Ups, da war's dann doch schon wieder zu spät in der Nacht. :rolleyes: FRST: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:04-10-2015
durchgeführt von xxx (Administrator) auf GT70 (07-10-2015 01:02:30)
Gestartet von D:\Users\xxx\Desktop
Geladene Profile: xxx & UpdatusUser (Verfügbare Profile: xxx & UpdatusUser)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) D:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) D:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) D:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(MSI) C:\Program Files (x86)\SCM\Radio Manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) D:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Radio Manager] => C:\Program Files (x86)\SCM\Radio Manager.exe [406920 2013-03-01] (MSI)
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [407968 2013-03-01] (MSI)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3009336 2012-11-15] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => D:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [KLM] => C:\Program Files (x86)\MSI\KLM\KLM.exe [1566344 2014-04-08] (Micro-Star International Co., Ltd.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\Run: [Spotify Web Helper] => C:\Users\xxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-05] (Spotify Ltd)
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\Run: [Spotify Web Helper] => C:\Users\xxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-05] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [178632 2014-12-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [165760 2014-12-13] (NVIDIA Corporation)
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-11-07]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2014-06-26]
ShortcutTarget: GameRanger.lnk -> C:\Users\xxx\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{970334C9-A264-483D-9404-04A7A3376886}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://msi13.msn.com/
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-11] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-11] (Oracle Corporation)
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-04-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-04-11] (Oracle Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-06-07] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-1675691969-3276210653-1386313587-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-06-07] (Pando Networks)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-28]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-08-28]
CHR Extension: (YouTube) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-28]
CHR Extension: (Google Cast) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2015-08-28]
CHR Extension: (Adblock Plus) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-28]
CHR Extension: (Google-Suche) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-28]
CHR Extension: (Proxy SwitchySharp) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2015-08-28]
CHR Extension: (Google Tabellen) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-28]
CHR Extension: (FoxyProxy Standard) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcknhkkoolaabfmlnjonogaaifnjlfnp [2015-08-28]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: („Pin it“-Button) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-09-30]
CHR Extension: (Steam Client - Theme) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbhplmipadeglinhcimkaojamdbkllmj [2015-08-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-28]
CHR Extension: (Mein Chrome-Design) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2015-08-28]
CHR Extension: (ScriptSafe) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2015-08-28]
CHR Extension: (Enhanced Steam) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2015-08-28]
CHR Extension: (Google Mail) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-28]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-11-07] (Adobe Systems) [Datei ist nicht signiert]
S2 AntiVirMailService; D:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-08-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; D:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; D:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-27] (Avira Operations GmbH & Co. KG)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1141248 2015-06-29] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [239376 2015-09-13] (EasyAntiCheat Ltd)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2013-03-01] (Micro-Star International Co., Ltd.) [Datei ist nicht signiert]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-11-15] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S4 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-17] (Electronic Arts)
S4 SkypeUpdate; D:\Program Files (x86)\Skype\Updater\Updater.exe [315488 2015-02-18] (Skype Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-11-15] (Intel® Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137288 2015-08-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-08-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-11] (Avira Operations GmbH & Co. KG)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-15] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 XFDriver64; D:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-05 20:40 - 2015-10-07 00:47 - 00001276 _____ C:\Windows\setupact.log
2015-10-05 20:40 - 2015-10-05 20:40 - 00000834 _____ C:\Windows\PFRO.log
2015-10-05 20:40 - 2015-10-05 20:40 - 00000000 _____ C:\Windows\setuperr.log
2015-09-30 22:32 - 2015-09-30 22:32 - 00001385 _____ C:\Users\xxx\Desktop\JRT.txt
2015-09-30 22:19 - 2015-09-30 22:20 - 00000000 ____D C:\AdwCleaner
2015-09-24 14:54 - 2015-09-24 14:54 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-09-24 12:54 - 2015-09-24 12:54 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-09-24 12:54 - 2015-09-24 12:54 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Image-Line
2015-09-24 12:54 - 2015-09-24 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-09-24 12:54 - 2015-09-24 12:54 - 00000000 ____D C:\Program Files\Image-Line
2015-09-24 12:54 - 2015-09-24 12:54 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-09-24 12:39 - 2015-09-24 14:54 - 00000000 ____D C:\Program Files (x86)\Image-Line
2015-09-17 17:48 - 2015-09-17 17:48 - 00000000 ____D C:\Users\xxx\AppData\LocalLow\Hello There
2015-09-14 23:23 - 2015-09-14 23:23 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-09-14 23:23 - 2015-09-14 23:23 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-09-14 23:23 - 2015-09-14 23:23 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-09-14 23:23 - 2015-09-14 23:23 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2015-09-14 23:23 - 2015-09-14 23:23 - 00000000 ____D C:\Program Files (x86)\OpenAL
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-07 01:02 - 2014-07-13 02:26 - 00000000 ____D C:\FRST
2015-10-07 01:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-10-07 00:50 - 2015-08-30 16:36 - 01539658 _____ C:\Windows\WindowsUpdate.log
2015-10-07 00:47 - 2014-04-09 07:27 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-06 07:41 - 2014-04-11 10:02 - 00000000 ____D C:\Users\xxx\AppData\Local\Spotify
2015-10-06 07:39 - 2014-04-11 10:01 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Spotify
2015-10-06 07:32 - 2014-04-09 07:27 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-05 20:45 - 2013-08-23 01:24 - 00766620 _____ C:\Windows\system32\perfh007.dat
2015-10-05 20:45 - 2013-08-23 01:24 - 00159902 _____ C:\Windows\system32\perfc007.dat
2015-10-05 20:45 - 2013-08-22 10:53 - 01780340 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-05 20:40 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-05 20:36 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-10-04 02:08 - 2014-04-11 10:58 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Skype
2015-09-30 06:15 - 2014-04-11 11:26 - 00000000 ____D C:\Users\xxx\AppData\Local\Battle.net
2015-09-29 07:49 - 2014-04-11 13:21 - 00000000 ____D C:\ProgramData\Origin
2015-09-29 00:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-09-27 08:25 - 2014-06-12 08:18 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Guild Wars 2
2015-09-26 03:46 - 2014-04-11 12:25 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-26 02:52 - 2013-08-22 11:00 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1675691969-3276210653-1386313587-1001
2015-09-17 14:00 - 2013-08-22 16:44 - 00375480 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-17 13:54 - 2013-08-22 15:25 - 00000092 _____ C:\Windows\win.ini
2015-09-17 11:45 - 2013-08-22 10:55 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Adobe
2015-09-17 10:27 - 2014-04-09 07:27 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-17 10:27 - 2014-04-09 07:27 - 00003864 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-14 21:13 - 2014-04-09 07:27 - 00000000 ____D C:\Users\xxx\AppData\Local\Google
2015-09-14 00:49 - 2015-05-06 00:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2015-09-13 23:08 - 2014-09-05 04:11 - 00239376 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-08-25 09:31 - 2013-08-25 09:31 - 0000027 _____ () C:\Users\xxx\AppData\Local\killertool.log
2014-09-26 02:40 - 2014-09-26 02:40 - 0007634 _____ () C:\Users\xxx\AppData\Local\Resmon.ResmonCfg
Einige Dateien in TEMP:
====================
C:\Users\xxx\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-09-18 20:16
==================== Ende von FRST.txt ============================
Addition: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:04-10-2015
durchgeführt von xxx (2015-10-07 01:02:50)
Gestartet von D:\Users\xxx\Desktop
Windows 8.1 (X64) (2013-08-22 08:55:17)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1675691969-3276210653-1386313587-500 - Administrator - Disabled)
Gast (S-1-5-21-1675691969-3276210653-1386313587-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-1675691969-3276210653-1386313587-1002 - Limited - Enabled) => C:\Users\UpdatusUser
xxx (S-1-5-21-1675691969-3276210653-1386313587-1001 - Administrator - Enabled) => C:\Users\xxx
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
Aberoth (HKLM-x32\...\Steam App 354200) (Version: - Jarbit)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Among Ripples (HKLM-x32\...\Steam App 341720) (Version: - Eat Create Sleep)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CAT Interstellar (HKLM-x32\...\Steam App 384740) (Version: - Ionized Games)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios)
CrystalDiskInfo 6.1.14 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.1.14 - Crystal Dew World)
Data Lifeguard Diagnostic for Windows 1.27 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Dead Realm (HKLM-x32\...\Steam App 352460) (Version: - Section Studios)
DH Driver Cleaner Professional Edition (HKLM-x32\...\Driver Cleaner Pro) (Version: Version 1.5 - Ruud Ketelaars)
Divinity: Original Sin (HKLM-x32\...\Steam App 230230) (Version: - Larian Studios)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dungeon of the Endless (HKLM-x32\...\Steam App 249050) (Version: - AMPLITUDE Studios)
Empyrion - Galactic Survival (HKLM-x32\...\Steam App 383120) (Version: - Eleon Game Studios)
EVE Online (HKLM-x32\...\Steam App 8500) (Version: - CCP)
Evochron Mercenary (HKLM-x32\...\Steam App 71000) (Version: - StarWraith 3D Games LLC)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Fraps (HKLM-x32\...\Fraps) (Version: - )
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - Subset Games)
GameRanger (HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\GameRanger) (Version: - GameRanger Technologies)
GameRanger (HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version: - Rockstar Games)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
Guns of Icarus Online (HKLM-x32\...\Steam App 209080) (Version: - Muse Games)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{0728A184-F899-4356-B93D-8228674F0DEB}) (Version: 2.6.1209.0268 - Motorola Solutions, Inc.)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{962E1735-D2E0-4813-AB9F-C6CBA09E759A}) (Version: 15.05.7000.1709 - Intel Corporation)
Interplanetary (HKLM-x32\...\Steam App 278910) (Version: - Team Jolly Roger)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
King Arthur's Gold (HKLM-x32\...\Steam App 219830) (Version: - )
Kingdom Wars (HKLM-x32\...\Steam App 227180) (Version: - Reverie World Studios, INC)
KLM (HKLM-x32\...\InstallShield_{4DEA5B85-6C56-45F3-AE00-FED756B0D3B4}) (Version: 1.0.1403.2801 - Application)
KLM (x32 Version: 1.0.1403.2801 - Application) Hidden
Kung Fury: Street Rage (HKLM-x32\...\Steam App 373180) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version: - Bitbox Ltd.)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Marvel Heroes 2015 (HKLM-x32\...\Steam App 226320) (Version: - Gazillion Entertainment)
Medieval Engineers (HKLM-x32\...\Steam App 333950) (Version: - Keen Software House)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Miscreated (HKLM-x32\...\Steam App 299740) (Version: - Entrada Interactive LLC)
Neverwinter (HKLM-x32\...\Steam App 109600) (Version: - Cryptic Studios)
NVIDIA Grafiktreiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Outlast (HKLM-x32\...\Steam App 238320) (Version: - Red Barrels)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version: - Uber Entertainment)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
Quake Live (HKLM-x32\...\Steam App 282440) (Version: - id Software)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28123 - Realtek Semiconductor Corp.)
Reign Of Kings (HKLM-x32\...\Steam App 344760) (Version: - Code}{atch)
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
Rodina (HKLM-x32\...\Steam App 314230) (Version: - Elliptic Games)
Sakura Clicker (HKLM-x32\...\Steam App 383080) (Version: - Winged Cloud)
SCM (HKLM\...\{C6C6E64E-6C48-47FE-A175-4C73C3A465CF}) (Version: 10.013.03016 - Application)
Sir, You Are Being Hunted (HKLM-x32\...\Steam App 242880) (Version: - Big Robot Ltd)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarMade (HKLM-x32\...\Steam App 244770) (Version: - Schine, GmbH)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Stellarium 0.13.3 (HKLM\...\Stellarium_is1) (Version: 0.13.3 - Stellarium team)
Stronghold HD (HKLM-x32\...\Steam App 40950) (Version: - FireFly Studios)
Stronghold Kingdoms (HKLM-x32\...\Steam App 47410) (Version: - FireFly Studios)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.1.2 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls Online: Tamriel Unlimited (HKLM-x32\...\Steam App 306130) (Version: - Zenimax Online Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
The Secret World (HKLM-x32\...\Steam App 215280) (Version: - Funcom)
Total War Battles: KINGDOM (HKLM-x32\...\Steam App 300080) (Version: - Creative Assembly)
Total War: Arena (HKLM-x32\...\Steam App 227520) (Version: - Creative Assembly)
Trove (HKLM-x32\...\Steam App 304050) (Version: - Trion Worlds)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Viridi (HKLM-x32\...\Steam App 375950) (Version: - Ice Water Games)
Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
Windows-Treiberpaket - ENE TECHNOLOGY INC. (WUDFRd) HIDClass (07/11/2012 1.0.7112.20593) (HKLM\...\B16388B2E5D3CBA8F0EE88A8C5459BADAF4DE251) (Version: 07/11/2012 1.0.7112.20593 - ENE TECHNOLOGY INC.)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
Xfire 2.0 (HKLM-x32\...\{43ADAE00-A4ED-4379-A76D-A1FF5D9D334A}_is1) (Version: 2.0 - Xfire, Inc.)
Xfire Codec (remove only) (HKLM-x32\...\XfireCodec) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
30-09-2015 22:31:00 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {5E5E6F4E-776F-408F-B289-9F1C692B9117} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {66840B11-86B2-43FF-860B-5EC4AEEF36F3} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {B28234B6-C63B-4F53-B8F3-9AC017EA3BD2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {DE4BC9A6-FFAF-4601-95A4-A42F7E079FB0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2013-09-05 02:36 - 2014-12-13 12:08 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-08-25 09:15 - 2014-12-13 10:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-17 16:36 - 2015-01-17 16:36 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c89a3da49bf7bd161745f4228277ea00\PSIClient.ni.dll
2013-08-25 09:19 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\xxx\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: Bluetooth Device Monitor => 2
MSCONFIG\Services: Bluetooth OBEX Service => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: Micro Star SCM => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
HKLM\...\StartupApproved\Run: => "BTMTrayAgent"
HKLM\...\StartupApproved\Run: => "SCM"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run32: => "KLM"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\StartupApproved\StartupFolder: => "GameRanger.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\StartupApproved\StartupFolder: => "GameRanger.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-1675691969-3276210653-1386313587-1002\...\StartupApproved\Run: => "Spotify Web Helper"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{28A4905B-4C6E-4156-B4D5-1AC931986A80}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{63612564-CD21-4C91-B00C-352217B67C93}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{A1A95A5B-579E-402C-B94D-82EF54F0EB62}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{28FC2389-01EC-42B2-A4AA-C5AB837EEB7E}C:\users\xxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\xxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{A3F27684-490D-4405-992E-979349B56A62}C:\users\xxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\xxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{11C5EB1A-FDD7-47D6-B924-B9BE567C00D0}] => (Block) C:\users\xxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{2E96EDCF-32B3-4630-94AB-E0093F224BCF}] => (Block) C:\users\xxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6D2F0E28-8207-4CC4-989D-F9E4D89F8AE7}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A9DAA35A-02DD-410A-BDBB-C56DD69103EC}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D43C07D5-8418-4B33-BA85-3B787E9A8C38}] => (Allow) D:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8591BB90-2ECF-4D7F-86C0-16AF314199F5}] => (Allow) D:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{B4150856-D6E7-4BB6-909D-AFC297177366}] => (Allow) D:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{62D42376-DC22-4A2E-B9EF-D4CE92BBB89C}D:\program files (x86)\xfire2\xfire.exe] => (Allow) D:\program files (x86)\xfire2\xfire.exe
FirewallRules: [UDP Query User{7D495081-5CA1-4F91-A705-E1451023C0F8}D:\program files (x86)\xfire2\xfire.exe] => (Allow) D:\program files (x86)\xfire2\xfire.exe
FirewallRules: [{F0F24C21-CEFB-43D9-B5A6-06BA7DFC8F39}] => (Block) D:\program files (x86)\xfire2\xfire.exe
FirewallRules: [{88C100E4-058A-49A5-86C6-38C3F90DC732}] => (Block) D:\program files (x86)\xfire2\xfire.exe
FirewallRules: [{06055F7B-B903-42A0-A5C3-AFAB3F5DFBCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Outlast\OutlastLauncher.exe
FirewallRules: [{4D0E8515-9A3C-4C38-8955-84C36A1E72BD}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Outlast\OutlastLauncher.exe
FirewallRules: [TCP Query User{9913C6A7-0805-4FEF-8C0D-CFC0D67996DE}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{A5B34142-A821-4C41-82A0-4624B52A161F}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{773B94D3-D748-4A4C-A0EA-333203464FB6}] => (Block) D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{7D3CF0B9-015E-4896-A568-A7EBD331D1B3}] => (Block) D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [{D11D9F1F-8611-4E3A-AE5A-02BA87BD7EA3}] => (Allow) D:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{61E4F9D2-0D54-4AC9-BFFE-1912416E5398}] => (Allow) D:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{457442B8-7E03-4320-8E63-F4E8479AAB8B}D:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) D:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{8A87205A-FDB9-48DB-84E5-E4BE11E9EBE3}D:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) D:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{F7EF3880-6D84-48A2-BE1B-F1A60D1D7DF2}] => (Block) D:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{DCA8D47A-F524-4A12-979E-B106CCAC1363}] => (Block) D:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{F98546F4-B4EE-464C-844B-E7BC75292C56}D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [UDP Query User{3C69E9C1-15CB-432B-A764-97ED6F018C6D}D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{5A6DACF6-1A2C-45C6-944B-EFFE148F0D9B}] => (Block) D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{958CF55A-3D53-43CE-B96E-038CD2E0982A}] => (Block) D:\program files (x86)\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{434A2540-4E6A-41EE-BE6A-FAA3BA9A2F10}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{5FD3E34C-D52F-4F2F-8D8F-478860B9842D}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{6A62D011-0F49-4922-A3D6-81F3754E493D}] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{6B2937AF-078C-4C76-B33B-262CC65B5E16}] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{F26D4679-A718-458C-AB6C-B740EEBB3D7E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{B453751E-F461-4E71-A89B-77B68DE27124}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [TCP Query User{1AEBDCA6-DEAF-4D94-B375-9E44A5B22245}D:\program files (x86)\steam\steamapps\common\chivalrymedievalwarfare\binaries\win64\cmw.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\chivalrymedievalwarfare\binaries\win64\cmw.exe
FirewallRules: [UDP Query User{76C7F210-496D-4CD9-BBDE-685BBE487D72}D:\program files (x86)\steam\steamapps\common\chivalrymedievalwarfare\binaries\win64\cmw.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\chivalrymedievalwarfare\binaries\win64\cmw.exe
FirewallRules: [{ACD0DE5D-FDEE-4DE0-885E-BAE007B5D68A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{79FD53E0-4765-4795-893A-1011F82EC2D2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{97689200-DC0F-4709-ACE8-4BFF0BD4779A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Interplanetary\Interplanetary.exe
FirewallRules: [{A141E2AE-6762-4C93-B9C6-9B6E308CD452}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Interplanetary\Interplanetary.exe
FirewallRules: [{5F5C5573-FB05-4F11-AFB5-D3D48DD3095E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{E43C17E3-2B51-430F-9665-FD491E0F370E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{D135806A-AD80-4F99-9DC7-E497AE82FDDF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{E0AF72F9-AA9B-4037-8D6F-64A5EE9489F8}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{DB42EE01-54E1-450C-AD46-E4A83F6DBB91}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{5DD82210-DA03-423D-85C4-171871D22919}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{949D5BA9-9DB9-4EB5-B09F-E459A8EFA183}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{C81F3563-2E5D-4F12-8A1C-182D0BBA7635}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe
FirewallRules: [{716737C7-97AD-4E82-AC80-998B87EF0F66}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe
FirewallRules: [TCP Query User{3AE64E92-450E-4F32-B0E3-945232D422F6}D:\program files (x86)\guild wars 2\gw2.exe] => (Allow) D:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{20F4A179-4FDC-4C4A-A5AE-928707043271}D:\program files (x86)\guild wars 2\gw2.exe] => (Allow) D:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [{E90BB9C6-05CD-4C92-AF03-4B1608D59C09}] => (Block) D:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [{E1FE0835-31C6-41B8-848E-F89537DB64AD}] => (Block) D:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [{53E868E5-758D-4EC7-9FC9-1F636EB2BF78}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{7AB3682B-3A04-4319-BA65-1E7437FCCCEE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{9C806AFC-D572-4202-82C9-0B2B3CFC7FF4}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Stronghold\Stronghold.exe
FirewallRules: [{98B12E83-CB56-4A8A-820D-EAB1C4979DEB}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Stronghold\Stronghold.exe
FirewallRules: [{E8A9239D-DA21-4F2E-AB87-ADE4FA020917}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Planetary Annihilation\PA.exe
FirewallRules: [{1E8DAE61-03EA-4CB9-ABA8-23D11D2B587C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Planetary Annihilation\PA.exe
FirewallRules: [{B1D076B6-0760-4904-8387-28E26F5F5714}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{92564307-0341-460A-9BCB-B1BF3A6C8520}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{909445B0-5A19-469F-BEA7-E74927FF22B5}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{886360C9-8C3F-4669-ABBA-41E1F7BD799B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [TCP Query User{0FACD823-3AA1-4526-A72C-E7ADC8971CCF}D:\program files (x86)\world_of_tanks\wotlauncher.exe] => (Allow) D:\program files (x86)\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{366ED3DE-C3C7-497D-BBC4-1A8F83AC2DAB}D:\program files (x86)\world_of_tanks\wotlauncher.exe] => (Allow) D:\program files (x86)\world_of_tanks\wotlauncher.exe
FirewallRules: [{9B376CB0-97B9-4FD8-9B89-9E7B84C23111}] => (Block) D:\program files (x86)\world_of_tanks\wotlauncher.exe
FirewallRules: [{8D772CC8-1C80-494C-A557-6D3EB3B1502A}] => (Block) D:\program files (x86)\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{20F815B2-3066-4833-9751-845A37B43193}D:\program files (x86)\world_of_tanks\worldoftanks.exe] => (Allow) D:\program files (x86)\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{C57CB086-02FF-4C98-AEBA-54EA9852DCE7}D:\program files (x86)\world_of_tanks\worldoftanks.exe] => (Allow) D:\program files (x86)\world_of_tanks\worldoftanks.exe
FirewallRules: [{837A4561-8A30-4723-ADB3-652B418B1DD9}] => (Block) D:\program files (x86)\world_of_tanks\worldoftanks.exe
FirewallRules: [{43856149-2FC3-4D55-A33A-08DC17DE59C1}] => (Block) D:\program files (x86)\world_of_tanks\worldoftanks.exe
FirewallRules: [{D305CB22-49B1-4899-A8B9-B9B522672162}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{1B6EC309-B87C-4CCB-B437-D028CAF8E05F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{F11B005F-F09C-4DC9-9B02-F8C78137EC78}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{798E3EEE-9FD1-42FA-B89A-159BB7CC4EB0}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F34D7025-1953-4075-9858-115BE10F898E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Evochron Mercenary\EvochronMercenary.exe
FirewallRules: [{2AB9C887-1EE7-45B5-80AA-9BB076FFE706}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Evochron Mercenary\EvochronMercenary.exe
FirewallRules: [{0186EF18-0CB6-4F0F-92E7-82FA983CDC90}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{B8B8F132-5FA9-41D6-984A-51366A9919E1}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{1AC8C12C-EE4A-42EC-85C8-E45D75BA4E26}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Eve Online\eve.exe
FirewallRules: [{BC44A45F-409B-493A-8C1C-C25A8DDCA14C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Eve Online\eve.exe
FirewallRules: [TCP Query User{95A8CB74-7BCA-4A54-98D1-C29800442C10}D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe
FirewallRules: [UDP Query User{A7524E02-2B90-48E4-937E-B86CA38DA5E1}D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe
FirewallRules: [{8018D86E-4315-4F0C-A406-360164ED5441}] => (Block) D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe
FirewallRules: [{97075F5A-33AA-4F7E-A863-3B488EC7F12C}] => (Block) D:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe
FirewallRules: [{0A1AD005-0FB0-4891-8498-47858CB09030}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{54B6E708-D541-4A7F-BC81-0453F64BAE0E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{E9A9F529-5957-44F7-8F96-906D0AC27E13}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Quake Live\quakelive_steam.exe
FirewallRules: [{E787B946-3D63-4B4B-AD56-8F3F2BB844F2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Quake Live\quakelive_steam.exe
FirewallRules: [{FF3A9E2F-F800-400D-8A5F-3FB9AF3BA94A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{01E9668D-CC9E-40A3-B9BD-F299A729C25D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{8B480970-CCAD-4090-9518-E704615C88F2}D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{63910103-A888-49DE-A2E4-D375D1F3FAF1}D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{B8C9CF95-7341-491C-A926-449F48CB807A}] => (Block) D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{32E8EDFE-CE18-495C-9C7A-039870D13469}] => (Block) D:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{FA7FCD7D-4269-4675-86EB-6E5EF2A19A49}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Life is Feudal Your Own\yo_cm_client.exe
FirewallRules: [{AFC2E4A0-4F47-4732-8FB6-0283BBB9CB14}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Life is Feudal Your Own\yo_cm_client.exe
FirewallRules: [TCP Query User{FFAB8300-BA60-444B-890E-93F1680AEBF2}D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [UDP Query User{B0736234-A3AF-414E-B393-AE93190C440A}D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{17613540-EB57-44C0-8685-FACB99E91D45}] => (Block) D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{188C1856-D9E9-446D-8C22-FEB9264BF6B5}] => (Block) D:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{36BAAA6C-5A6B-4085-9AC9-623051B6ABAA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\rust\Rust.exe
FirewallRules: [{EA00A66C-1978-4C36-A572-5F401B77A910}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\rust\Rust.exe
FirewallRules: [{590C222D-FEE5-4C9C-AE7E-3B60889701B4}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{A6DD6410-FE39-4CDD-9069-AA374DD8EE55}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{30BDCA77-9867-4BD7-A3E5-A7AE477C7D10}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{E304ECFF-BD5D-43D1-9FC1-1E07E505F807}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{A9460421-6FF3-465A-8388-F12279D4755F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{B5563573-1F46-4F44-A2AB-29C5BA2FB907}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{0EA70F13-7E7E-4F6F-BD57-4BE8A8D60B8A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dungeon of the Endless\DungeonoftheEndless.exe
FirewallRules: [{33E2A190-F2EA-4E2C-918D-7CB076B42E94}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Dungeon of the Endless\DungeonoftheEndless.exe
FirewallRules: [{B10F85F1-1F66-44C0-A9C4-73CB0F27DAC9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SirYouAreBeingHunted\x64\sir.exe
FirewallRules: [{BF72AC8A-9C2D-4CF6-849E-DE97F77DCA92}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SirYouAreBeingHunted\x64\sir.exe
FirewallRules: [{052FAAE1-6830-4583-9AEF-5507BA9F119B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SirYouAreBeingHunted\x86\sir.exe
FirewallRules: [{79397158-FA55-4674-B07F-B6CFBD6E0EF3}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SirYouAreBeingHunted\x86\sir.exe
FirewallRules: [{294A65F8-1C25-4098-B1A1-4C2A5B5C99D2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Secret World\ClientPatcher.exe
FirewallRules: [{E1AE4C3B-47F5-4DBC-91F3-4CB2F3A152EE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Secret World\ClientPatcher.exe
FirewallRules: [{1F1A1E48-0701-4A9A-9E1A-BCDA81D7262A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{3FD22E3F-F1E9-4073-BD08-5018F258E7C4}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{9AB3A144-6C39-428B-8298-629395E90044}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{10284051-B5D5-4961-B43A-E12CF7E63411}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1060E15F-01BD-4CD3-8F49-A49212B73034}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{3AA1FDDA-ABB2-4C45-A5F2-85D484CF2F8E}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C3F6C99B-61BE-47D0-8E60-C4FCFE37F5A5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{6807F8BA-3FBB-45BD-B26F-9F287F1EC2B8}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{45A8AA09-3538-41D9-A365-E813E7225545}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{B75CA68B-C55B-4223-9019-DDE7FEA7C30D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{D98151B1-0F43-4A8A-99E6-6ACB7BA6474E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{DB189991-7AB9-4FF8-9D7D-9FCBD11D36C7}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{14F1932B-0AEF-43CF-8039-3C05F5DC602C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Miscreated\Bin64\Miscreated.exe
FirewallRules: [{7F39DA80-20B7-4098-9C36-F9336EFA4461}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Miscreated\Bin64\Miscreated.exe
FirewallRules: [{0280B082-8C93-4A5E-9559-31CE52782CCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{CF81BB35-C5A4-4B94-B678-A5D002D79B33}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{4886A486-A203-4287-8616-23231F7FE7EE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B2BFDDB1-431F-4EEC-8D6E-C01605ADDB02}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{130D8928-B72D-4E27-A689-CBE311612FCB}D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [UDP Query User{611D80CE-AC67-44C2-ABDE-830A5E6C04F0}D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{178F4D9F-89D2-4A67-B41D-2D9521202D66}] => (Block) D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{53FDE849-FCE4-492D-B11D-4A3808D3548E}] => (Block) D:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{951128AD-5320-4E4F-942B-CF016AD63F6F}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{E869F397-99E2-42E7-83F9-B870ADA8447A}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{0936B283-471C-4840-AF92-CB04D0C4E6BF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{890BC060-CA06-47E8-A2B3-0DD5E0C8A716}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DFE3A388-B00B-471B-AD04-CAA0771472FE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{05C1DC9C-1B21-4E62-BCDA-B9272662F7DE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{27C659DD-4DA4-4B90-8251-33A784545133}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{BC6EA943-D83E-4DB6-82E8-A4D982EBBDFF}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{301B337F-3D66-48DE-ADC1-45B17EBDAC45}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{9EB4CDBF-D73E-4547-81E5-4B0E8843FC88}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{1F2DC922-D96D-4ADD-B034-0165812937AF}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [{17791CE8-2289-49E3-A1B3-9F3C33322D61}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [{169ED717-B32B-426B-A20D-36C1761023E1}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\King Arthur's Gold\KAG.exe
FirewallRules: [{C17EC446-C7A8-4AD7-A89E-6B2E930759C9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\King Arthur's Gold\KAG.exe
FirewallRules: [{91003420-AFB4-40E0-A835-D2E7A70BEB04}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Total War Battles KINGDOM\TWB_Kingdom.exe
FirewallRules: [{90BA22A5-9C94-4C25-A342-D34CFA00B6D6}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Total War Battles KINGDOM\TWB_Kingdom.exe
FirewallRules: [{55F23145-D271-44C1-B4FE-6D78327F0FA3}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{18E5B0B2-70D0-4002-AE0A-EC54D7BF3CDE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{75A46C90-2160-4452-9799-CA6D7D805C35}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{E7AB4B1B-D2B8-4241-898C-E13C265F00AD}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{CC1EA16D-BE40-4799-BBF1-8B1E29E015B9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{E8A8BBC1-8636-448A-9DCB-DC655E30D0C5}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{626DFF0D-5CDD-4C43-A097-44BD77091485}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Rodina\Rodina_Steam_Processed.exe
FirewallRules: [{D16595A9-EC4A-4703-8030-D73A86FBF81B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Rodina\Rodina_Steam_Processed.exe
FirewallRules: [{FD184A1B-E6D1-4021-BB9D-07BB7DA6CCE9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Zenimax Online\zosSteamStarter.exe
FirewallRules: [{EA1280FF-32A1-48E5-81E1-54B711D91D5C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Zenimax Online\zosSteamStarter.exe
FirewallRules: [{FEB100F1-2529-4487-81AE-9A3E095872A7}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Aberoth\Aberoth.exe
FirewallRules: [{34961B81-2BF8-4774-836F-CA397606DF06}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Aberoth\Aberoth.exe
FirewallRules: [{6BB91B95-DD7B-4204-895F-FAB177FA2105}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{9233058D-46EE-4277-B67A-43276A51DC00}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{9EE788D0-3641-4A2F-8C7D-15DD0F56E7E7}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Reign Of Kings\Reign of Kings.exe
FirewallRules: [{79B9B9A2-6479-4AB7-825D-76CA590A4D59}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Reign Of Kings\Reign of Kings.exe
FirewallRules: [TCP Query User{B357AB0F-2BFF-441F-ACE9-FFC3EAF67B3E}D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{C1FA6CC1-2E9A-400D-906A-CDA96D3E5575}D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{EFF7C5FD-D674-4703-86F0-AE610866415C}] => (Block) D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{466EBA21-F932-4033-8C7C-21794445E316}] => (Block) D:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{93B78D53-516F-4061-8B1D-CFB22B3004CD}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{108A970B-5633-4776-959B-793B5353C559}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{30A43376-39F5-4EFD-B941-43A36B821A45}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\CDW\Binaries\Win64\CDW.exe
FirewallRules: [{D9719EC4-F16F-420B-899E-8EE243376CC2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\CDW\Binaries\Win64\CDW.exe
FirewallRules: [{ED216692-2FEF-4B71-994A-2DCECE5C58DD}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\CDW\Binaries\Win32\CDW.exe
FirewallRules: [{D9D89BBE-379E-4BE3-8403-C07D4A714609}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\CDW\Binaries\Win32\CDW.exe
FirewallRules: [{E404AA4A-7FF0-4452-8817-03D89E2959B2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2015.exe
FirewallRules: [{7D568134-1E09-478A-9F3C-7C2A2AE093EB}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2015.exe
FirewallRules: [{01F52731-2E71-450E-A77F-5E8336122EB2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{F3CCB25A-7A20-460D-926E-208AC5E6065D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{F87D5E9E-56A1-423C-BE52-814EF0B3862B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{2EF55AAD-9245-4C14-B949-51A0F76C5085}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{579D5D17-AEA3-4BE8-803D-67CA53E05B46}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DeadRealm\DeadRealm.exe
FirewallRules: [{269B22C4-8779-430E-BC3F-5DBFA50E9CE9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DeadRealm\DeadRealm.exe
FirewallRules: [{031D35D9-261F-4B88-BE1D-1380B013C14A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Viridi\Viridi.exe
FirewallRules: [{147BD171-8FA6-46D8-9ED5-47661A828762}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Viridi\Viridi.exe
FirewallRules: [{EC70E05E-140F-45D7-B5F0-9A71598FF565}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\AmongRipples\AmongRipples.exe
FirewallRules: [{A94AC8A2-FFB5-42BC-825D-CD3D3B739DD4}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\AmongRipples\AmongRipples.exe
FirewallRules: [TCP Query User{E392BD2F-D0B6-4D42-85DE-3798C144CC5B}D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{23FFCA53-C826-4CDE-9477-93D132C10B69}D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [{6E7445A3-4F3B-45B2-83CE-9BD1A330B7B5}] => (Block) D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [{5A3F5F6B-F2E3-4998-8E97-B434546E8287}] => (Block) D:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [{9E826F2E-49C4-47F2-B5C9-16559FAB03E8}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\CAT Interstellar\CatInterstellar.exe
FirewallRules: [{1CD1F64E-348A-47F4-9D19-87D3B98AD217}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\CAT Interstellar\CatInterstellar.exe
FirewallRules: [TCP Query User{F54912DE-4F22-4EA6-8225-CE022F4F40DE}D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe
FirewallRules: [UDP Query User{6C1211E7-22D3-4C18-993E-DDC7CAF030F4}D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe
FirewallRules: [{63E4BB36-7949-40F6-909D-9BCDBC6FCC8A}] => (Block) D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe
FirewallRules: [{B1E540AC-B115-4E48-86FF-86D1A180E702}] => (Block) D:\program files (x86)\steam\steamapps\common\cat interstellar\catinterstellar\binaries\win32\catinterstellar.exe
FirewallRules: [{37F40C59-4370-48FF-806B-51CD3F520884}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{EF76E055-F588-4745-B63C-BED9B815B059}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{815CC7E4-7D69-4759-9630-D9AC0D1709F9}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{9F817E59-DC84-4C61-9BB4-2334C2FBF0C8}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{6741174B-66B7-47FD-9C8C-F7E3021FD340}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Miscreated\Miscreated.exe
FirewallRules: [{052AE2B1-3B91-492A-B885-CC9474CDEE67}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Miscreated\Miscreated.exe
FirewallRules: [{FBB1A568-3827-4CC0-9F99-9F2131FDC91E}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{E7DF5189-97C9-44F1-B835-CE7494BAE926}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{6470A32C-3A78-4B9C-9581-75A29E0BB029}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{7A26FF14-F4CF-4CB1-A4DB-8386290B46F0}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{E6023097-A578-48EB-9CA7-74CA6C4702BE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Kung Fury Street Rage\KungFury.exe
FirewallRules: [{9AC70808-CFE6-44F0-995C-4D5194A9C3D2}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Kung Fury Street Rage\KungFury.exe
FirewallRules: [{557AE674-A8CF-4044-9F63-7EB4DDBDD031}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/05/2015 08:34:39 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/05/2015 06:35:25 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/05/2015 06:35:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/05/2015 06:34:41 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/05/2015 06:34:40 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/05/2015 06:34:35 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (10/04/2015 04:50:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: steamwebhelper.exe, Version: 2.92.69.85, Zeitstempel: 0x55d4cacb
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2357.1273.0, Zeitstempel: 0x5581d4e8
Ausnahmecode: 0x80000003
Fehleroffset: 0x000894f9
ID des fehlerhaften Prozesses: 0x17a8
Startzeit der fehlerhaften Anwendung: 0xsteamwebhelper.exe0
Pfad der fehlerhaften Anwendung: steamwebhelper.exe1
Pfad des fehlerhaften Moduls: steamwebhelper.exe2
Berichtskennung: steamwebhelper.exe3
Vollständiger Name des fehlerhaften Pakets: steamwebhelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: steamwebhelper.exe5
Error: (09/26/2015 11:29:00 PM) (Source: ESENT) (EventID: 481) (User: )
Description: svchost (1512) SRUJet: Versuch, aus Datei "C:\Windows\system32\SRU\SRUDB.dat" bei Offset 65536 (0x0000000000010000) für 65536 (0x00010000) Bytes zu lesen, ist nach svchost0 Sekunden mit Systemfehler 8 (0x00000008): "Für diesen Befehl ist nicht genügend Speicher verfügbar. " fehlgeschlagen. Fehler -1011 (0xfffffc0d) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden.
Error: (09/26/2015 11:29:00 PM) (Source: ESENT) (EventID: 481) (User: )
Description: svchost (1512) SRUJet: Versuch, aus Datei "C:\Windows\system32\SRU\SRUDB.dat" bei Offset 0 (0x0000000000000000) für 65536 (0x00010000) Bytes zu lesen, ist nach svchost0 Sekunden mit Systemfehler 8 (0x00000008): "Für diesen Befehl ist nicht genügend Speicher verfügbar. " fehlgeschlagen. Fehler -1011 (0xfffffc0d) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden.
Error: (09/26/2015 11:29:00 PM) (Source: ESENT) (EventID: 481) (User: )
Description: svchost (1512) SRUJet: Versuch, aus Datei "C:\Windows\system32\SRU\SRUDB.dat" bei Offset 32768 (0x0000000000008000) für 32768 (0x00008000) Bytes zu lesen, ist nach svchost0 Sekunden mit Systemfehler 8 (0x00000008): "Für diesen Befehl ist nicht genügend Speicher verfügbar. " fehlgeschlagen. Fehler -1011 (0xfffffc0d) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden.
Systemfehler:
=============
Error: (10/05/2015 06:36:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (10/05/2015 06:36:15 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\xxx\AppData\Local\Temp\ehdrv.sys
Error: (10/05/2015 06:36:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (10/05/2015 06:36:14 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\xxx\AppData\Local\Temp\ehdrv.sys
Error: (10/05/2015 06:36:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (10/05/2015 06:36:14 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\xxx\AppData\Local\Temp\ehdrv.sys
Error: (10/05/2015 01:37:00 AM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.24
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (09/30/2015 10:33:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (09/30/2015 10:33:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (09/30/2015 10:33:43 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
CodeIntegrity:
===================================
Date: 2015-08-10 07:07:39.140
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-10 07:07:39.045
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-09 07:06:40.857
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-09 07:06:40.757
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:16:43.458
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:16:43.370
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:14:11.101
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:14:11.016
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:13:58.032
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-08-08 06:13:57.937
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 16%
Installierter physikalischer RAM: 8084.86 MB
Verfügbarer physikalischer RAM: 6717.82 MB
Summe virtueller Speicher: 9644.87 MB
Verfügbarer virtueller Speicher: 8102.77 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:111.27 GB) (Free:77.1 GB) NTFS
Drive d: (Multimedia) (Fixed) (Total:698.64 GB) (Free:343.67 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 9792BA51)
Partition: GPT.
========================================================
Disk: 1 (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
AdwCleaner auf deinen Desktop.
SecurityCheck und:
