| kunibald | 15.11.2017 15:05 |
Zuerst die FRST.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2017 03
durchgeführt von Nils (Administrator) auf NILS-PC (15-11-2017 15:02:15)
Gestartet von C:\Users\Nils\Desktop
Geladene Profile: Nils (Verfügbare Profile: Nils & Administrator)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
() C:\Windows\System\cm106eye.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [4368952 2014-11-11] (SoftEther VPN Project at University of Tsukuba, Japan.)
HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit64.exe [53832 2015-09-21] ()
HKLM\...\Run: [Cm106Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3098944 2017-09-02] (Electronic Arts)
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Run: [HP Deskjet 3050A J611 series (NET)] => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Run: [nw] => D:\Games\GFACE\GFACE Launcher\live\nw.exe [18552 2017-02-01] ()
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1886864 2017-03-25] (Lavasoft)
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\MountPoints2: {0b9b5ad4-e960-11e6-84e5-fcaa14f38fed} - "G:\HiSuiteDownLoader.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2017-09-09]
ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2014-11-11]
ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
Startup: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2014-12-24]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Keine Datei)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{73E532E7-AA7F-4C51-ABD8-D9473F1975E7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD2B7FF-C766-4E02-98AA-672298276BB7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{C11C8B11-418F-40D2-A02D-027881135076}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.de/
SearchScopes: HKU\S-1-5-21-2012670658-2568400426-3940952837-1001 -> DefaultScope {82EF01FA-A025-4348-8823-D95F89B95A54} URL =
SearchScopes: HKU\S-1-5-21-2012670658-2568400426-3940952837-1001 -> {82EF01FA-A025-4348-8823-D95F89B95A54} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-11-10] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-11-10] (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-12-15] (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-10-21] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-11-10] (Microsoft Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-12-15] (DVDVideoSoft Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-10] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-10] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: 73mpqzw3.default-1508454741206
FF ProfilePath: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\73mpqzw3.default-1508454741206 [2017-11-15]
FF Extension: (Adblocker X) - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\73mpqzw3.default-1508454741206\Extensions\@adblock57.xpi [2017-11-10]
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\73mpqzw3.default-1508454741206\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-21]
FF Extension: (Adblock Plus) - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\73mpqzw3.default-1508454741206\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-10]
FF Extension: (DVDVideoSoft YouTube MP3 and Video Download) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2014-12-15] [ist nicht signiert]
FF Extension: (Adblock Plus) - C:\Program Files (x86)\Mozilla Firefox\browser\features\adblock_plus-2.9.1-an+fx+sm+tb (1).xpi [2017-06-08]
FF HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: (DVDVideoSoft YouTube MP3 and Video Download) - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-21] [ist nicht signiert]
FF HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\atfuiez5.default\extensions\cliqz@cliqz.com => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-25] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-10-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default [2016-11-26]
CHR Extension: (Google Docs) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-01]
CHR Extension: (Google Drive) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-01]
CHR Extension: (YouTube) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-01]
CHR Extension: (Google-Suche) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-01]
CHR Extension: (Avira Browserschutz) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-01]
CHR Extension: (Google Wallet) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-18]
CHR Extension: (Google Mail) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-18]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-10-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-10-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-10-19] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-10-19] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [407408 2017-10-26] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-05-19] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-10-31] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [409128 2017-03-07] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328616 2015-10-14] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751760 2016-11-26] (Lavasoft Limited) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2098528 2017-09-02] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2977640 2017-09-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-07-31] ()
R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [4368952 2014-11-11] (SoftEther VPN Project at University of Tsukuba, Japan.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 asvpndrv; C:\Windows\system32\DRIVERS\asvpndrv.sys [31744 2014-05-17] (Astrill)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-16] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176224 2017-09-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-09-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-29] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-29] (Avira Operations GmbH & Co. KG)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 GeneStor; C:\Windows\system32\DRIVERS\GeneStor.sys [117224 2015-09-21] (GenesysLogic)
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2014-01-14] (Highresolution Enterprises [www.highrez.co.uk])
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-11-13] (Malwarebytes)
R3 Neo_VPN; C:\Windows\system32\DRIVERS\Neo_VPN.sys [28768 2014-11-11] (SoftEther VPN Project at University of Tsukuba, Japan.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-13] (NVIDIA Corporation)
R1 SeLow; C:\Windows\system32\DRIVERS\SeLow_x64.sys [38368 2014-11-11] (SoftEther VPN Project at University of Tsukuba, Japan.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 USBMULCD; C:\Windows\system32\drivers\CM10664.sys [4135936 2014-01-17] (C-Media Electronics Inc)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 cpuz136; \??\C:\Users\ADMINI~1\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X] <==== ACHTUNG
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-15 15:02 - 2017-11-15 15:02 - 000000000 ____D C:\Users\Nils\Desktop\FRST-OlderVersion
2017-11-12 23:38 - 2017-11-13 19:49 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-11-12 23:38 - 2017-11-12 23:38 - 000001890 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-12 23:38 - 2017-11-12 23:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-12 23:38 - 2017-11-12 23:38 - 000000000 ____D C:\ProgramData\MB3CoreBackup
2017-11-12 23:38 - 2017-11-01 08:54 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-11-12 23:21 - 2017-11-12 23:21 - 000367176 _____ C:\Windows\Minidump\111217-10421-01.dmp
2017-10-26 02:31 - 2017-10-26 02:31 - 000001057 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-10-26 02:31 - 2017-10-26 02:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-10-26 02:31 - 2017-10-26 02:31 - 000000000 ____D C:\Program Files\VS Revo Group
2017-10-26 02:30 - 2017-10-26 02:30 - 007189760 _____ (VS Revo Group ) C:\Users\Nils\Downloads\revo204setup.exe
2017-10-26 02:28 - 2017-10-26 02:28 - 000067910 _____ C:\Users\Nils\Desktop\Addition.txt
2017-10-26 02:27 - 2017-11-15 15:02 - 000022606 _____ C:\Users\Nils\Desktop\FRST.txt
2017-10-26 02:27 - 2017-11-15 15:02 - 000000000 ____D C:\FRST
2017-10-26 02:19 - 2017-11-15 15:02 - 002392576 _____ (Farbar) C:\Users\Nils\Desktop\FRST64.exe
2017-10-26 02:18 - 2017-10-26 02:18 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-26 02:18 - 2017-10-26 02:18 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-26 02:17 - 2017-10-26 02:18 - 071535032 _____ (Malwarebytes ) C:\Users\Nils\Downloads\mb3-setup-consumer-3.2.2.2029-1.0.212-1.0.2951.exe
2017-10-22 02:09 - 2017-10-22 02:09 - 003849205 _____ C:\Users\Nils\Downloads\02-vab2011-hk-grundlagen.pdf
2017-10-20 00:12 - 2017-10-20 00:12 - 000000000 ____D C:\Users\Nils\Desktop\Alte Firefox-Daten
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-15 15:01 - 2014-01-14 14:20 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-15 15:01 - 2013-08-23 00:24 - 000766276 _____ C:\Windows\system32\perfh007.dat
2017-11-15 15:01 - 2013-08-23 00:24 - 000160034 _____ C:\Windows\system32\perfc007.dat
2017-11-15 15:01 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2017-11-15 15:01 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2017-11-15 14:58 - 2016-11-20 02:28 - 000000000 ____D C:\Users\Nils\AppData\LocalLow\Mozilla
2017-11-15 14:57 - 2016-04-25 22:58 - 000000000 ____D C:\Users\Nils\AppData\Local\u-launcher
2017-11-15 14:57 - 2015-11-18 17:48 - 000000000 __SHD C:\Users\Nils\IntelGraphicsProfiles
2017-11-15 14:57 - 2014-10-11 01:02 - 000000000 ___RD C:\Users\Nils\OneDrive
2017-11-13 20:02 - 2014-03-01 09:14 - 000000000 ____D C:\Users\Nils\AppData\Local\CrashDumps
2017-11-13 19:49 - 2014-11-11 03:08 - 000000000 ____D C:\Program Files\SoftEther VPN Client
2017-11-13 16:17 - 2014-01-31 23:58 - 000000000 ____D C:\Users\Nils
2017-11-13 16:17 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-13 16:17 - 2013-08-22 14:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2017-11-13 13:43 - 2014-02-01 00:03 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2012670658-2568400426-3940952837-1001
2017-11-13 01:22 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\NDF
2017-11-13 00:44 - 2014-02-01 16:39 - 000000000 ____D C:\Users\Nils\AppData\Local\Ubisoft Game Launcher
2017-11-12 23:21 - 2014-02-07 09:39 - 000000000 ____D C:\Windows\Minidump
2017-11-12 22:25 - 2016-04-25 22:47 - 000000000 ____D C:\ProgramData\GFACE
2017-11-12 05:31 - 2017-08-03 14:44 - 000003168 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2012670658-2568400426-3940952837-1001
2017-11-12 05:31 - 2016-12-05 20:24 - 000002326 _____ C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-11-11 01:08 - 2014-04-13 18:19 - 000000000 ____D C:\Users\Nils\AppData\Local\Battle.net
2017-11-11 01:08 - 2014-04-13 18:19 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-11-11 00:09 - 2014-12-28 13:48 - 000000000 ____D C:\Users\Nils\AppData\Roaming\TS3Client
2017-11-10 22:07 - 2014-02-01 02:50 - 000000000 ____D C:\Program Files (x86)\StarCraft II
2017-11-10 19:14 - 2013-08-22 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-11-10 19:13 - 2014-01-14 14:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-01 04:06 - 2014-10-13 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-11-01 04:06 - 2014-06-22 17:42 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-30 16:25 - 2016-11-19 13:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-30 16:25 - 2014-04-03 18:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-29 02:34 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2017-10-25 11:44 - 2014-04-03 18:51 - 000004342 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-10-25 11:44 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-10-25 11:44 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-10-16 10:01 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\FxsTmp
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-06-01 19:46 - 2015-08-27 13:48 - 000000293 _____ () C:\Users\Nils\AppData\Roaming\BreakingPoint_Login.ini
2015-06-01 19:54 - 2015-08-27 13:59 - 000001380 _____ () C:\Users\Nils\AppData\Roaming\BreakingPoint_Options.ini
2014-04-21 21:34 - 2014-04-21 21:34 - 000000057 _____ () C:\ProgramData\Ament.ini
2014-01-14 14:20 - 2014-01-14 14:20 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
2015-11-11 13:44 - 2015-11-11 13:44 - 000000000 ____D () C:\Users\Administrator\AppData\Local\Temp\avgnt.exe
2014-10-13 01:23 - 2014-10-13 01:25 - 000000000 ____D () C:\Users\Nils\AppData\Local\Temp\avgnt.exe
2017-05-04 19:23 - 2017-05-04 19:23 - 042463240 _____ (Digital Wave Ltd ) C:\Users\Nils\AppData\Local\Temp\tmd_34012739.exe
2016-11-25 01:23 - 2016-11-25 01:24 - 042463240 _____ (Digital Wave Ltd ) C:\Users\Nils\AppData\Local\Temp\tmd_34013849.exe
2016-11-27 23:16 - 2016-11-27 23:16 - 042463240 _____ (Digital Wave Ltd ) C:\Users\Nils\AppData\Local\Temp\tmd_34019628.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-11-10 19:17
==================== Ende von FRST.txt ============================
und jetzt die Addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2017 03
durchgeführt von Nils (15-11-2017 15:02:35)
Gestartet von C:\Users\Nils\Desktop
Windows 8.1 (Update) (X64) (2014-01-31 22:58:34)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2012670658-2568400426-3940952837-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2012670658-2568400426-3940952837-501 - Limited - Disabled)
Nils (S-1-5-21-2012670658-2568400426-3940952837-1001 - Administrator - Enabled) => C:\Users\Nils
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Reader XI MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
Alice Madness Returns (HKLM-x32\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
AlienFX for KoneXTD (HKLM\...\{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH) Hidden
AlienFX for KoneXTD (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version: - Ubisoft)
Assassins Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Avira (HKLM-x32\...\{bd94e862-c44b-4f68-98ca-b35ddf9dbbfc}) (Version: 1.2.98.37213 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{D03EC4B7-E520-4A6F-974C-4F48533838EC}) (Version: 1.2.98.37213 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.32.12 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH) <==== ACHTUNG
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
CloneSpy 3.13 (HKLM-x32\...\CloneSpy) (Version: 3.13 - The CloneSpy Team)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Driver San Francisco (HKLM-x32\...\Driver San Francisco) (Version: 1.1.0.0 - Ubisoft)
Free YouTube to MP3 Converter version 3.12.52.1215 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.52.1215 - DVDVideoSoft Ltd.)
GFACE Launcher (HKLM-x32\...\{28D1723C-31C4-4A83-9799-DFFB3739026D}) (Version: 1.0.0 - Crytek GmbH)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Heroes of Might and Magic V - Tribes of the East (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200092}) (Version: - )
HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (HKLM\...\{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4303 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Malwarebytes Version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
MEDUSA XE 5.1 Surround Headset (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006206}) (Version: 2.0.01.14 - SPEEDLINK)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.8625.2121 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.8625.2121 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Might & Magic Heroes VI - Shades of Darkness (HKLM-x32\...\{745D37C2-26F4-4B65-BA13-F9840EBFA75B}) (Version: 2.1.0 - Ubisoft)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 56.0.2 (x64 de) (HKLM\...\Mozilla Firefox 56.0.2 (x64 de)) (Version: 56.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.2.6506 - Mozilla)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.9.3.355 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Traktor 2 (HKLM-x32\...\Native Instruments Traktor 2) (Version: 2.10.3.29 - Native Instruments)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.44 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.87 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 353.30 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.5.195 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7654 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version: - Roccat GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0013 - Roccat GmbH)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.4.5.44 - NVIDIA Corporation) Hidden
SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.11.9506 - SoftEther VPN Project)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version: - Ubisoft)
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.02 - Ubisoft)
Tom Clancy's The Division Beta (HKLM-x32\...\Uplay Install 2036) (Version: - Ubisoft)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version: - )
Uplay (HKLM-x32\...\Uplay) (Version: 4.2 - Ubisoft)
VirtualDJ 8 (HKLM-x32\...\{FBCD984D-BE6B-4F4C-A887-6F077A07488C}) (Version: 8.2.3921.0 - Atomix Productions)
Web Companion (HKLM-x32\...\{b3442d89-efc0-4285-8063-641d9bc906be}) (Version: 2.3.1479.2868 - Lavasoft)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2012670658-2568400426-3940952837-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Nils\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileCoAuthLib64.dll => Keine Datei
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-10-19] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-07-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-07-15] (Alexander Roshal)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2015-10-14] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-11-02] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-10-19] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-07-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-07-15] (Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0203E4A4-ED50-432A-A8EA-90E308854EDD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {2D4D1DA4-DB5D-427D-8C17-C3AE1EE723B4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-25] (Adobe Systems Incorporated)
Task: {4489FC04-925E-4441-8215-0A9302A90FBF} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
Task: {4BED7986-2658-4A45-A1F8-7E37469F281B} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-10-19] (Avira Operations GmbH & Co. KG)
Task: {5BAD3690-6F59-4DE7-8595-D8671DB38930} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
Task: {7B84876D-4C18-46B8-BC0B-08921F11CBA6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-11-10] (Microsoft Corporation)
Task: {7F78E082-52C8-41A2-BCE5-045910AB295D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8CD24FE0-8319-4D1D-8621-F9639FD31002} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-11-10] (Microsoft Corporation)
Task: {98928663-6B1B-4FBB-877E-1644BAD91EC4} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-11-10] (Microsoft Corporation)
Task: {CB86E426-9887-4B59-856D-D77D3B9D43A2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {EEC6C255-0D70-4AA4-A145-F7E93274D08E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-31] (Microsoft Corporation)
Task: {FF91AACA-6B15-430F-9631-8E399A471CBC} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-31] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-02-01 19:16 - 2014-07-31 17:25 - 000075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-11-12 23:38 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2015-07-06 09:48 - 2015-07-06 09:48 - 000183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\ErrorReporting.dll
2014-01-14 14:23 - 2015-11-02 14:22 - 000116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-11-13 16:23 - 2015-09-21 08:06 - 000053832 _____ () C:\Windows\SysWOW64\UMonit64.exe
2016-02-15 20:45 - 2013-05-16 22:21 - 000307200 ____N () C:\Windows\system\Cm106eye.exe
2014-01-14 14:20 - 2013-09-16 20:19 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-06-23 10:19 - 2015-06-03 22:06 - 000011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000135824 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000058520 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Common.Platform.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000018072 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.UpdateComponents.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000301712 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000030352 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.AvastWrapper.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000059032 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.adblocker.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000128144 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.PUP.Management.dll
2016-11-26 03:59 - 2017-03-25 22:48 - 000038040 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Repositories.dll
2016-02-15 20:45 - 2006-09-13 19:08 - 000491520 ____N () C:\Windows\system\CmAu106.dll
2017-09-09 20:28 - 2012-06-17 10:20 - 000061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Windows\Temp:$DATA [16]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Nils\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2012670658-2568400426-3940952837-1001\...\StartupApproved\Run: => "HP Deskjet 3050A J611 series (NET)"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{2F27FE58-DE81-4355-9C87-F5EDCF84AC3C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{30369332-3844-4688-8B3F-A835EC105622}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F3CD6F58-5387-49C3-85C5-42CC350328F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E053884B-F699-486F-BC44-CE78B175FED3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{23BD15F6-72F5-4631-8CF3-E11FEDCF03D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{62EC49F9-3FF9-4BDB-B73F-C6338BBA99CA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0FCA7750-5F28-4E04-93BC-25A4D8F65A3A}] => (Allow) C:\Users\Administrator\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{7B7EA904-127C-430F-A112-F15D2422F233}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{6DC1FBC6-CD34-4CCF-B128-2CCC25224F8E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{117EA466-2908-45A6-B0A5-C57DE4EFF5B7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{07F4B787-8560-431D-A69D-5E5FBACB3957}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{FE2F8063-8526-4A1E-806F-255456E90AA6}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{0E22D315-0B28-4F84-AFD7-D943D17DAE20}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{6683B6F1-7762-4721-8889-7EE4FB5E903D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{73D1D452-184B-4ABA-AE8A-34059F6815D4}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{20676494-975F-47D9-A3F5-B3E0765920D7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4F45DFEE-7A67-4A55-A56E-123E6CEB54E8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{2C45AC10-BF0F-4A1F-92A2-A41D657DB71F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D3AECD89-5804-467F-B42C-28896E8B37F9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F3CFA809-52A3-425F-9359-0623861336EB}] => (Allow) D:\Games\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{ADFF8C20-5C9C-480C-87BC-B92C32D3AE37}] => (Allow) D:\Games\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{0B34CFA8-9150-4D9A-827D-B0AF3EBE2E0A}] => (Allow) D:\Games\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{F1049394-AD7E-448D-AEFA-C72FC471D591}] => (Allow) D:\Games\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{BD7EBD3D-CE58-402D-B28E-D6072125680D}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{15C48525-5D7D-4FE6-9654-1B95D60D5C86}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{4E2280D6-D00B-4798-B135-5D9FD06959FA}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{9BA714A0-717F-4D11-8113-F4824C7678DF}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{34BBFD97-E115-4594-8893-039CD3A9FB88}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{D27E892E-7259-4D4A-B9F0-0F4A7BE74A80}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{DA3FF48C-A3A4-415D-8CB9-94A358482AB0}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [{559C9940-7EF3-4BA9-8596-57C12DC4B6CC}] => (Allow) D:\Games\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [{3676FD8F-8C13-4517-9B69-74B7DF2C66FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E2A16F7C-312C-446E-9D9B-1ED1EE94628C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{988AE1C7-72CE-49E9-817D-4C91A21C2303}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{DAE4AD07-31F6-4294-A81D-12467DBEF01C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{B4CE6FE1-1C64-48E0-9A7B-687D949358D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{4D2C5530-0CEB-4315-9363-34E202C0B071}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{D7C23106-656E-41DE-BB06-D6A25B785D70}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{A40EF3B3-78CF-4484-9780-D195B474751B}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{9BB6C434-AF95-4702-A7A8-BA87A97346ED}] => (Allow) D:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4D21BFB3-42FA-4D32-A537-41770B45C545}] => (Allow) D:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{562BA474-138E-4AE9-A741-73C78ACAE17C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{5ABB795C-FA5B-4297-83AA-EFBFA1253981}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{F3F78E1A-A54C-4A8F-9311-A80A5560A296}] => (Allow) D:\Games\Dead Space 3\deadspace3.exe
FirewallRules: [{7438CD5C-91BD-4D61-B655-6E6C318F7460}] => (Allow) D:\Games\Dead Space 3\deadspace3.exe
FirewallRules: [{31F0B6F6-FEC9-43B8-A824-D1CEEB10ADE6}] => (Allow) D:\Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{8D63333D-8FE9-44CE-8FE0-379A7037549B}] => (Allow) D:\Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{9BB46264-DB0B-4099-8DC8-571197DD4D29}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{768AE314-EFF2-4BB7-8636-8CC294975267}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{479D39F9-7EAB-4348-821C-9D1FB3543D37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EA7830C9-35E6-413B-BD73-466E6128D67D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{BC5D7505-FD00-40C0-9944-8BB5D1DFF67D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E09F66E0-061B-40F0-8CF9-AC5BCEA0D57C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{C54A7C9B-B8C6-44B1-9F5D-2EB101FA4E27}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{FAE99691-A334-4E68-B809-B259066B5FB5}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{C654F4A2-62B7-4F03-84D5-D850A3CB4F30}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{34DF3C28-2C63-4F20-A6C8-9DF6316D702C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{933ED2DA-48D0-486E-BC23-E3D0605DB28D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{255D2B1D-93EB-47BA-A5CE-52492EB02736}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{721F8E54-D423-46F2-8CCB-342780EA2BC3}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{6A6B7C57-9684-4157-8B3F-ED40F3275F1F}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{276E88FC-CD89-4EC4-8133-25FBE57B4008}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{DC209CD3-D4E9-4586-8FB1-1AE13D8E4B49}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{59553D8E-D896-43B8-BBEC-A7812A52B9BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{D055AF5C-904E-4C73-AB17-176DA55BB83A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{43DFF3BC-2AFF-491A-A421-570BC7952B97}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe
FirewallRules: [{C90033A2-0F83-4A64-A430-22F531FA97BE}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{563EDDD4-3944-4B41-94F0-F670B119A355}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3C04DBCF-B45B-405D-9AEC-236C33AC3356}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{36DB5812-BB48-44D0-8B3A-E0917A4900DD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{8AFCB7DB-3490-4CED-A9C5-F7101A47AEA2}] => (Allow) D:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{07580ABB-F096-440F-BF2E-DE1A4FECF6EA}] => (Allow) D:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{A5ACB5BE-2577-47FE-9F18-F936E53C9A3A}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{448614E2-7558-4BF9-8A84-D8129FE52F7A}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{334B7012-9FFD-4057-9715-EFA5DB7B6AB2}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{DB66BB5A-8933-4424-BB56-11B74A6360B5}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{EBEB6E14-374D-4969-9ABC-3780D7B64087}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{F3A85130-D18E-44EE-A167-77791EDD8557}] => (Allow) D:\Games\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{FD614D16-E3AC-4867-9018-46F7FCBFC184}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{A40AE944-F2D6-4C72-B195-479791CBB68A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [TCP Query User{8EA8FA22-4FAF-415C-AF3D-166B1249F613}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{A6CAF4A9-6549-43BD-A36F-ABC34C59F4C2}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{DEC98EF5-D6AA-4373-8ABC-A0DA45042575}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{595E1B7A-72EB-4BEC-8363-502BFF51774B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{70D498CF-217C-4997-A033-66FFB17119F7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{B59C497A-924F-4030-AF21-9C65BB89CD3E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{0AE32695-D869-4173-9A96-BFB4B248565B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{D7283F1E-AD5E-4ECC-98FB-D7D61DA7570E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [TCP Query User{F13E8D04-BDD7-4C64-9990-56AE563FAE91}C:\programdata\battle.net\agent\agent.3182\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3182\agent.exe
FirewallRules: [UDP Query User{AE10E276-3174-4946-B93D-66DEAFCFF60B}C:\programdata\battle.net\agent\agent.3182\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3182\agent.exe
FirewallRules: [{636648E4-F0D9-4485-9FB6-5D4C46F1BC2C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8B6492FD-C483-40F4-9AE3-2602510EACE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A08B6AE1-7F29-4127-87D4-F736A346B1F8}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{240BF084-232D-4CD4-B0B9-6E526520854F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EB20A3B4-A90B-4760-A9EF-09F34741A28D}] => (Allow) D:\Games\Battlefield 3\bf3.exe
FirewallRules: [{CEC73E71-A4A5-46D2-A415-124911EEA8C8}] => (Allow) D:\Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{FDCD41F8-22E0-4F04-8797-C0B6CA522C67}D:\games\assassin's creed iv black flag\ac4bfsp.exe] => (Allow) D:\games\assassin's creed iv black flag\ac4bfsp.exe
FirewallRules: [UDP Query User{12724704-10D0-41A6-BF55-4BD26279BA81}D:\games\assassin's creed iv black flag\ac4bfsp.exe] => (Allow) D:\games\assassin's creed iv black flag\ac4bfsp.exe
FirewallRules: [TCP Query User{548C4CCE-F9E2-41F3-8AB7-A6F854B98B53}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{0B3A44B5-26AF-4063-ADD1-38C3F77CAD58}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [TCP Query User{99DE3195-044B-4170-A67B-05B6ED2B0F51}D:\games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) D:\games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [UDP Query User{B4551AB7-930A-4AFF-8578-8542DA3764AD}D:\games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) D:\games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [{A8869236-D2D9-450F-B221-9EA898475BCC}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{2ADDB531-E92D-46EB-8785-38827735B7B4}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{CF4A7D86-99C9-485E-9FB8-F7800BD2874A}] => (Allow) D:\Games\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{E1E1CFC5-B09B-4B37-B7B9-763761CF80CC}] => (Allow) D:\Games\Steam\SteamApps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{B9EE79D1-B9FC-4E35-94D6-1214177090FE}] => (Allow) D:\Games\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{AE08BF8A-8EFA-47A0-B45A-1A87B753EC69}] => (Allow) D:\Games\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{646CDCAE-C7BB-4F36-86F0-FA2B42988EAD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{B87C46F9-A81C-4BDE-9E68-4EDF5C2830DB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [TCP Query User{C8B22582-3325-4ADF-AB43-29FD44B04413}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{A0FB7454-F876-4CEA-BD14-BC7AB2A066E9}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{04D5F181-A96C-4DA4-90FE-25A7601AF96F}] => (Allow) D:\Games\Steam\SteamApps\common\Rise of the Triad\Binaries\ROTTLauncher.exe
FirewallRules: [{D46B1C06-3B9B-4E94-99D8-ACFC49A0008F}] => (Allow) D:\Games\Steam\SteamApps\common\Rise of the Triad\Binaries\ROTTLauncher.exe
FirewallRules: [{B5395EF8-11E8-4FA5-879B-6F88335FB389}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe
FirewallRules: [{609B5D06-E37D-4AB4-8DD1-8B4C26B3CFB1}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe
FirewallRules: [{8110F9CF-05D3-4E8E-A27B-6C5617E2E454}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
FirewallRules: [{380FD57D-3DAE-471F-8612-F50AFB2972B6}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe
FirewallRules: [{9F0DA54C-7A9D-4431-8D66-8F1FA683BC36}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe
FirewallRules: [{E44168EF-2A8F-452F-B738-1CEE87D8F2B2}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
FirewallRules: [{026533E5-2745-4E5D-B90F-6D043061B33C}] => (Allow) D:\Games\Steam\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{C1C15E90-BAB3-4F46-AEF0-77EFFF8D935D}] => (Allow) D:\Games\Steam\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{56D595B0-00E5-4E15-AAD1-4810E8566003}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{7407DB54-6663-4392-BCCE-92EB14F6C976}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{03B522D7-319B-4AB1-9DFB-2A640B81BA28}] => (Allow) D:\Games\Anno 2070\Anno5.exe
FirewallRules: [{1E1E270E-3EF8-4306-B845-82401FA9E583}] => (Allow) D:\Games\Anno 2070\Anno5.exe
FirewallRules: [{F1ECF756-C756-4402-8542-7B19501F2B36}] => (Allow) D:\Games\Anno 2070\AutoPatcher.exe
FirewallRules: [{5FB09DB6-5474-48E6-B468-FD89FCA47448}] => (Allow) D:\Games\Anno 2070\AutoPatcher.exe
FirewallRules: [{EE6BF5C2-ED2C-49E5-A662-0418C187D06E}] => (Allow) D:\Games\Anno 2070\InitEngine.exe
FirewallRules: [{244A42B3-B05E-4D1B-880A-CD4B026C5728}] => (Allow) D:\Games\Anno 2070\InitEngine.exe
FirewallRules: [{75ECF193-BDA7-4FA1-9FB5-0CBEB4FCBBFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{EFF479F1-2B5B-4EEE-808F-7240425E08E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{B78646F2-068F-42CB-879A-01F02428CE8C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CC62FB51-6FB7-479E-8B34-A9FBA965C552}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5FF8EA99-E47D-445D-9FC7-B7694BD32B82}] => (Allow) D:\Games\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{73D47F58-E95F-4090-BB88-4670C33F71DD}] => (Allow) D:\Games\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [TCP Query User{F872E6B0-0FF1-48F0-B70D-ED94A87A898E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{FBE5735A-6ACD-4DE6-8661-A09796B0BD9B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{91588CA1-4C39-4C8C-AACA-4C99C4CE4337}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{FF7C7453-CABE-478B-9D36-7C037E6AB96F}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{A853EDCF-289D-4A65-ADBE-E79F28C52DCF}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{87120377-9DFF-49A8-809B-1BB94FD66572}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{D09C692D-879F-4276-9C4B-9E7E8A34ACE2}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{91C56BFD-4A83-43A8-A0BD-6A35BC898781}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [TCP Query User{50F379DB-DDC1-4E2E-BD64-9D25B2824339}D:\games\heroes of the storm\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{0CFD615E-9413-41B8-BAC8-87FA12A63652}D:\games\heroes of the storm\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [{3A8C02AF-8040-4CCC-94FA-3967DD2C68B9}] => (Allow) D:\Games\Steam\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{0D598A31-5E96-4CD0-BCD1-43AE29F9E269}] => (Allow) D:\Games\Steam\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{499F4900-BF2F-404A-B241-23FF574079EB}] => (Allow) D:\Games\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{32A2A1F8-31FE-4450-924E-52F939E900BE}] => (Allow) D:\Games\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{186F6A2F-7778-408D-A7AB-5C09C75DADC8}] => (Allow) D:\Games\Steam\SteamApps\common\DeadEffect\DeadEffect.exe
FirewallRules: [{3893EE96-4C9F-4E9F-BA12-51F053132FF6}] => (Allow) D:\Games\Steam\SteamApps\common\DeadEffect\DeadEffect.exe
FirewallRules: [TCP Query User{B0C118A4-F3AB-43D3-B198-F2B93F5B5FED}D:\games\steam\steamapps\common\arma 3\arma3.exe] => (Allow) D:\games\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{071DE8EB-1847-494D-95C2-53BCAA371F89}D:\games\steam\steamapps\common\arma 3\arma3.exe] => (Allow) D:\games\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{25D9D5CC-A95B-42F1-ABCA-0BDA4E26F006}] => (Allow) D:\Games\Steam\SteamApps\common\HauntedMemories\HM.exe
FirewallRules: [{F328DFB4-D1CF-44D5-8AED-5F7F9F7001E6}] => (Allow) D:\Games\Steam\SteamApps\common\HauntedMemories\HM.exe
FirewallRules: [{182D873F-54C2-494E-AE1C-CA43AD23BFB5}] => (Allow) D:\Games\Heroes of Might and Magic VI - Shades of Darkness\Might & Magic Heroes VI.exe
FirewallRules: [{4DA1FD1A-A663-4268-9DB1-20A8E1419D25}] => (Allow) D:\Games\Heroes of Might and Magic VI - Shades of Darkness\Might & Magic Heroes VI.exe
FirewallRules: [TCP Query User{67ABB04F-D436-4C10-87A4-9FA7BF8E1B5C}H:\sdi_update_r400\sdi_x64_r400.exe] => (Block) H:\sdi_update_r400\sdi_x64_r400.exe
FirewallRules: [UDP Query User{D852213C-7A23-4C1F-B087-F9190AA21910}H:\sdi_update_r400\sdi_x64_r400.exe] => (Block) H:\sdi_update_r400\sdi_x64_r400.exe
FirewallRules: [{C6722E56-7CCB-46D5-AFFD-39D7F2D2B886}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{388D8BB9-B693-4879-89C1-7D997EF85471}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B1D60B0A-0E4E-4D22-AA8A-566433FABC6A}C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [UDP Query User{469DBA00-5334-423E-927C-8BD479ED2FC6}C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [{A4A65314-C1EA-4900-BEA6-AC9499788046}] => (Allow) D:\Games\Steam\SteamApps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{48713423-451B-4DD8-BD2F-D3DD4BC128F4}] => (Allow) D:\Games\Steam\SteamApps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{775E2A57-BB81-4193-9DBB-0B379BE5358B}] => (Allow) D:\Games\Steam\SteamApps\common\WRC 5\WRC5.exe
FirewallRules: [{A33E87D2-2DD6-4C10-AD8E-746466EB8692}] => (Allow) D:\Games\Steam\SteamApps\common\WRC 5\WRC5.exe
FirewallRules: [{F23A10F5-9340-4DEF-957F-9EE7F16273E1}] => (Allow) D:\Games\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{F2984E0C-4F44-4702-98CB-D0ED54A6F428}] => (Allow) D:\Games\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{83F69D6B-80F8-4BE6-ADCF-9ADD545FC53B}] => (Allow) D:\Games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [{214DE951-AE42-41F2-8086-8479948D0213}] => (Allow) D:\Games\Tom Clancy's The Division Beta\TheDivision.exe
FirewallRules: [TCP Query User{70B09198-B57E-4971-BCF7-A642384B67FC}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{77AB99E4-31C7-46A8-B329-B7E23515DA2E}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [{40742AA6-5795-42F0-A76E-2EEF2BAB8D65}] => (Allow) D:\Games\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{7748F3FE-1DBE-4788-8B2D-9440D039C855}] => (Allow) D:\Games\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{E3CA2F1A-C550-4799-B8C1-788607BAE976}] => (Allow) D:\Games\Steam\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe
FirewallRules: [{4A323713-A160-46F4-88DA-7FF0FD472F09}] => (Allow) D:\Games\Steam\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe
FirewallRules: [{2EBC639D-2A28-4F86-AC1A-C0F0A3C61BDD}] => (Allow) D:\Games\Steam\SteamApps\common\ARMA Cold War Assault\ColdWarAssaultPreferences.exe
FirewallRules: [{5C3226EE-96BF-475F-865D-318780C48127}] => (Allow) D:\Games\Steam\SteamApps\common\ARMA Cold War Assault\ColdWarAssaultPreferences.exe
FirewallRules: [{7A9C192A-EDC2-4806-A931-08E4D929E671}] => (Allow) D:\Games\Steam\SteamApps\common\Knights and Merchants Historical Version\KM_TPR.exe
FirewallRules: [{A425C907-FB0F-4188-A0F6-409D1B304BE6}] => (Allow) D:\Games\Steam\SteamApps\common\Knights and Merchants Historical Version\KM_TPR.exe
FirewallRules: [{B403A32F-B54B-461E-99B0-FC636F97F4F0}] => (Allow) D:\Games\Steam\SteamApps\common\Knights and Merchants Historical Version\hd\Knights_and_Merchants_steam.exe
FirewallRules: [{8D76D0DB-9F69-44F8-B7B3-005C85A1529C}] => (Allow) D:\Games\Steam\SteamApps\common\Knights and Merchants Historical Version\hd\Knights_and_Merchants_steam.exe
FirewallRules: [TCP Query User{2C1465A6-644B-4C18-9EFB-E7C8E8547D22}C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe] => (Block) C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [UDP Query User{CB224A6C-6E04-4286-8AB2-49DBFAFB81B7}C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe] => (Block) C:\program files (x86)\starcraft ii\versions\base42932\sc2_x64.exe
FirewallRules: [{4C273E82-30B8-47A8-9449-E515D63DB0FE}] => (Allow) D:\Games\Steam\SteamApps\common\Age of Cavemen\AgeOfCavemen.exe
FirewallRules: [{39CD5035-31C1-400B-866D-B77C8CE0EA4D}] => (Allow) D:\Games\Steam\SteamApps\common\Age of Cavemen\AgeOfCavemen.exe
FirewallRules: [{3318B5DC-5423-457C-B889-472096DA7EC4}] => (Allow) D:\Games\Steam\SteamApps\common\Sherlock Holmes - Crimes and Punishments\Binaries\Win32\Sherlock.exe
FirewallRules: [{D0BAC9E0-1ED2-4685-BBDC-A52DC302BDB6}] => (Allow) D:\Games\Steam\SteamApps\common\Sherlock Holmes - Crimes and Punishments\Binaries\Win32\Sherlock.exe
FirewallRules: [{A2AA0A61-5C2E-4EA0-89EE-4D03E0206343}] => (Allow) D:\Games\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{5B74FDF8-7BD8-421F-9E6E-C3C4D1707449}] => (Allow) D:\Games\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{C022C65A-B419-4C11-8B3C-186D034DEC5B}] => (Allow) D:\Programme\Winamp\winamp.exe
FirewallRules: [{AB496EA9-4582-45FB-A12C-FDE6631CE143}] => (Allow) D:\Programme\Winamp\winamp.exe
FirewallRules: [{2AA6FB30-7784-4BCE-9FE6-17495D3406A0}] => (Allow) D:\Games\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{ED130D16-6F90-486F-AC3A-EFB8A4144293}] => (Allow) D:\Games\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{40F2DE81-C294-428C-B0B2-30B1C8AB72A6}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{E2D5AB00-34CB-440F-9832-73F1C1C949F9}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe
FirewallRules: [{8A3C33CE-3C7D-48D3-A2E7-EF3C14BACB3D}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [{BD77300A-17C9-4574-BA00-F12BA76653F4}] => (Allow) D:\Games\Steam\SteamApps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe
FirewallRules: [TCP Query User{8BCF7F06-83DF-4686-A054-8B419B7936CC}C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [UDP Query User{40AC141F-DB01-4DA0-B277-FDF9D2E5254E}C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [{473559D0-5B15-48BD-B41E-A9438C89F375}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{E4835B35-47AA-4FA6-AB3B-2F058ADD03C0}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{202D89A5-2176-4AED-984A-3B5C45CE6A36}] => (Allow) D:\Games\Steam\SteamApps\common\Mafia III\launcher.exe
FirewallRules: [{BDC5778E-D5AA-47DD-A826-AE1A3FE9545D}] => (Allow) D:\Games\Steam\SteamApps\common\Mafia III\launcher.exe
FirewallRules: [{12AC2950-B3D0-4590-80B1-F38578B8184A}] => (Allow) D:\Games\Steam\SteamApps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{32CB95DE-CEF7-41EF-9EC1-99FBBF55936E}] => (Allow) D:\Games\Steam\SteamApps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{AE3AD3AB-9709-4FEC-9769-990401B35750}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{38FDFD4A-1D60-47B1-938B-120D145F7225}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{FEDF7A1E-3E0D-4C6A-ACFE-F13378B386EE}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{0EE76F7F-971D-4095-B4F9-328D32D2105A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{F592BDC7-59B4-45C9-AA5B-4AB5D92CB66B}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{312B3AC0-105E-421C-ADD6-E7685821A421}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7385005E-C16F-4011-A9BF-D9E0BC33C916}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{BC964FCC-760F-46BB-A7C5-98428B2E56C8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{7979C7F6-5774-497D-8016-390DC412F5CE}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\gflauncher.exe
FirewallRules: [{EF3A4163-2582-47E2-B540-EA5EFB3F580A}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\live\gflauncher.exe
FirewallRules: [{80CB4932-260A-45ED-B403-FB85535278FD}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\WarfaceMycomSteamLoader.exe
FirewallRules: [{9A4738BB-4D04-4570-B098-F4DD63C1043F}] => (Allow) D:\Games\Steam\SteamApps\common\Warface\WarfaceMycomSteamLoader.exe
FirewallRules: [{207C0CDA-C1B9-4547-BFA1-36D044EEE0DE}] => (Allow) D:\Games\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{43D1BE4D-37D0-4191-936B-285FBD4B4996}] => (Allow) D:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{DA9091C7-E8BA-4301-BB3E-89958BE8FA61}] => (Allow) D:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{0581C7FA-C2E7-4AD9-9569-D0FC899754BD}] => (Allow) D:\Games\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{96997317-4BF6-48FC-BDBD-5711D53C9AFC}] => (Allow) D:\Games\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{52969E58-2B4A-4B71-89B1-DDCA32D6AF5B}] => (Allow) D:\Games\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{70064A10-521D-46B9-A327-57FF5986C4D0}] => (Allow) D:\Games\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{A290F671-92CC-4484-8D50-E255FCDAA17A}] => (Allow) D:\Games\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{FC657AAD-093D-4053-BFAA-D269F5CC4F16}] => (Allow) D:\Games\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{C04093B2-0D50-432D-8818-610A7BBB8B24}] => (Allow) D:\Games\Steam\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{146BD181-D770-4E11-89F1-5A8FB596A0F6}] => (Allow) D:\Games\Steam\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{7232C2CD-38F3-429A-96D7-8290101126CB}] => (Allow) D:\Games\Steam\SteamApps\common\Argo\argobattleye.exe
FirewallRules: [{7260E40C-0D83-4C72-8EA0-6421F93EFFBB}] => (Allow) D:\Games\Steam\SteamApps\common\Argo\argobattleye.exe
FirewallRules: [{0EE5F9E2-A222-4F44-856E-B198D984EE21}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{E58EF413-3A73-46C2-BB6F-C330560B9DE7}] => (Allow) D:\Games\Steam\SteamApps\common\RESIDENT EVIL 7 biohazard Demo\re7trial.exe
FirewallRules: [{C55CDE7D-81C1-4160-866D-7EF1E5B07315}] => (Allow) D:\Games\Steam\SteamApps\common\RESIDENT EVIL 7 biohazard Demo\re7trial.exe
FirewallRules: [{FC69E7AB-3DE4-48DC-B032-E2C8D3A73880}] => (Allow) D:\Games\Steam\SteamApps\common\RESIDENT EVIL 7 biohazard\re7.exe
FirewallRules: [{7B1CD946-8816-4D25-AC35-4D92F8B67690}] => (Allow) D:\Games\Steam\SteamApps\common\RESIDENT EVIL 7 biohazard\re7.exe
FirewallRules: [{59019817-BE0A-4BB5-8732-D617AA9C8C6D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A162FE9F-323C-4E02-8246-C2A7EFF6D040}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{A17B852B-395B-49B8-B5F8-8E43ED27109A}] => (Allow) D:\Games\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
==================== Wiederherstellungspunkte =========================
11-11-2017 15:34:18 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/15/2017 03:01:14 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile 1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (11/13/2017 08:02:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: gflauncher.exe, Version: 0.0.0.0, Zeitstempel: 0x55b872f9
Name des fehlerhaften Moduls: gflauncher.exe, Version: 0.0.0.0, Zeitstempel: 0x55b872f9
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00095691
ID des fehlerhaften Prozesses: 0x170c
Startzeit der fehlerhaften Anwendung: 0x01d35cb0265d34bf
Pfad der fehlerhaften Anwendung: D:\Games\GFACE\GFACE Launcher\live\gflauncher.exe
Pfad des fehlerhaften Moduls: D:\Games\GFACE\GFACE Launcher\live\gflauncher.exe
Berichtskennung: 2016caee-c8a5-11e7-851a-fcaa14f38fed
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
Error: (11/13/2017 12:11:32 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (11/13/2017 12:11:32 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (11/13/2017 12:11:31 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Systemfehler:
=============
Error: (11/13/2017 07:49:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (11/13/2017 07:49:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.
Error: (11/13/2017 08:33:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (11/13/2017 08:33:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.
Error: (11/13/2017 08:33:12 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 13.11.2017 um 08:31:01 unerwartet heruntergefahren.
Error: (11/12/2017 11:21:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (11/12/2017 11:21:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.
Error: (11/12/2017 11:21:02 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x00000133 (0x0000000000000000, 0x0000000000000501, 0x0000000000000500, 0x0000000000000000). Ein volles Abbild wurde gespeichert in: C:\Windows\MEMORY.DMP. Berichts-ID: 111217-10421-01.
Error: (11/12/2017 11:21:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 12.11.2017 um 23:00:26 unerwartet heruntergefahren.
Error: (11/12/2017 09:30:21 AM) (Source: DCOM) (EventID: 10010) (User: NILS-PC)
Description: Der Server "{4545DEA0-2DFC-4906-A728-6D986BA399A9}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 8042.6 MB
Verfügbarer physikalischer RAM: 4242.67 MB
Summe virtueller Speicher: 16234.6 MB
Verfügbarer virtueller Speicher: 11624.59 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:90.12 GB) (Free:9.55 GB) NTFS
Drive d: () (Fixed) (Total:1862.89 GB) (Free:982.2 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 1 (Size: 111.8 GB) (Disk ID: A794C68B)
Partition: GPT.
==================== Ende von Addition.txt ============================
und weiterhin vielen Dank für Deine Mühe ;) !!! |
Lesestoff:
FRST 32-Bit | FRST 64-Bit
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
dann auf 
und dann auf 
.