE70BFFC0}] => (Allow) E:\Games\Steam\SteamApps\common\Natural Selection 2\ns2.exe
FirewallRules: [{6E6B076F-733D-4C27-8EF4-6301F84E2284}] => (Allow) E:\Games\Steam\SteamApps\common\Natural Selection 2\ns2.exe
FirewallRules: [{FFFBCEFD-5784-4CE1-8B39-18B99B9BFAFD}] => (Allow) E:\Games\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{459E6354-8144-4D35-86AA-3D57ED8B15D9}] => (Allow) E:\Games\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{45E25BAF-5663-4085-8F85-63466DF72CA1}] => (Allow) E:\Games\Steam\SteamApps\common\Synergy\hl2.exe
FirewallRules: [{54F7D824-FE3D-49CE-BC9B-B9CA1EC96A2B}] => (Allow) E:\Games\Steam\SteamApps\common\Synergy\hl2.exe
FirewallRules: [{B91FF26E-A56A-4398-8BD0-56CCF6E9D1A8}] => (Allow) E:\Games\Steam\SteamApps\common\Oddworld Abes Oddysee\AbeWin.exe
FirewallRules: [{99151908-B97F-48D6-82A0-DF8A134D9A90}] => (Allow) E:\Games\Steam\SteamApps\common\Oddworld Abes Oddysee\AbeWin.exe
FirewallRules: [{CC376E11-CD19-46BA-B13D-57A8B31E95A4}] => (Allow) E:\Games\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{84F08A49-C529-4655-A084-0619D8BB4FD0}] => (Allow) E:\Games\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{A5F4D614-00B8-4890-A2C8-3A1C389E4356}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{E2BAD689-C9E8-4573-9ABA-6DE8B7F26B2A}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{829F7038-0921-488A-AF1F-C61DD9D3EFF8}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{A222B4EE-399F-4722-B472-0F67732B345E}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{CCA45BFE-2782-4973-9CA1-7D3A3689CB90}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{33256C9C-472B-4278-8479-D0ED6705F80B}] => (Allow) E:\Games\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{0450CEE7-34CC-44F9-9AF3-467D24B82464}] => (Allow) E:\Games\Steam\SteamApps\common\Portal Stories Mel\portal2.exe
FirewallRules: [{05A1EBCD-3369-41EF-8553-E22F063BC65A}] => (Allow) E:\Games\Steam\SteamApps\common\Portal Stories Mel\portal2.exe
FirewallRules: [{BD70BDAB-F4DD-4474-8D79-4FEFEE91C348}] => (Allow) E:\Games\Steam\SteamApps\common\Relic Hunters Zero\RelicHuntersZero.exe
FirewallRules: [{EA9B0B4E-52F7-4476-A658-0CE147A5B898}] => (Allow) E:\Games\Steam\SteamApps\common\Relic Hunters Zero\RelicHuntersZero.exe
FirewallRules: [{D2BABB2B-822A-4F76-A007-DBECBADB10B3}] => (Allow) LPort=53
FirewallRules: [{3B29DEAB-6A0A-4AA9-8AD4-E28AC315E5BD}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{1505B97F-1445-417C-9BD6-056C466228D6}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{7AD415DE-53F7-4644-9CDF-DA49697AD589}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{0C9ADF8A-3C3A-4AC7-9A65-27E575F18B05}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{15255779-C812-43D8-B45F-BFE79BEA5DB6}] => (Allow) E:\Games\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{10F47697-79B3-46DE-861A-E11CF8AA3676}] => (Allow) E:\Games\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{60FBE34D-98A4-4320-B22E-C66A6B89B335}] => (Allow) E:\Games\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{A60C2001-595F-41B4-98AA-395E11C2B195}] => (Allow) E:\Games\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{A30760A1-FD70-4983-9201-966BCEBE2879}] => (Allow) E:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{54AD116D-03B7-4D81-878C-04A4EA5A6EC9}] => (Allow) E:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{DF7A7990-3116-45BC-AD13-8D721839D540}] => (Allow) E:\Games\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{899646CF-715B-491D-A3E1-A0123D511C09}] => (Allow) E:\Games\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{0D1EDF0A-DBB6-40EF-A78E-FF07B9C86D2A}] => (Allow) E:\Games\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{57A61628-6E25-43F9-B4AE-C2BD28BEFBD5}] => (Allow) E:\Games\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{9712E555-B5B0-4E64-9ECB-C8D981CC8F59}] => (Allow) E:\Games\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe
FirewallRules: [{95AFCD82-3509-43DB-B524-4377C86E9246}] => (Allow) E:\Games\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe
FirewallRules: [{4452CABE-AF18-4BD7-8B6D-F0FADD2C89E7}] => (Allow) E:\Games\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [{384EDE21-9931-46A0-931A-014D79AD0FF2}] => (Allow) E:\Games\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [TCP Query User{12E88E80-965F-4A59-A353-699D09345D45}C:\users\alex\desktop\sdi_r401\sdi_x64_r420.exe] => (Allow) C:\users\alex\desktop\sdi_r401\sdi_x64_r420.exe
FirewallRules: [UDP Query User{1EE0B32E-5125-4ACC-B236-77D5B9826BAE}C:\users\alex\desktop\sdi_r401\sdi_x64_r420.exe] => (Allow) C:\users\alex\desktop\sdi_r401\sdi_x64_r420.exe
FirewallRules: [TCP Query User{7848D393-4DF3-4F72-A7CC-CD279695B34F}C:\users\alex\desktop\snappy driver installer\sdi_x64_r420.exe] => (Allow) C:\users\alex\desktop\snappy driver installer\sdi_x64_r420.exe
FirewallRules: [UDP Query User{9583E9DB-5039-4C4C-9AF0-A6D839E12F30}C:\users\alex\desktop\snappy driver installer\sdi_x64_r420.exe] => (Allow) C:\users\alex\desktop\snappy driver installer\sdi_x64_r420.exe
FirewallRules: [TCP Query User{AA0581B4-0C19-438F-AEE6-717E70E2FC9D}E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe] => (Allow) E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe
FirewallRules: [UDP Query User{EB809BC4-49B1-4357-B390-470ED1BFC032}E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe] => (Allow) E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe
FirewallRules: [{5E068214-47ED-4C00-8256-F3D5A81DD9BE}] => (Allow) E:\Games\Steam\SteamApps\common\Rex Rocket\Rex Rocket.exe
FirewallRules: [{6E723DA7-F1E2-4DA2-8B11-116E0902103B}] => (Allow) E:\Games\Steam\SteamApps\common\Rex Rocket\Rex Rocket.exe
FirewallRules: [{D6E87DE4-8688-4DD6-A838-21FEC972A185}] => (Allow) E:\Games\Steam\SteamApps\common\Pink Heaven\PinkHeaven.exe
FirewallRules: [{8B4F7A06-99B1-4C4F-B110-C1ABD010B604}] => (Allow) E:\Games\Steam\SteamApps\common\Pink Heaven\PinkHeaven.exe
FirewallRules: [{7B48B7D1-068A-40ED-BE2E-723ACCDC1A87}] => (Allow) E:\Games\Steam\SteamApps\common\Dr.Green\Dr.Green.exe
FirewallRules: [{B87D5E16-1467-48BF-AD43-D1B27383518C}] => (Allow) E:\Games\Steam\SteamApps\common\Dr.Green\Dr.Green.exe
FirewallRules: [{3314210D-15EB-45BA-AE74-FF5E4289A0E7}] => (Allow) E:\Games\Steam\SteamApps\common\Little Racers STREET\LittleRacersStreet.exe
FirewallRules: [{0F652822-1220-45AC-89AE-09948C21E9D8}] => (Allow) E:\Games\Steam\SteamApps\common\Little Racers STREET\LittleRacersStreet.exe
FirewallRules: [{8C6BE836-B5C3-4A55-980B-3C1182979BF2}] => (Allow) E:\Games\Steam\SteamApps\common\Dr Langeskov, The Tiger, and The Terribly Cursed Emerald A Whirlwind Heist\DrLangeskov.exe
FirewallRules: [{3E7A1ED5-3D50-4274-9B31-B45F2A56747C}] => (Allow) E:\Games\Steam\SteamApps\common\Dr Langeskov, The Tiger, and The Terribly Cursed Emerald A Whirlwind Heist\DrLangeskov.exe
FirewallRules: [TCP Query User{B4D6610B-3996-4F23-8BF5-683E46530658}C:\users\alex\desktop\snappy driver installer\sdi_x64_r423.exe] => (Allow) C:\users\alex\desktop\snappy driver installer\sdi_x64_r423.exe
FirewallRules: [UDP Query User{CC3AD0CD-C8FB-4165-B443-13EC0BBB766A}C:\users\alex\desktop\snappy driver installer\sdi_x64_r423.exe] => (Allow) C:\users\alex\desktop\snappy driver installer\sdi_x64_r423.exe
FirewallRules: [{ED1661D4-3134-4EFE-97DC-CE84408BFB0E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{47E3296E-0B28-471D-8498-3A29FFAE4F1D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{91E874FC-4E99-4AC9-9EF4-740682373C60}] => (Allow) E:\Games\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{B232E165-125B-44F4-8D90-7B445260E8F8}] => (Allow) E:\Games\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [TCP Query User{BE257AC2-8B59-4429-85C1-3A6218159F80}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [UDP Query User{D29F03C2-FF70-42F8-AAB4-1523ABA76350}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{19F3B0A6-5006-4791-B774-2C67D763125A}] => (Allow) E:\Games\Steam\SteamApps\common\Velocibox\Velocibox.exe
FirewallRules: [{CA6AF4D4-A461-42AA-8182-46B881B51460}] => (Allow) E:\Games\Steam\SteamApps\common\Velocibox\Velocibox.exe
FirewallRules: [{0244A05A-D90F-46CD-9C66-14918DDDE770}] => (Allow) E:\Games\Steam\SteamApps\common\Dungeons & Dragons HD\ManaGame.exe
FirewallRules: [{8B4D1D0A-23EA-466E-9D1C-FC1F258C596C}] => (Allow) E:\Games\Steam\SteamApps\common\Dungeons & Dragons HD\ManaGame.exe
FirewallRules: [{E1C92109-A2B5-4478-A995-D69E4BE6B148}] => (Allow) LPort=53
FirewallRules: [{844ECD56-25E7-4789-B517-585A7E69A78A}] => (Allow) C:\PROGRA~2\netis\USB Wireless LAN Utility\RtWlan.exe
FirewallRules: [{D936315D-A8A2-4D1A-BFF8-434F6FF1E4A8}] => (Allow) LPort=1542
FirewallRules: [{E6A9F87F-1EB1-48BD-B895-7AD56801EC78}] => (Allow) LPort=1542
FirewallRules: [{8785EE22-1E8F-4BAB-A833-33727DE65D4F}] => (Allow) LPort=53
FirewallRules: [{C0609653-B60A-4109-8253-78315C3CC5D4}] => (Allow) C:\PROGRA~2\netis\USB Wireless LAN Utility\Rtldhcp.exe
FirewallRules: [{C24D3C84-A200-4E57-859D-E85E1505AA34}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{0950C022-519A-4E2A-91BE-8FCBCED85E62}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{4E4F91FF-FC83-4A2C-9595-0922DD2A18AA}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{88761B9A-179A-4295-80A1-516EABEAEA08}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{B5250A9D-4BC7-4AF7-BB5E-DF0A18AC027C}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{81C476A3-48DE-4794-BE89-8A668ECC4762}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{8F3BCCF8-7DA6-46BE-9582-68A785A22C10}] => (Allow) E:\Games\Steam\SteamApps\common\Distance\Distance.exe
FirewallRules: [{0F2349FE-F070-4EA4-AAB4-47CE808C5249}] => (Allow) E:\Games\Steam\SteamApps\common\Distance\Distance.exe
FirewallRules: [{3F425BD1-F682-457A-9739-3E2C08689ADA}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{88757D6A-DD8E-40BA-83B2-101E2FB1C451}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{70332F43-50CE-420A-8AB8-70A8AB242A92}] => (Block) C:\Windows\explorer.exe
FirewallRules: [{7E137DA9-1F7D-435F-B8E9-2683EADD3A3F}] => (Allow) E:\Games\Steam\SteamApps\common\Love\Love.exe
FirewallRules: [{87375281-6223-4440-B13E-E7DF8D34C995}] => (Allow) E:\Games\Steam\SteamApps\common\Love\Love.exe
FirewallRules: [{EB596C1A-0E92-4165-9C59-75FA11C206B3}] => (Allow) E:\Games\Steam\SteamApps\common\Princess Remedy\remedy_gm7.exe
FirewallRules: [{149D4020-9CA0-4A90-B394-6ABA23E90E31}] => (Allow) E:\Games\Steam\SteamApps\common\Princess Remedy\remedy_gm7.exe
FirewallRules: [{BF125CB7-2C55-4076-B4A5-F248D8B48BD3}] => (Allow) E:\Games\Steam\SteamApps\common\Princess Remedy\remedy_gm5.exe
FirewallRules: [{C50946A9-0FED-403E-AF9F-FD34879AE3FF}] => (Allow) E:\Games\Steam\SteamApps\common\Princess Remedy\remedy_gm5.exe
FirewallRules: [{5CA9E828-2000-4EA7-B3D3-5D60A66040EE}] => (Allow) E:\Games\Steam\SteamApps\common\Downwell\Downwell.exe
FirewallRules: [{3015C0CA-9548-4274-AD5B-6191E06AA459}] => (Allow) E:\Games\Steam\SteamApps\common\Downwell\Downwell.exe
FirewallRules: [{8B286336-EB78-4853-95B5-B8DA7CB4B61A}] => (Allow) E:\Games\Steam\SteamApps\common\Abomination Tower\AbominationTower.exe
FirewallRules: [{FE0AD0ED-5BF9-4C6B-8B2D-689CD10EA9CF}] => (Allow) E:\Games\Steam\SteamApps\common\Abomination Tower\AbominationTower.exe
FirewallRules: [{7F50CF65-6329-4F48-B9D4-C902FC26FD1B}] => (Allow) E:\Games\Steam\SteamApps\common\1001 Spikes\1001 Spikes.exe
FirewallRules: [{DA305839-293E-49AA-BD73-62F33EB53E45}] => (Allow) E:\Games\Steam\SteamApps\common\1001 Spikes\1001 Spikes.exe
FirewallRules: [{7516F700-B23B-4268-B9A5-25C6D1D07124}] => (Allow) E:\Games\Steam\SteamApps\common\Sega Classics\SEGAGenesisClassics.exe
FirewallRules: [{4F20D257-3BA1-45B6-935B-B3F8B3F97AEF}] => (Allow) E:\Games\Steam\SteamApps\common\Sega Classics\SEGAGenesisClassics.exe
FirewallRules: [{7498DFA9-7A8E-4E05-8134-D89B4CD238A7}] => (Allow) E:\Games\Steam\SteamApps\common\Hell Yeah\HELLYEAH.exe
FirewallRules: [{CD11ED13-801B-43C3-8A9E-0853AC4C9BC2}] => (Allow) E:\Games\Steam\SteamApps\common\Hell Yeah\HELLYEAH.exe
FirewallRules: [{806DD2CF-C5AD-4C13-900D-E360A68738C5}] => (Allow) E:\Games\Steam\SteamApps\common\Jet Set Radio\jsrsetup.exe
FirewallRules: [{65B55875-D4D4-4790-B282-92C6B431468A}] => (Allow) E:\Games\Steam\SteamApps\common\Jet Set Radio\jsrsetup.exe
FirewallRules: [{3E15E3A9-E872-4D53-93DF-54E8564564B7}] => (Allow) E:\Games\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{EC67EBAB-4AA3-43A3-804E-3DCDE1E7A563}] => (Allow) E:\Games\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{B4FC6430-43D4-4222-86A7-9979B3890A37}] => (Allow) E:\Games\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe
FirewallRules: [{00B44047-8A17-4287-9683-64519CAA0609}] => (Allow) E:\Games\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe
FirewallRules: [{F29C8414-A781-4DA5-86D8-206A795EE376}] => (Allow) E:\Games\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe
FirewallRules: [{785007B9-732F-40AC-BD5B-97167A5115C6}] => (Allow) E:\Games\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe
FirewallRules: [{E922666A-F124-4908-8C0D-DD61ED11CAD6}] => (Allow) LPort=9143
FirewallRules: [{015095E1-5B39-4FA6-A13C-6EF80998E5F5}] => (Allow) LPort=2333
FirewallRules: [TCP Query User{D8239C8E-1C1F-41A5-9DCF-46CC43B8AE19}C:\program files (x86)\hlsw\hlsw.exe] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [UDP Query User{75B08C4F-FD48-46DD-A080-2AEB46259A29}C:\program files (x86)\hlsw\hlsw.exe] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [TCP Query User{8F9C6281-F13F-456C-9215-06059F7C4C35}E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe] => (Block) E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe
FirewallRules: [UDP Query User{97D6ED01-32F6-4E50-B1BE-629064897409}E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe] => (Block) E:\games\steam\steamapps\common\awesomenauts\awesomenauts.exe
FirewallRules: [TCP Query User{A70DECAB-9D3E-48D2-AA86-673C7F392A31}E:\programme\portableapps\snappy driver installer\sdi_x64_r439.exe] => (Block) E:\programme\portableapps\snappy driver installer\sdi_x64_r439.exe
FirewallRules: [UDP Query User{3C74DC4E-E571-43F9-A6AC-75D5EA3DFDE5}E:\programme\portableapps\snappy driver installer\sdi_x64_r439.exe] => (Block) E:\programme\portableapps\snappy driver installer\sdi_x64_r439.exe
FirewallRules: [{A2ACC95A-9B0D-4177-84A0-DA399E912BE1}] => (Allow) E:\Games\Steam\SteamApps\common\Sega Classics\SEGAGameRoom.exe
FirewallRules: [{F243A061-4336-4482-8735-4F36397BC4B7}] => (Allow) E:\Games\Steam\SteamApps\common\Sega Classics\SEGAGameRoom.exe
FirewallRules: [{D2864D49-23B5-470B-8875-94893D5A1E06}] => (Allow) E:\Games\Steam\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{D29C36F5-1D92-4FE3-A6C6-2073B1E1D862}] => (Allow) E:\Games\Steam\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{7BC4E624-4786-445C-88D6-7DB65A8EF6F2}] => (Allow) E:\Games\Steam\SteamApps\common\JumpJetRex\JumpJetRex.exe
FirewallRules: [{90EE7560-F578-4420-B747-6E3344D2B311}] => (Allow) E:\Games\Steam\SteamApps\common\JumpJetRex\JumpJetRex.exe
FirewallRules: [{2E7F38CE-98D6-4A52-AB79-8717F3D78AF8}] => (Allow) E:\Games\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{05275F9D-9714-4399-87B1-B2C9C83B04F7}] => (Allow) E:\Games\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{328EDFEC-FB0C-4D95-96EF-6F90CC78632B}] => (Allow) E:\Games\Steam\SteamApps\common\Coin Crypt\PC\CoinCrypt-win.exe
FirewallRules: [{DDCF42D9-02D7-4817-873C-C79928C5F459}] => (Allow) E:\Games\Steam\SteamApps\common\Coin Crypt\PC\CoinCrypt-win.exe
FirewallRules: [{584BFE2D-04B7-4EC4-B8C1-4DE7AFB06550}] => (Allow) E:\Games\Steam\SteamApps\common\Awesomenauts\AwesomenautsLauncher.exe
FirewallRules: [{C210E2CD-3DA5-4021-BF7B-340EB7F1EC54}] => (Allow) E:\Games\Steam\SteamApps\common\Awesomenauts\AwesomenautsLauncher.exe
FirewallRules: [{3A27B2CA-8EFE-4D5E-A8C5-1A5423559BA8}] => (Allow) E:\Games\Steam\SteamApps\common\Absolute Drift\AbsoluteDrift.exe
FirewallRules: [{A0A548A8-2347-483A-B526-F961E15602CE}] => (Allow) E:\Games\Steam\SteamApps\common\Absolute Drift\AbsoluteDrift.exe
FirewallRules: [{B54B6A0E-DD45-4DFE-8B10-EA0D6EAE5DC6}] => (Allow) E:\Games\Steam\SteamApps\common\Forge of Gods (RPG)\fog.exe
FirewallRules: [{437BB7A5-467C-4062-A74B-DEEF7D4FAA13}] => (Allow) E:\Games\Steam\SteamApps\common\Forge of Gods (RPG)\fog.exe
FirewallRules: [{1DA51694-BFA7-40DB-8EEA-249B291EE38C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{39E4A211-5410-44AB-A210-0B60EDCC8A5F}] => (Allow) E:\Games\Steam\SteamApps\common\Prompt\Prompt.exe
FirewallRules: [{482C6A35-3D4F-4494-A612-EC0A099EC688}] => (Allow) E:\Games\Steam\SteamApps\common\Prompt\Prompt.exe
FirewallRules: [{28CE0834-9D43-4E2A-A712-293C46220376}] => (Allow) E:\Games\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{FA0EAC93-07DA-4CC2-82C4-D5AA88EFD321}] => (Allow) E:\Games\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{9507981B-9A61-42B6-B637-6945DA99DB45}] => (Allow) E:\Games\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{58A56C7C-849A-4738-9466-06ED7E44F973}] => (Allow) E:\Games\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{581F9AF4-E9E8-4416-A5CE-03778DD39C46}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{89C0D9EA-2C2C-4B84-A951-949226921E12}] => (Allow) E:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{1CED7354-F562-4E89-AFC1-C7937D12B2CD}] => (Allow) E:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{A5C8467A-E3AB-4B78-8370-3B1555BBECEC}] => (Allow) E:\Games\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{BF69DEA0-0B9A-4F25-B492-0F0C5E976C97}] => (Allow) E:\Games\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{85ED2473-5897-4778-ADC5-5B165E38E3FC}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{F8140A37-E25D-45A8-AE93-31D79EE20DD3}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{996C46F7-5990-447B-A0E8-0F9ED2307F6A}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win32\mod_uploader.exe
FirewallRules: [{AC5A548B-59F5-40E3-AC04-B91DFCD4C45F}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win32\mod_uploader.exe
FirewallRules: [{A513E2D1-4364-4FD3-B3DA-51A27E743E71}] => (Allow) E:\Games\Steam\SteamApps\common\FEZ\FEZ.exe
FirewallRules: [{B9A84720-7F3E-47FC-B8A7-FAB8CA40821F}] => (Allow) E:\Games\Steam\SteamApps\common\FEZ\FEZ.exe
FirewallRules: [{ED540DC7-6AF4-4CE2-919D-5A6293A6D391}] => (Allow) E:\Games\Steam\SteamApps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{FA009468-E19E-45DE-9A6B-F4F3AAF940F4}] => (Allow) E:\Games\Steam\SteamApps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{66F99389-DDE8-46E5-88EE-187B4D79BD3E}] => (Allow) E:\Games\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{275E35C2-B9CF-4E86-9659-3088988BE2C3}] => (Allow) E:\Games\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{19F366FB-EE7E-4C6C-BAC2-7F924F8882BF}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{190C2216-9EBF-4B8C-9A6A-FC75C648844C}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{5E200001-E65F-4F96-A8B1-067457283004}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{62EF1270-4952-4C07-91CA-20ED78430BC0}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{D6756D7E-67DC-475D-A436-A33B29A44180}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{1130222E-B10A-406D-A0EE-3B8753207FE9}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{77540BD8-E7A9-4B71-B1D8-76196B0A6703}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{93605871-5B91-407F-9313-915B1AE6B224}] => (Allow) E:\Games\Steam\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{240D8B3F-17BA-41AC-AC6A-2816679CD46B}] => (Allow) E:\Games\Steam\SteamApps\common\Awesomenauts\Beta\AwesomenautsLauncher.exe
FirewallRules: [{3E45C846-D231-4F46-ADDD-E880D2F252A4}] => (Allow) E:\Games\Steam\SteamApps\common\Awesomenauts\Beta\AwesomenautsLauncher.exe
==================== Wiederherstellungspunkte =========================
03-10-2016 12:29:22 Windows Modules Installer
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/03/2016 12:07:57 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst ".NETFramework" in der DLL "C:\WINDOWS\system32\mscoree.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (10/03/2016 11:45:36 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm egui.exe, Version 9.0.395.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 11fc
Startzeit: 01d21d5acc9b0dea
Beendigungszeit: 4294967295
Anwendungspfad: C:\Program Files\ESET\ESET Smart Security\egui.exe
Berichts-ID: 1cfe6c4c-894e-11e6-9cfb-068d38ab59cf
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Error: (10/03/2016 11:44:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 49.0.1.6109 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 25b8
Startzeit: 01d21d4db309890e
Beendigungszeit: 4294967295
Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe
Berichts-ID: f58da541-894d-11e6-9cfa-d0509910ed48
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Error: (10/02/2016 08:06:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (10/02/2016 08:02:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (10/02/2016 02:58:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Love.exe, Version: 1.0.0.5, Zeitstempel: 0x56cdc38d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x2534
Startzeit der fehlerhaften Anwendung: 0x01d21ca7a50407c7
Pfad der fehlerhaften Anwendung: E:\Games\Steam\steamapps\common\Love\Love.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 3a61679e-9d22-4f91-a0b7-fd6ef84fb9d6
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/02/2016 12:31:37 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (09/28/2016 04:58:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (09/25/2016 10:34:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ALEX-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (09/25/2016 10:34:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ALEX-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (10/03/2016 01:05:11 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (10/03/2016 01:04:23 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (10/03/2016 01:03:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Realtek DHCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/03/2016 12:35:12 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (10/03/2016 12:34:42 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (10/03/2016 12:34:12 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (10/03/2016 12:33:53 PM) (Source: DCOM) (EventID: 10016) (User: ALEX-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "ALEX-PC\Alex" (SID: S-1-5-21-2483748350-3972836390-758131696-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
im Anwendungscontainer "Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/03/2016 12:33:53 PM) (Source: DCOM) (EventID: 10016) (User: ALEX-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "ALEX-PC\Alex" (SID: S-1-5-21-2483748350-3972836390-758131696-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
im Anwendungscontainer "Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/03/2016 12:33:53 PM) (Source: DCOM) (EventID: 10016) (User: ALEX-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "ALEX-PC\Alex" (SID: S-1-5-21-2483748350-3972836390-758131696-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
im Anwendungscontainer "Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/03/2016 12:33:53 PM) (Source: DCOM) (EventID: 10016) (User: ALEX-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "ALEX-PC\Alex" (SID: S-1-5-21-2483748350-3972836390-758131696-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
im Anwendungscontainer "Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
CodeIntegrity:
===================================
Date: 2016-10-03 12:55:26.017
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-10-03 12:38:52.450
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-29 15:29:42.458
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-19 15:59:55.662
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-18 10:38:23.251
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-16 19:32:24.901
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-16 06:37:36.929
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-13 18:21:19.673
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-12 18:14:07.980
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-09-11 12:11:50.350
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 8134.13 MB
Verfügbarer physikalischer RAM: 4322.41 MB
Summe virtueller Speicher: 12998.13 MB
Verfügbarer virtueller Speicher: 8407.3 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:111.3 GB) (Free:14.77 GB) NTFS
Drive d: (Windows) (Fixed) (Total:150.07 GB) (Free:104.89 GB) NTFS
Drive e: (Programme) (Fixed) (Total:1024.1 GB) (Free:81.59 GB) NTFS
Drive f: (Daten) (Fixed) (Total:1619.83 GB) (Free:72.6 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 18933830)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 2794.5 GB) (Disk ID: E48DA330)
Partition: GPT.
==================== Ende von Addition.txt ============================
Das selber passiert übrigens auch, wenn der PC aus dem Standby hochfährt. Kein Internet und gleiche Prozessorauslastung. Nach 2 Minuten geht alles wieder.
lag an hostsman / hosts list (70k einträge), muss schauen was ich dagegen machen kann. |
svchost.exe - 25% CPU Auslastung & kein WLAN für 2 min. bei Systemstart [FRST vorhanden]
(https://www.trojaner-board.de/182114-svchost-exe-25-cpu-auslastung-kein-wlan-2-min-systemstart-frst-vorhanden.html)