Glaringsoul | 16.02.2020 00:14 | Addition log Musste es auf einen zweiten post aufspalten ... Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-02-2020
durchgeführt von Dorian (15-02-2020 23:52:22)
Gestartet von C:\Users\nexus\Desktop
Windows 10 Home Version 1909 18363.657 (X64) (2019-07-28 23:09:10)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2063883719-2655018868-3223348202-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2063883719-2655018868-3223348202-503 - Limited - Disabled)
[REDACTED] (S-1-5-21-2063883719-2655018868-3223348202-1001 - Administrator - Enabled) => C:\Users\nexus
Gast (S-1-5-21-2063883719-2655018868-3223348202-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2063883719-2655018868-3223348202-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\uTorrent) (Version: 3.5.5.45505 - BitTorrent Inc.)
Action Replay PowerSaves 3DS Version 1.55 (HKLM-x32\...\{CD24B06F-0A4D-410A-AEF2-DFE6A28AB4C0}_is1) (Version: 1.55 - Datel Design & Development)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.021.20061 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.321 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.321 - Adobe)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.2.8 - Electronic Arts, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{FD52A2FF-4D16-49C4-A2CD-DAC752C18BA2}) (Version: 8.0 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9B061D60-4E2C-4987-BFFD-423E3D477660}) (Version: 8.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6CECF0FB-EE71-4FE5-8AE0-FA007408934A}) (Version: 13.0.0.38 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{B27BC1FC-8474-9E32-73C2-6F7CD58AD1E3}) (Version: 10.1.17763.132 - Microsoft) Hidden
ArcheAge: Unchained (HKLM-x32\...\Glyph ArcheAge: Unchained) (Version: - Trion Worlds, Inc.)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
AutoHotkey 1.1.30.01 (HKLM\...\AutoHotkey) (Version: 1.1.30.01 - Lexikos)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Borderless Gaming (HKLM-x32\...\Borderless Gaming_is1) (Version: 9.5.5 - Andrew Sampson)
CCleaner (HKLM\...\CCleaner) (Version: 5.62 - Piriform)
Darkest Dungeon The Color of Madness (HKLM-x32\...\Darkest Dungeon The Color of Madness_is1) (Version: - )
DDS Viewer (HKLM-x32\...\{707333E0-C796-4E2D-B0DA-5A429706C361}_is1) (Version: - IdeaMK)
Dead Cells Legacy (HKLM-x32\...\Dead Cells Legacy_is1) (Version: - )
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 5.0.4.0 - devolo AG)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
Divine Slice of Life (HKLM\...\RGl2aW5lU2xpY2VvZkxpZmU=_is1) (Version: 1 - )
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.13263.0 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{5AB22190-97D9-4798-955D-0A9EF15E7F60}) (Version: 1.1.206.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
f.lux (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Flux) (Version: - f.lux Software LLC)
Genesis (HKLM\...\{4ECEE9DD-3C31-3D2D-8C55-E6A468B8C4BA}) (Version: 6.0.4 - RPGFramework project) <==== ACHTUNG
GlassWire 2.1 (remove only) (HKLM-x32\...\GlassWire 2.1) (Version: 2.1.167 - SecureMix LLC)
Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.106 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
HandBrake 1.2.2 (HKLM-x32\...\HandBrake) (Version: 1.2.2 - )
Hextech Repair Tool (HKLM-x32\...\{7F9A97E6-E666-11E5-B582-B88687E82322}) (Version: 1.1.165 - Riot Games, Inc.)
Innkeeper (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Innkeeper) (Version: 0.4.30 - Curse Inc.)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.5.0.1027 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{eb0d4a41-3065-42b0-a868-c60d42d3ea98}) (Version: 10.1.17695.8086 - Intel(R) Corporation) Hidden
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{D175D43C-776D-436D-A75A-E637EDE76973}) (Version: 16.5.0.1027 - Intel Corporation)
iTunes (HKLM\...\{C9802CCE-6B9F-4572-AC31-712F25263D5E}) (Version: 12.10.1.4 - Apple Inc.)
Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation)
Java(TM) SE Development Kit 13.0.1 (64-bit) (HKLM\...\{02E6B6AF-D69D-5191-9D34-7E11D4AC952C}) (Version: 13.0.1.0 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{29B915AE-013F-151F-3E61-67F7363C3A09}) (Version: 10.1.17763.132 - Microsoft) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LAV Filters 0.62.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.62.0 - Hendrik Leppkes)
League Displays (HKLM-x32\...\LolScreenSaver) (Version: W1.0.1039-beta - Riot Games)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Legends of Runeterra (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Riot Game bacon.live) (Version: - Riot Games, Inc)
LOOT Version 0.14.3 (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.14.3 - LOOT Team)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft OneDrive (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\OneDriveSetup.exe) (Version: 19.103.0527.0003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.18.1104.625 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 73.0 (x64 de) (HKLM\...\Mozilla Firefox 73.0 (x64 de)) (Version: 73.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 67.0.4 - Mozilla)
MSI Development Tools (HKLM-x32\...\{6C961B30-A670-8A05-3BFE-3947E84DD4E4}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Newgrounds Player (HKLM-x32\...\{B9735123-2823-49F8-8264-372895D39702}) (Version: 1.0.0 - Newgrounds)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.70.5 - Black Tree Gaming)
Node.js (HKLM\...\{F62C0E94-FBB4-4009-9941-6271BD2EBCEF}) (Version: 12.13.0 - Node.js Foundation)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA Grafiktreiber 442.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.19 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 23.2.1 - OBS Project)
OP.GG (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Overwolf_bhefjlijbpddfjbpokonlhdneiljfghigipgaijd) (Version: 1.6.9 - Overwolf app)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Opera GX Stable 66.0.3515.75 (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Opera GX 66.0.3515.75) (Version: 66.0.3515.75 - Opera Software)
Opera Stable 66.0.3515.72 (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\Opera 66.0.3515.72) (Version: 66.0.3515.72 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.63.37653 - Electronic Arts, Inc.)
paint.net (HKLM\...\{BAFF7E40-25F2-4681-95F1-9D0E8EF0ABA4}) (Version: 4.2.8 - dotPDN LLC)
PBE (HKLM-x32\...\PBE 1.0) (Version: 1.0 - Riot Games, Inc)
PS3Merge version 1.0.1.0 (HKLM-x32\...\PS3Merge_is1) (Version: 1.0.1.0 - Karmian.org)
Python 2.7.17 (64-bit) (HKLM\...\{9255D53C-6C21-4664-AAF3-6EAC50F867Da}) (Version: 2.7.17150 - Python Software Foundation)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.3 r3298 - Rainmeter)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.37.1028.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8228 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.1.1 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.1 - VS Revo Group, Ltd.)
ROCCAT Swarm (HKLM-x32\...\{1594022A-AB87-4C5B-A12A-14E4B4D8EAFF}) (Version: 1.93.620 - ROCCAT GmbH) Hidden
ROCCAT Swarm (HKLM-x32\...\InstallShield_{1594022A-AB87-4C5B-A12A-14E4B4D8EAFF}) (Version: 1.93.620 - ROCCAT GmbH)
Samsung Portable SSD Software (HKLM-x32\...\SamsungPortableSSD_is1) (Version: 1.6.0.27 - Samsung Electronics)
SDK ARM Additions (HKLM-x32\...\{0B5D6FB7-05A5-271B-5B99-82384219A471}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{4A5F6E94-7967-A333-8231-CA9AF35E03BD}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.30.9696 - SoftEther VPN Project)
Sony Preset Manager 2.0e (HKLM-x32\...\{84C34368-0C06-4880-9095-474609A8E770}) (Version: 2.0.88 - Sony)
Sony Sound Forge Audio Studio 9.0 (HKLM-x32\...\{20207CCE-A8FA-44A7-AA3D-1E43EB307B27}) (Version: 9.0.232 - Sony)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\TeamSpeak 3 Client) (Version: 3.2.3 - TeamSpeak Systems GmbH)
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.3.4730 - TeamViewer)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
The Elder Scrolls V Skyrim - Legendary Edition (HKLM-x32\...\{EAABE756-8A47-440F-AAC7-2F6BFF589169}) (Version: 6.0 - Black Box)
The Witcher 3 HD Reworked Project (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\The Witcher 3 HD Reworked Project 5.1) (Version: 5.1 - HalkHoganPL)
UE4 Prerequisites (x64) (HKLM-x32\...\{4e242cc8-5e3c-4b08-9d55-dbc62ddd1208}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{7D225043-6CC5-7B56-11DD-AFF90E4C1C0C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{CB19DBA2-C210-5646-9522-695A1317CD34}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{5F577A45-3C65-352B-061D-D6A57F05402C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{3B588BBE-EB02-D1B2-5CD5-7DB85AD8A3E7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{D2DC1EDF-EE04-9B5F-BDD7-06645D859EC3}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{CE83D0BD-418A-F3D1-D6CE-687E96D1EBD0}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 82.0 - Ubisoft)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software)
vcpp_crt.redist.clickonce (HKLM-x32\...\{86A64DD6-2619-4D30-B777-75568A3EE56D}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Visual Studio Build Tools 2017 (HKLM-x32\...\0a815326) (Version: 15.9.28307.905 - Microsoft Corporation)
vs_FileTracker_Singleton (HKLM-x32\...\{A41E138F-5A3F-443C-B72D-957AB994FB5A}) (Version: 15.9.28128 - Microsoft Corporation) Hidden
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.34-3 - Wacom Technology Corp.)
WhatsApp (HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\WhatsApp) (Version: 0.4.315 - WhatsApp)
WinAppDeploy (HKLM-x32\...\{716AE8F2-1BE3-7657-DF6B-F23DEEC75AF9}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Windows SDK AddOn (HKLM-x32\...\{1E76DFA7-96F3-4281-8E41-8A226C3E42EE}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17763.132 (HKLM-x32\...\{5fe95b9d-9219-4d8b-a031-71323ae48a81}) (Version: 10.1.17763.132 - Microsoft Corporation)
WinRAR 5.61 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{00B12DF9-5428-9406-DE2C-8E8A1A062B05}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{E82A4A6C-C21C-35FE-B805-3E44318F6D63}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{7E898893-9C42-A572-7F57-FDE55CE812F7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E8B1CB29-5C24-D882-3CEF-F8A7263BC63D}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{F6F11150-93DE-0507-FCA0-F746E0207017}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{8329C3A0-8582-D1C2-67FF-800654BFDF45}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{771C9DEF-7C0B-85DA-6426-7A20F06BEC94}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{B047C746-63E8-41C7-A5C0-7ABD390CF3E6}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{0063AF94-397B-9C64-1C71-D404B27C5D96}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Yarn (HKLM-x32\...\{32FB6348-314B-4B00-A0C5-CD8D7779F76F}) (Version: 1.19.1 - Yarn Contributors)
Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-12] (Microsoft Studios) [MS Ad]
MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-20] (Microsoft Corporation) [MS Ad]
Python 3.7 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.7_3.7.1776.0_x64__qbz5n2kfra8p0 [2019-12-25] (Python Software Foundation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.180.0_x64__dt26b99r8h8gj [2019-11-29] (Realtek Semiconductor Corp)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2063883719-2655018868-3223348202-1001_Classes\CLSID\{C52B9871-E5E9-41FD-B84D-C5ACADBEC7AE}\InprocServer32 -> C:\Users\nexus\Desktop\Locale.Emulator.2.4.0.0\LEContextMenuHandler.DLL (Paddy Xu) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-05-23] () [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-05-23] () [Datei ist nicht signiert]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\nexus\AppData\Local\MEGAsync\ShellExtX64.dll [2019-11-03] (Mega Limited -> )
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2019-10-14 15:18 - 2019-12-25 07:26 - 000632832 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\aimo.dll
2014-10-23 18:27 - 2015-12-28 23:25 - 000120334 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\libgcc_s_dw2-1.dll
2015-12-29 06:25 - 2015-12-28 23:25 - 001540622 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\libstdc++-6.dll
2019-07-25 17:19 - 2019-10-24 04:16 - 007523840 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\resource.dll
2018-05-23 14:32 - 2018-05-23 14:32 - 000125952 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll
2014-10-23 18:27 - 2015-12-28 23:25 - 000079360 _____ (MingW-W64 Project. All rights reserved.) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\libwinpthread-1.dll
2019-08-05 16:32 - 2019-11-01 16:40 - 000037376 _____ (ROCCAT GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\AimoEffectWrapper.dll
2016-08-11 18:26 - 2016-08-11 11:26 - 000019456 _____ (Roccat GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\UDPServer.dll
2019-11-29 23:14 - 2019-11-29 23:14 - 000023040 _____ (Synaptics Incorporated.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.180.0_x64__dt26b99r8h8gj\SynAudSrvDll.dll
2018-12-31 12:41 - 2020-02-12 01:24 - 001277440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll
2018-12-31 12:41 - 2020-02-12 01:24 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll
2015-12-29 06:52 - 2015-12-28 23:52 - 002177536 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\LIBEAY32.dll
2015-12-29 06:52 - 2015-12-28 23:52 - 000462336 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ssleay32.dll
2018-12-31 12:41 - 2020-02-12 01:24 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2020-02-12 01:24 - 2020-02-12 01:24 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll
2020-02-12 01:24 - 2020-02-12 01:24 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll
2020-02-12 01:24 - 2020-02-12 01:24 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll
2020-02-12 01:24 - 2020-02-12 01:24 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2020-02-12 01:24 - 2020-02-12 01:24 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll
2016-06-11 02:15 - 2016-06-10 19:15 - 000058880 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qdds.dll
2016-06-10 15:32 - 2016-06-10 08:32 - 000033792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qgif.dll
2016-06-11 02:15 - 2016-06-10 19:15 - 000046592 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qicns.dll
2016-06-10 15:33 - 2016-06-10 08:33 - 000036352 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qico.dll
2016-06-10 15:32 - 2016-06-10 08:32 - 000258560 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qjpeg.dll
2016-06-11 01:51 - 2016-06-10 18:51 - 000028672 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qsvg.dll
2016-06-11 02:15 - 2016-06-10 19:15 - 000028672 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qtga.dll
2016-06-11 02:15 - 2016-06-10 19:15 - 000495616 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qtiff.dll
2016-06-11 02:15 - 2016-06-10 19:15 - 000027648 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qwbmp.dll
2016-06-11 02:16 - 2016-06-10 19:16 - 000416768 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\imageformats\qwebp.dll
2016-06-13 03:38 - 2016-06-12 20:38 - 000317440 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\mediaservice\dsengine.dll
2016-06-10 15:34 - 2016-06-10 08:34 - 001489920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\platforms\qwindows.dll
2016-12-07 17:20 - 2020-01-13 02:29 - 005384704 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Core.dll
2016-06-10 15:23 - 2016-06-10 08:23 - 005283840 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Gui.dll
2016-06-13 03:29 - 2016-06-12 20:29 - 000853504 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Multimedia.dll
2016-06-10 15:17 - 2016-06-10 08:17 - 001610240 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Network.dll
2016-06-11 01:51 - 2016-06-10 18:51 - 000348160 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Svg.dll
2016-06-10 15:29 - 2016-06-10 08:29 - 006358528 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Widgets.dll
2016-06-10 15:17 - 2016-06-10 08:17 - 000216064 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\Qt5Xml.dll
2015-08-24 10:10 - 2015-08-24 03:10 - 000110207 _____ (Un4seen Developments) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\BASS.dll
2015-08-24 10:10 - 2015-08-24 03:10 - 000012166 _____ (Un4seen Developments) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\BASSWASAPI.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\WINDOWS\tracing:? [16]
AlternateDataStreams: C:\Users\nexus\Anwendungsdaten:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\nexus\Anwendungsdaten:a73c9821162906c196526dc43f31319f [394]
AlternateDataStreams: C:\Users\nexus\Application Data:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\nexus\Application Data:a73c9821162906c196526dc43f31319f [394]
AlternateDataStreams: C:\Users\nexus\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\nexus\AppData\Roaming:a73c9821162906c196526dc43f31319f [394]
AlternateDataStreams: C:\Users\nexus\AppData\Local\Temp:$DATA [16]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\21675483.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\21675483.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-01-26 18:08 - 2019-01-26 18:08 - 000000832 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Python27\;C:\Python27\Scripts;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\nodejs\;C:\ProgramData\chocolatey\bin;C:\Program Files (x86)\Yarn\bin\
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\nexus\Pictures\Wallpapers\aurora-stars4k.jpeg
DNS Servers: 1.1.1.1 - 1.0.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
ist aktiviert.
Network Binding:
=============
Ethernet: SoftEther Lightweight Network Protocol -> SeLow (enabled)
Ethernet: Reliable Multicast-Protokoll -> ms_rmcast (enabled)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
HKLM\...\StartupApproved\Run32: => "LeagueDisplays"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\StartupFolder: => "Discord.lnk"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "Innkeeper"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "Gaijin.Net Agent"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "Battle.net"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_A3CF46F4A081E0C15D64E12F38778914"
HKU\S-1-5-21-2063883719-2655018868-3223348202-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{97058374-107B-4680-A19B-1AD8A96032B2}] => (Allow) D:\Steam\steamapps\common\StarGirls\StarGirls.exe () [Datei ist nicht signiert]
FirewallRules: [{BF1AD533-028F-4824-A824-FF800C1DCB2E}] => (Allow) D:\Steam\steamapps\common\StarGirls\StarGirls.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E626B96F-0DCB-40A6-8DEC-E0F60CDDEBBC}D:\cemu_1.15.8\cemu.exe] => (Block) D:\cemu_1.15.8\cemu.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{4FA3196A-C988-4E81-9C1A-56B8CC66C63C}D:\cemu_1.15.8\cemu.exe] => (Block) D:\cemu_1.15.8\cemu.exe () [Datei ist nicht signiert]
FirewallRules: [{87CDE08D-9EB5-432F-A297-9D331F9B068D}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (devolo AG -> devolo AG)
FirewallRules: [{50965733-DCD6-428B-BF1A-9BAE4FCE94C5}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (devolo AG -> devolo AG)
FirewallRules: [{55FCE4F9-2E45-40A1-9006-E8E2ED8D5201}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7611A307-5B87-432C-884E-74C65C73AFE1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{501D15FB-C0EE-4147-8C57-B4C0CDEB40E3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{D0507886-360D-4AF9-85F8-EEE4AEBFE147}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{E116CD8F-D8A6-49D1-A4A7-4B1C0A7CF482}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{7C9746D5-6621-44CC-A7C4-6C6BDC17AF3F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{1A5EF587-6998-4E72-9D98-E04DCDC8A177}] => (Allow) D:\Steam\steamapps\common\Vambrace Cold Soul\VambraceColdSoul.exe () [Datei ist nicht signiert]
FirewallRules: [{15DB8ED6-20E5-4497-98C6-D1E00A7B741B}] => (Allow) D:\Steam\steamapps\common\Vambrace Cold Soul\VambraceColdSoul.exe () [Datei ist nicht signiert]
FirewallRules: [{044AE02C-9685-4507-AD73-A325684D5542}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XV\ffxv_s.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO.,Ltd.)
FirewallRules: [{4F7BD67B-D476-4124-AEB6-8FB1339B1B12}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XV\ffxv_s.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO.,Ltd.)
FirewallRules: [UDP Query User{E8BBE522-6E6F-46E8-A2A1-981CBE219F28}D:\origin\dragon age\bin_ship\daorigins.exe] => (Allow) D:\origin\dragon age\bin_ship\daorigins.exe (Electronic Arts -> BioWare)
FirewallRules: [TCP Query User{42DC6D7C-CC30-4355-A35B-C05497336AE7}D:\origin\dragon age\bin_ship\daorigins.exe] => (Allow) D:\origin\dragon age\bin_ship\daorigins.exe (Electronic Arts -> BioWare)
FirewallRules: [UDP Query User{6A7FF7FF-2884-4EC0-A920-F768F8B5A073}D:\pbe\leagueclient.exe] => (Allow) D:\pbe\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [TCP Query User{DFC7C923-55BF-4F77-AC16-6D0DB5EADD76}D:\pbe\leagueclient.exe] => (Allow) D:\pbe\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [{B5395E6E-7C5E-4E37-8ADB-68354878AEB2}] => (Allow) D:\Steam\steamapps\common\Vainglory\Vainglory.exe () [Datei ist nicht signiert]
FirewallRules: [{2A7BB84B-A7A2-444A-AB32-8522CF1406CE}] => (Allow) D:\Steam\steamapps\common\Vainglory\Vainglory.exe () [Datei ist nicht signiert]
FirewallRules: [{6D103E87-FCAC-4520-9F5F-30508E68C213}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{55F4D869-E861-4858-B91D-CF2360DAE2CA}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{D4B34256-82F7-4A0D-A23E-003A265EE5A9}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{E648B871-14A6-4B18-9F62-18A0CFB89108}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{664F830E-4151-4C6C-8B14-87E765D6136A}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{B1A73ECA-F5D2-46B1-B285-7B58B72108ED}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{E0508B83-EC03-40B2-9BA9-C2B71F06AE6D}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{26B76569-AC80-4A05-B049-301D54DA13AC}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{D73B1CFA-A3E1-479B-84FC-369EBDCFC604}] => (Allow) D:\Steam\steamapps\common\Troubleshooter\Release\bin\ProtoLion.exe (Dandylion) [Datei ist nicht signiert]
FirewallRules: [{C77D5EFD-08A5-46EB-93A3-E62933EA7DB9}] => (Allow) D:\Steam\steamapps\common\Troubleshooter\Release\bin\ProtoLion.exe (Dandylion) [Datei ist nicht signiert]
FirewallRules: [{9352C52E-6213-4B25-80A5-4BB631707DB7}] => (Allow) D:\Steam\steamapps\common\Intralism\Intralism.exe () [Datei ist nicht signiert]
FirewallRules: [{A9147CD7-D3FF-4B17-B376-17C03CCA28AA}] => (Allow) D:\Steam\steamapps\common\Intralism\Intralism.exe () [Datei ist nicht signiert]
FirewallRules: [{53765018-BAC8-461D-8836-7531B96D0ACC}] => (Allow) D:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{CA34ECB0-393C-475D-A672-AFF7EB2A93D4}] => (Allow) D:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7E506EDD-6FF7-4C71-B15D-F876AD90EDAF}] => (Allow) D:\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{A79EAE51-B048-4508-AB28-C22EE7CF1713}] => (Allow) D:\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{A289A539-62F6-4A47-A57B-040935241E64}] => (Allow) D:\Steam\steamapps\common\Shadow Brawlers\sb.exe () [Datei ist nicht signiert]
FirewallRules: [{7BC42FE6-1F92-49B5-9175-C4E364216BBC}] => (Allow) D:\Steam\steamapps\common\Shadow Brawlers\sb.exe () [Datei ist nicht signiert]
FirewallRules: [{9AE173CE-7248-4506-990F-F9FA73E8730A}] => (Allow) D:\Steam\steamapps\common\BrightMemory_EP1\BrightMemory_EP1\Binaries\Win64\BrightMemory_EP1-Win64-Shipping.exe (FYQD Studio) [Datei ist nicht signiert]
FirewallRules: [{E4C47B1E-F706-48B3-BF57-DF83DAF0E79D}] => (Allow) D:\Steam\steamapps\common\BrightMemory_EP1\BrightMemory_EP1\Binaries\Win64\BrightMemory_EP1-Win64-Shipping.exe (FYQD Studio) [Datei ist nicht signiert]
FirewallRules: [{2FE38640-E993-4C0C-AB28-8607486BF222}] => (Allow) D:\Steam\steamapps\common\Blender\blender.exe (Stichting Blender Foundation -> Blender Foundation)
FirewallRules: [{5678455F-F6EC-4911-B34A-EDE56758F408}] => (Allow) D:\Steam\steamapps\common\Blender\blender.exe (Stichting Blender Foundation -> Blender Foundation)
FirewallRules: [{0481077A-1B3A-4E85-A441-A0A0831CEE32}] => (Allow) D:\Steam\steamapps\common\FFXVModOrganizer\ModOrganizer.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{F3ACEAC4-FCB7-49C1-9A7B-D941467AC86F}] => (Allow) D:\Steam\steamapps\common\FFXVModOrganizer\ModOrganizer.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{7BD734FD-0619-42F0-86FC-339BEAFAC9A0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{168E3EC1-25AA-461D-918F-35EF6C94AEB3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FFE3E791-D0C1-4F14-86F6-2AD5F676EEA0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{09D36F92-9C89-4EB9-A027-292A1AD90150}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{294294B9-D457-41A0-B419-0EBFEC2F16E1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{98517AC5-E02C-41B2-998E-7829EC680744}] => (Allow) D:\Steam\steamapps\common\CrossCode\CrossCode.exe (The NW.js Community) [Datei ist nicht signiert]
FirewallRules: [{6F8C51B5-4ADD-4939-9B87-992D0F114AF8}] => (Allow) D:\Steam\steamapps\common\CrossCode\CrossCode.exe (The NW.js Community) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{803C3F7F-8B8F-484E-B162-E7D1E37FF5DC}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe (Electronic Arts, Inc. -> Respawn Entertainment)
FirewallRules: [TCP Query User{ACA5AD90-AB5B-4525-ACF0-1511B931C1F0}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe (Electronic Arts, Inc. -> Respawn Entertainment)
FirewallRules: [{AD5EBE64-2094-4B6A-9642-070BD7A736D0}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe (Electronic Arts -> BioWare)
FirewallRules: [{A47920DB-707F-44C0-A211-72553D558B1E}] => (Allow) D:\Origin\Dragon Age\bin_ship\daorigins.exe (Electronic Arts -> BioWare)
FirewallRules: [{DDD98D19-DEA3-463D-9B76-BF46CCFB7F93}] => (Allow) D:\Steam\steamapps\common\Seven days with the Ghost\7days_with_the_Ghost.exe () [Datei ist nicht signiert]
FirewallRules: [{549DDEEF-8181-48DF-94A6-FD71B76FA35E}] => (Allow) D:\Steam\steamapps\common\Seven days with the Ghost\7days_with_the_Ghost.exe () [Datei ist nicht signiert]
FirewallRules: [{FFAB6348-964E-4DE8-B31B-0DAD3C1D0A25}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe (Gearbox Software LLC -> Take-Two Interactive Software, Inc.)
FirewallRules: [{2660B3DA-C913-4D4D-B91B-835378335357}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe (Gearbox Software LLC -> Take-Two Interactive Software, Inc.)
FirewallRules: [{289F299D-8B07-4F3A-8BA3-6713F2148D88}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe (Gearbox Software LLC -> Gearbox Software)
FirewallRules: [{0EA4E913-2342-4262-9AED-89AFCDB2DFB6}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe (Gearbox Software LLC -> Gearbox Software)
FirewallRules: [{CF640023-0D3B-4424-8A13-586428093DE6}] => (Allow) C:\Users\nexus\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{50C4296F-ACC0-4B96-8FAC-DBE0804151AF}] => (Allow) C:\Users\nexus\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{12EAF62C-392E-4DAD-95B8-39E962874613}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Datei ist nicht signiert]
FirewallRules: [{5D02B034-5037-4205-A1F2-B6F9C14667D2}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Datei ist nicht signiert]
FirewallRules: [{192B9629-A1C7-473D-8D26-5967435D0DBA}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{C2D01272-C1DB-462B-8F72-0EBD9AFB43BB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [UDP Query User{EAE006B0-75BC-4D65-BC51-3E95E9E8AA4E}D:\blizzard\battle.net\battle.net.exe] => (Allow) D:\blizzard\battle.net\battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{144FB3F9-C7EC-4AED-80CA-20AE850002EA}D:\blizzard\battle.net\battle.net.exe] => (Allow) D:\blizzard\battle.net\battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{4144C7D2-C0C7-4E9F-B53B-A6712C08156B}] => (Allow) D:\Steam\steamapps\common\MOBIUS FINAL FANTASY\mobiusff.exe (SQUARE ENIX CO., LTD. -> )
FirewallRules: [{BF9568ED-8FF3-4CC8-AFAD-0BED3F227DC7}] => (Allow) D:\Steam\steamapps\common\MOBIUS FINAL FANTASY\mobiusff.exe (SQUARE ENIX CO., LTD. -> )
FirewallRules: [UDP Query User{278333D4-2836-42F6-8F97-EB40C453B116}D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe] => (Block) D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{4AD44B3D-147C-4D66-BB14-196C13A6F86D}D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe] => (Block) D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe () [Datei ist nicht signiert]
FirewallRules: [{A16BD930-D898-48E5-B41B-96388670CCB8}] => (Allow) D:\Steam\steamapps\common\Fap Queen\FQ.exe () [Datei ist nicht signiert]
FirewallRules: [{6BBEBC35-A866-4688-BB36-86EF5AFA916D}] => (Allow) D:\Steam\steamapps\common\Fap Queen\FQ.exe () [Datei ist nicht signiert]
FirewallRules: [{9A21F06F-20EC-42CB-82F9-9F65D1D7E55B}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{F9BD902D-14E1-4368-88A7-618E0D9EF09D}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{E10BD326-4BAA-4259-A1C7-F0174337C6A9}D:\blizzard\diablo iii\x64\diablo iii64.exe] => (Allow) D:\blizzard\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{76B7D71B-EB25-43FB-8AC4-E5F2BB772E23}D:\blizzard\diablo iii\x64\diablo iii64.exe] => (Allow) D:\blizzard\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{651F8EBC-6643-4C02-A9A9-B915FE48EE97}] => (Allow) D:\Steam\steamapps\common\Dead or Alive 5 Last Round\startup_setting.exe (KOEI TECMO GAMES CO., LTD. -> KOEI TECMO GAMES CO., LTD.)
FirewallRules: [{E4DB47EF-3BEB-4446-A945-5A0EED5E8FE3}] => (Allow) D:\Steam\steamapps\common\Dead or Alive 5 Last Round\startup_setting.exe (KOEI TECMO GAMES CO., LTD. -> KOEI TECMO GAMES CO., LTD.)
FirewallRules: [{7D389A97-E21C-4BA3-A6F4-75898C04FA36}] => (Allow) D:\Steam\steamapps\common\Dead or Alive 5 Last Round\game.exe (KOEI TECMO GAMES CO., LTD. -> KOEI TECMO GAMES CO., LTD.)
FirewallRules: [{ED20FA21-8C05-4ECA-844F-9F5BE12E050C}] => (Allow) D:\Steam\steamapps\common\Dead or Alive 5 Last Round\game.exe (KOEI TECMO GAMES CO., LTD. -> KOEI TECMO GAMES CO., LTD.)
FirewallRules: [{BA15C82E-8C1F-4852-B3C7-41B4961AFD5D}] => (Allow) D:\Steam\steamapps\common\MelodysEscape\MelodysEscape.exe (Icetesy SPRL) [Datei ist nicht signiert]
FirewallRules: [{F51AEC16-A65A-4B6F-8E0C-9F6233806AE2}] => (Allow) D:\Steam\steamapps\common\MelodysEscape\MelodysEscape.exe (Icetesy SPRL) [Datei ist nicht signiert]
FirewallRules: [{199BE4C7-0F1C-4DB2-B755-C6E864DF909F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F91CA7D2-5D23-4EE4-ABB4-F87E043AA13D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{80A9FC8D-3DEE-4FD5-88E7-7F83014A0975}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{01DAB1C6-54C7-44D0-B37B-417D532ACBD6}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{65331656-B98F-4B79-B816-49EFC0E20DDD}] => (Allow) D:\Steam\steamapps\common\Anime Artist\Anime Artist.exe () [Datei ist nicht signiert]
FirewallRules: [{17851DB5-1C76-4210-BDB3-0B7E69A6CAF8}] => (Allow) D:\Steam\steamapps\common\Anime Artist\Anime Artist.exe () [Datei ist nicht signiert]
FirewallRules: [{E0093E44-7B9E-412F-B8F7-3666F80584B3}] => (Allow) D:\Steam\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.)
FirewallRules: [{3DD1CC43-6623-43FB-BB77-85CC10165831}] => (Allow) D:\Steam\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.)
FirewallRules: [{D016683E-FF0B-487F-AD94-BFD27CDA37F2}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{817D2619-B093-40D8-B689-A2FA0889194B}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{F15916A1-5F85-4530-A041-35996201F39C}] => (Allow) D:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{CD877F09-EE12-45B8-B78F-AE4B32C69EA1}] => (Allow) D:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{AF9CF258-3E6F-4C98-948E-A91149229113}] => (Allow) D:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{0DBD2C99-6811-4DF0-95E8-93DBEEABEE4E}] => (Allow) D:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [TCP Query User{3C85BCF5-11EE-4C32-8ABB-B13B924EEC5E}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{91B13B23-7B6A-4B88-A7F5-4926347E943F}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{9C4EB0C9-545F-4DD1-AD0C-709B066E2450}] => (Allow) D:\Steam\steamapps\common\Hentai Girl Division\Hentai Girl Division.exe () [Datei ist nicht signiert]
FirewallRules: [{94969DD1-0242-4192-8C71-C2298BFD7C1A}] => (Allow) D:\Steam\steamapps\common\Hentai Girl Division\Hentai Girl Division.exe () [Datei ist nicht signiert]
FirewallRules: [{BB3EF0A7-94F9-4C66-9AA9-851A697011A2}] => (Allow) D:\Steam\steamapps\common\Mirror\game.exe () [Datei ist nicht signiert]
FirewallRules: [{0EDC70BD-6DB7-4140-8C25-41306AA6EB36}] => (Allow) D:\Steam\steamapps\common\Mirror\game.exe () [Datei ist nicht signiert]
FirewallRules: [{8E04E749-8C31-494B-89E6-33F53B388EB8}] => (Allow) D:\Steam\steamapps\common\Time Break 2121\TimeBreak2121.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{1326A48A-F171-4164-9802-4CD97DF7E3E3}] => (Allow) D:\Steam\steamapps\common\Time Break 2121\TimeBreak2121.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{B705485D-529D-46C6-92E2-F96DE7357447}] => (Allow) C:\Users\nexus\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{268E91F0-693B-4840-8C9E-A643FDEE86D6}] => (Allow) C:\Users\nexus\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{3FFE2858-C595-4291-A26E-E37AC7EF5C27}] => (Allow) C:\Users\nexus\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{A0875CEA-ABA9-4609-88A6-E59AE640DFCC}] => (Allow) C:\Users\nexus\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{52A5F302-FFFA-4C2B-9F68-AD00099BCDBE}] => (Allow) D:\Steam\steamapps\common\RUINER\Ruiner.exe () [Datei ist nicht signiert]
FirewallRules: [{17B63975-7024-41D6-9B0E-11715B092F50}] => (Allow) D:\Steam\steamapps\common\RUINER\Ruiner.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{7DBFE58F-3E6A-4D7C-8343-0AC7E6D98BB2}D:\steam\steamapps\common\ruiner\ruiner\binaries\win64\ruiner-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\ruiner\ruiner\binaries\win64\ruiner-win64-shipping.exe (Reikon Games Sp. z.o.o) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{2CC56C43-8C3B-4CDF-9036-EA5F460D8D41}D:\steam\steamapps\common\ruiner\ruiner\binaries\win64\ruiner-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\ruiner\ruiner\binaries\win64\ruiner-win64-shipping.exe (Reikon Games Sp. z.o.o) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{7E0E8FF1-FA91-47DC-8F53-4E8E306A4F37}D:\pbe\game\league of legends.exe] => (Allow) D:\pbe\game\league of legends.exe (Riot Games, Inc. -> )
FirewallRules: [UDP Query User{6D01DD23-495E-441D-AC87-816FD5990005}D:\pbe\game\league of legends.exe] => (Allow) D:\pbe\game\league of legends.exe (Riot Games, Inc. -> )
FirewallRules: [{FCB6FBBF-BDE1-4906-8548-39F95FB2C476}] => (Allow) D:\Steam\steamapps\common\Hentai Crush\Hentai Crush.exe () [Datei ist nicht signiert]
FirewallRules: [{FF3DAFA1-50C1-40EF-8CF4-090005CA955E}] => (Allow) D:\Steam\steamapps\common\Hentai Crush\Hentai Crush.exe () [Datei ist nicht signiert]
FirewallRules: [{9E69494A-46D5-4DB1-AD31-DAE8D0A685A5}] => (Allow) D:\Steam\steamapps\common\Neoverse\NEOVERSE.exe () [Datei ist nicht signiert]
FirewallRules: [{998E4850-9772-4AF1-A54F-D68FA0106981}] => (Allow) D:\Steam\steamapps\common\Neoverse\NEOVERSE.exe () [Datei ist nicht signiert]
FirewallRules: [{D19B1D02-5744-499F-A2B2-33745ADF3E43}] => (Allow) D:\Steam\steamapps\common\Endless Space 2\EndlessSpace2.exe () [Datei ist nicht signiert]
FirewallRules: [{C95229C1-32E6-4C55-9792-1BAC921F12A3}] => (Allow) D:\Steam\steamapps\common\Endless Space 2\EndlessSpace2.exe () [Datei ist nicht signiert]
FirewallRules: [{18043F98-DDFE-4353-A96E-CC29B4ADE742}] => (Allow) D:\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]
FirewallRules: [{0015A802-3B46-4260-916C-4143514176CC}] => (Allow) D:\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]
FirewallRules: [{4B0EDCC1-D7A3-4D39-AAA1-644160DEB736}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{0985ADDC-7FAD-42D3-81E4-C24A90811519}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{63CD676F-708C-40BD-ADF2-92D7DA2913A2}] => (Allow) D:\Steam\steamapps\common\PoliceStories\PoliceStories.exe (HypeTrain Digital LTD) [Datei ist nicht signiert]
FirewallRules: [{AEE78817-3CF1-472B-B2A3-7B5EAF4FE7A6}] => (Allow) D:\Steam\steamapps\common\PoliceStories\PoliceStories.exe (HypeTrain Digital LTD) [Datei ist nicht signiert]
FirewallRules: [{CF5380EF-3464-4B76-8081-9781E75B2E22}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> )
FirewallRules: [{4188030D-A9F9-42F6-B6DD-F59735A47581}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> )
FirewallRules: [{1228B55A-A8AE-4D0F-8B48-C26C19C7049D}] => (Allow) D:\Steam\steamapps\common\Mirror Maker\Mirror Maker.exe () [Datei ist nicht signiert]
FirewallRules: [{93F45930-EB34-4DD3-A12F-067A25FA2D4A}] => (Allow) D:\Steam\steamapps\common\Mirror Maker\Mirror Maker.exe () [Datei ist nicht signiert]
FirewallRules: [{E9970F1E-2BC2-4E17-AAE5-8BB8DFFFC684}] => (Allow) D:\Steam\steamapps\common\Destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [{90B304FA-08DD-4135-A334-390BC06161F8}] => (Allow) D:\Steam\steamapps\common\Destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [{E8B08AEB-246A-4659-A833-53C4437793F3}] => (Allow) D:\Steam\steamapps\common\Ciconia When They Cry Phase 1\ciconia_phase1.exe (Studio OGA/insani/Haeleth/Sonozaki(UncleMion)) [Datei ist nicht signiert]
FirewallRules: [{E5952E56-C290-49BA-8624-D868218F1708}] => (Allow) D:\Steam\steamapps\common\Ciconia When They Cry Phase 1\ciconia_phase1.exe (Studio OGA/insani/Haeleth/Sonozaki(UncleMion)) [Datei ist nicht signiert]
FirewallRules: [{E30E0EC4-491D-4E59-B4F8-FDEFC779B78C}] => (Allow) D:\Steam\steamapps\common\Fairy Fencer F Advent Dark Force\FairyFencerAD.exe () [Datei ist nicht signiert]
FirewallRules: [{FB2D125C-20AC-416E-958C-8DE5297803D0}] => (Allow) D:\Steam\steamapps\common\Fairy Fencer F Advent Dark Force\FairyFencerAD.exe () [Datei ist nicht signiert]
FirewallRules: [{D31ECB42-732B-4973-B300-1F310502899F}] => (Allow) D:\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe () [Datei ist nicht signiert]
FirewallRules: [{355CAE51-0D04-4D58-86A2-B9445222BFBF}] => (Allow) D:\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe () [Datei ist nicht signiert]
FirewallRules: [{3FF127D0-FBCC-46B6-B124-644A0D0A3514}] => (Allow) D:\Steam\steamapps\common\Our Lovely Escape\OLE.exe () [Datei ist nicht signiert]
FirewallRules: [{2D1A81F7-286C-4ECE-917A-294F7EFD8107}] => (Allow) D:\Steam\steamapps\common\Our Lovely Escape\OLE.exe () [Datei ist nicht signiert]
FirewallRules: [{A2BCB9F9-4B25-465F-81EE-4FC56904807D}] => (Allow) D:\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C0DC0714-2576-4D49-B764-DDC2725D1B57}] => (Allow) D:\Steam\steamapps\common\Hentai Asmodeus\Hentai Asmodeus.exe () [Datei ist nicht signiert]
FirewallRules: [{A93C4D5F-24A8-4983-AD58-CA1721137685}] => (Allow) D:\Steam\steamapps\common\Hentai Asmodeus\Hentai Asmodeus.exe () [Datei ist nicht signiert]
FirewallRules: [{166C4CA3-0E60-4227-AE48-D04D559809A9}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{B78CCDBA-2071-49FB-AA9D-00CDFA136F79}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{EA93097C-75CA-40C5-832D-D8E8424653B3}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{04D59823-7932-4EC0-9387-98128190F46A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{6DBF032F-0107-472C-9A8C-58AEE450DA29}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{B3FCC0C6-D402-4AE9-A122-9FBED2536A03}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{D8FE0641-A22D-43BD-BF37-AD41D8E61F67}] => (Allow) D:\Steam\steamapps\common\Underlords\game\bin\win64\underlords.exe (Valve -> )
FirewallRules: [{69DB03AA-DF3F-43A9-9272-E3B49275FCCA}] => (Allow) D:\Steam\steamapps\common\Underlords\game\bin\win64\underlords.exe (Valve -> )
FirewallRules: [{162D921E-E7F3-49E3-89CC-45F777A530C4}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (GlassWire -> SecureMix LLC)
FirewallRules: [{F3E0908D-B580-46F6-B0A0-1657EDA434F7}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (GlassWire -> SecureMix LLC)
FirewallRules: [{68364EB2-3E88-4907-867E-03AB88B63EBA}] => (Allow) D:\Steam\steamapps\common\Faulty Apprentice\Faulty Apprentice.exe () [Datei ist nicht signiert]
FirewallRules: [{655F883D-F911-4044-B5AB-4ABC6B930665}] => (Allow) D:\Steam\steamapps\common\Faulty Apprentice\Faulty Apprentice.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{74D8E7E2-685B-49C0-AA3D-1E67BBC1D7FE}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe (ROCCAT GmbH -> ROCCAT)
FirewallRules: [UDP Query User{057C5C5F-8F89-428E-A2F8-49D1270FB85A}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe (ROCCAT GmbH -> ROCCAT)
FirewallRules: [{0FB7BE4E-464F-40F9-AB3A-9E31AB9EBA9B}] => (Allow) D:\Steam\steamapps\common\Realm of the Mad God\Realm of the Mad God.exe () [Datei ist nicht signiert]
FirewallRules: [{8E619905-98AA-414A-8A0E-8730D4AFD7DA}] => (Allow) D:\Steam\steamapps\common\Realm of the Mad God\Realm of the Mad God.exe () [Datei ist nicht signiert]
FirewallRules: [{D66C90D4-4FF5-44F8-AB61-B36E5171873B}] => (Allow) D:\Steam\steamapps\common\DOOM\DOOMx64.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{DDFBC8A5-862C-4E45-8FC3-09573FA6CDA6}] => (Allow) D:\Steam\steamapps\common\DOOM\DOOMx64.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{E355EC94-3A8D-4E2D-838E-2EF48E472283}D:\steam\steamapps\common\doom\doomx64vk.exe] => (Allow) D:\steam\steamapps\common\doom\doomx64vk.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{36486949-2F84-40C8-9369-D2D6454C95D9}D:\steam\steamapps\common\doom\doomx64vk.exe] => (Allow) D:\steam\steamapps\common\doom\doomx64vk.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{EDD81CF7-725C-4E67-BF5C-74C5610BF429}] => (Allow) D:\Steam\steamapps\common\Breeders of the Nephelym Alpha\Radiant.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{DB2518B1-FBD2-4F3D-BAAC-58ED63DBFC80}] => (Allow) D:\Steam\steamapps\common\Breeders of the Nephelym Alpha\Radiant.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{3638823F-465D-4B0D-8A1E-2D50321EDA77}] => (Allow) D:\Steam\steamapps\common\GTFO\GTFO.exe () [Datei ist nicht signiert]
FirewallRules: [{0FFC9C6B-B57E-4766-AA75-705F2BFB455D}] => (Allow) D:\Steam\steamapps\common\GTFO\GTFO.exe () [Datei ist nicht signiert]
FirewallRules: [{A3EB9A20-12D9-4097-A3CA-8BC1A70FFAC2}] => (Allow) D:\Steam\steamapps\common\BrightMemory_EP1\BMI_RTXDEMO\Binaries\Win64\BMI_RTXDEMO-Win64-Shipping.exe (FYQD-Studio) [Datei ist nicht signiert]
FirewallRules: [{97874C1C-AC87-491A-9DE0-D07AAE80710E}] => (Allow) D:\Steam\steamapps\common\BrightMemory_EP1\BMI_RTXDEMO\Binaries\Win64\BMI_RTXDEMO-Win64-Shipping.exe (FYQD-Studio) [Datei ist nicht signiert]
FirewallRules: [{18E2B1DF-AF94-4287-899B-C04F4382B4CD}] => (Allow) C:\Program Files (x86)\SteamLibrary\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{160F0D5B-2765-48A6-A549-546657F5C7CC}] => (Allow) C:\Program Files (x86)\SteamLibrary\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [TCP Query User{41C72A5A-535F-494F-8A31-1FF6BD63546C}C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe Keine Datei
FirewallRules: [UDP Query User{1128A6B9-9617-4766-B84E-595CFECD981E}C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe Keine Datei
FirewallRules: [{0AC89DC7-0F57-4D33-9F47-313C917EABD6}] => (Allow) D:\Steam\steamapps\common\Spiral Clicker\Spiral Clicker.exe () [Datei ist nicht signiert]
FirewallRules: [{FA8D01C7-7999-4433-AB28-9D431C98D5D2}] => (Allow) D:\Steam\steamapps\common\Spiral Clicker\Spiral Clicker.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3B765303-0C5D-4ED7-8ED7-2C23A66F60F1}C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe Keine Datei
FirewallRules: [UDP Query User{14EFC500-3B32-4D05-B0F9-AF0C19BBA2B6}C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\nexus\appdata\local\programs\opera\65.0.3467.78\opera.exe Keine Datei
FirewallRules: [{7B6D5E2F-07CC-4FA6-A619-7A522A22AD6A}] => (Allow) D:\Steam\steamapps\common\Treasure of a blizzard\Treasure_of_a_blizzard.exe () [Datei ist nicht signiert]
FirewallRules: [{F87F284A-D023-4D49-A55D-68C60D8A888F}] => (Allow) D:\Steam\steamapps\common\Treasure of a blizzard\Treasure_of_a_blizzard.exe () [Datei ist nicht signiert]
FirewallRules: [{5BB29F98-4B99-49FB-BE84-D78DAEC53812}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A3A5E071-284F-4A5D-9BA6-FC6AF9A35987}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{954560EF-0CD6-4322-B894-72230072E28A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{38876E1B-B038-4748-B464-31FBEB94358E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{B235572E-E100-483F-A85A-6F3B9A2C60F0}C:\program files\java\jdk-13.0.1\bin\javaw.exe] => (Allow) C:\program files\java\jdk-13.0.1\bin\javaw.exe
FirewallRules: [UDP Query User{FA23CE38-02F0-4F37-9329-48FF8F5B6473}C:\program files\java\jdk-13.0.1\bin\javaw.exe] => (Allow) C:\program files\java\jdk-13.0.1\bin\javaw.exe
FirewallRules: [{54C34E11-E845-4CE2-91FE-7D3430878A8F}] => (Allow) D:\Steam\steamapps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{6AF44154-696F-4029-A3C9-8E73125E9B1B}] => (Allow) D:\Steam\steamapps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{F051B96D-4023-4241-8DF4-93F412F8F706}] => (Allow) D:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{FF804A85-9096-4282-9620-F0412683ACBF}] => (Allow) D:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{4CD6F077-DBA2-43CB-B02B-F18A627A5891}C:\users\nexus\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\nexus\appdata\local\programs\opera\66.0.3515.72\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [UDP Query User{A6ABCD31-18A5-4B4A-BFC3-5C1F787AB900}C:\users\nexus\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\nexus\appdata\local\programs\opera\66.0.3515.72\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [TCP Query User{98F2C6B0-3553-47F5-8585-FA3EBCCEE714}D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe] => (Block) D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{2A97733F-1CA5-4EF6-9DCE-6F343ECFA5B2}D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe] => (Block) D:\hgamer\igg-huniecam.studio.v1.02\igg-huniecam.studio.v1.02\huniecamstudio.exe () [Datei ist nicht signiert]
FirewallRules: [{B305AE06-B736-4AA5-AB05-0DE44271F22C}] => (Allow) D:\Steam\steamapps\common\Troubleshooter\Release\bin\ProtoLion.exe (Dandylion) [Datei ist nicht signiert]
FirewallRules: [{CE11CA1B-1097-4536-A68F-6CC22BAB040E}] => (Allow) D:\Steam\steamapps\common\Troubleshooter\Release\bin\ProtoLion.exe (Dandylion) [Datei ist nicht signiert]
FirewallRules: [{9E642026-7899-42BC-8071-422AA5F269CC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{A4E1EEB7-5076-40B4-998E-8D136443F546}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> )
FirewallRules: [{B8C7A191-FA1F-4D34-B6EC-8385AD9149A5}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> )
FirewallRules: [{67CC88FC-E534-466E-8252-CDD6FAE6095B}] => (Allow) D:\Steam\steamapps\common\Seeds of Chaos\seeds-of-chaos.exe () [Datei ist nicht signiert]
FirewallRules: [{8EB14453-4962-4757-90B5-FD3567A99980}] => (Allow) D:\Steam\steamapps\common\Seeds of Chaos\seeds-of-chaos.exe () [Datei ist nicht signiert]
==================== Wiederherstellungspunkte =========================
06-02-2020 22:03:37 DirectX wurde installiert
06-02-2020 23:19:31 Revo Uninstaller's restore point - Ghostery Midnight 1.0.5
11-02-2020 00:36:17 Removed ACCUSOR Advanced Gaming Keyboard
15-02-2020 19:29:18 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (02/15/2020 11:40:49 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7496,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 11:20:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6336,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 10:56:05 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6204,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 10:40:15 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4936,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 10:32:15 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (12316,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 10:14:39 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6060,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 07:56:37 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5532,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (02/15/2020 07:40:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Systemfehler:
=============
Error: (02/15/2020 11:05:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMChameleon" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
Die maximale Anzahl der Kennwörter, die in einem einzelnen System gespeichert werden können, wurde überschritten.
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
Die maximale Anzahl der Kennwörter, die in einem einzelnen System gespeichert werden können, wurde überschritten.
Error: (02/15/2020 11:04:35 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Fehler "5" in DCOM, als der Dienst "camsvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
Windows.Internal.CapabilityAccess.Management.CapabilityConsentManager
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Manager-Dienst für den Funktionszugriff" wurde aufgrund folgenden Fehlers nicht gestartet:
Zugriff verweigert
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet:
Zugriff verweigert
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet:
Zugriff verweigert
Error: (02/15/2020 11:04:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet:
Zugriff verweigert
Windows Defender:
===================================
Date: 2020-01-13 01:00:16.081
Description:
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {CBB783A2-05B4-4660-A301-E9C052B6B2F5}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: DESKTOP-AJFP3UF\[REDACTED]
Date: 2020-01-12 10:28:30.088
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Occamy.C&threatid=2147726780&enterprise=0
Name: Trojan:Win32/Occamy.C
ID: 2147726780
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\nexus\AppData\Local\Opera Software\Opera Stable\Cache\f_000b20; file:_C:\Users\nexus\Downloads\57726ea8-ef73-4b6b-b1dd-712a4991dae4.tmp
Erkennungsursprung: Lokaler Computer
Erkennungstype: FastPath
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-AJFP3UF\[REDACTED]
Prozessname: C:\Users\nexus\AppData\Local\Programs\Opera\65.0.3467.78\opera.exe
Sicherheitsversion: AV: 1.307.2155.0, AS: 1.307.2155.0, NIS: 1.307.2155.0
Modulversion: AM: 1.1.16600.7, NIS: 1.1.16600.7
Date: 2020-01-12 10:28:29.472
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Occamy.C&threatid=2147726780&enterprise=0
Name: Trojan:Win32/Occamy.C
ID: 2147726780
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\nexus\Downloads\57726ea8-ef73-4b6b-b1dd-712a4991dae4.tmp
Erkennungsursprung: Lokaler Computer
Erkennungstype: FastPath
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-AJFP3UF\[REDACTED]
Prozessname: C:\Users\nexus\AppData\Local\Programs\Opera\65.0.3467.78\opera.exe
Sicherheitsversion: AV: 1.307.2155.0, AS: 1.307.2155.0, NIS: 1.307.2155.0
Modulversion: AM: 1.1.16600.7, NIS: 1.1.16600.7
CodeIntegrity:
===================================
Date: 2019-11-22 16:06:41.329
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\LAV Filters\x64\LAVSplitter.ax that did not meet the Microsoft signing level requirements.
Date: 2019-11-22 16:02:23.482
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\LAV Filters\x64\LAVSplitter.ax that did not meet the Microsoft signing level requirements.
Date: 2019-11-22 16:02:02.457
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\LAV Filters\x64\LAVSplitter.ax that did not meet the Microsoft signing level requirements.
Date: 2019-11-22 16:01:26.798
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\LAV Filters\x64\LAVSplitter.ax that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. F20 11/04/2016
Hauptplatine: Gigabyte Technology Co., Ltd. Z170-HD3P-CF
Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 8144.44 MB
Verfügbarer physikalischer RAM: 3205.29 MB
Summe virtueller Speicher: 24016.44 MB
Verfügbarer virtueller Speicher: 15591.61 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.43 GB) (Free:48.14 GB) NTFS
Drive d: () (Fixed) (Total:1863 GB) (Free:303.36 GB) NTFS
\\?\Volume{34baac1a-fede-4f1b-be16-3bb3e836ff75}\ () (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{ddf4ce07-c063-4e68-8a59-acf18ff6b991}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS
\\?\Volume{71437468-b168-45b3-b45e-875df15dd499}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Ende von Addition.txt ======================= Vielen dank im voraus ! |