Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Laptop oft langsam & manchmal Freezescreen (https://www.trojaner-board.de/167114-laptop-oft-langsam-manchmal-freezescreen.html)

Divinely 20.05.2015 20:22
Laptop oft langsam & manchmal Freezescreen
 
Hallo, habe für den PC meines Vaters schon einen Tread erstellt, nun erstelle ich noch einen für meinen Laptop.

Also di Probleme sind:

Manchmal wird er sehr langsam & es kommt bei Anwendungen "..... reagiert nicht mehr"

& ab & zu ca.1x die Woche oder öfter "friert" der ganze Bildschirm ein, dh er hängt sich auf & es hilft nurnoch den Akku zu entnehmen, damit er ausgeht.

Achso & bei einem anderen Laptop kommt bei manchen Downloads manchmal diese Mittteilung: " ***.exe ist keine zulässige WIN-32 Anwendung." Der Lappi ist ein 64Bit Gerät & ich kann genau die selben Anwendungen mit nem anderen Lappi, der auch 64BIT hat ohne Probleme öffnen.

Jemand evtl. Lösungsvorschläge?

Danke.:sleepy:

deeprybka 20.05.2015 20:37
:hallo:

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...:abklatsch:
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
  • Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
  • Poste die Logfiles direkt in Deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst.



Los geht's:

Schritt 1
http://filepony.de/icon/frst.pnghttp://deeprybka.trojaner-board.de/b...t/frstscan.png

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://deeprybka.trojaner-board.de/tdss/codetags.gif

Divinely 20.05.2015 20:47
Danke für die schnelle Reaktion.


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-05-2015
Ran by TeckForce (administrator) on MALTENOTEBOOK on 20-05-2015 21:44:23
Running from C:\Users\TeckForce\Desktop
Loaded Profiles: TeckForce (Available profiles: TeckForce & UpdatusUser)
Platform: Windows 7 Professional (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2010-01-23] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2010-01-23] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-4082847748-2108349381-1701915676-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKU\S-1-5-21-4082847748-2108349381-1701915676-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: ReguluarDeealls -> {065B7D9A-4AD5-1B34-D5C0-E4BCAA3B3210} -> C:\ProgramData\ReguluarDeealls\YGpfp.x64.dll No File
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-20] (DVDVideoSoft Ltd.)
BHO: SaaveNewaAppz -> {EEF0F387-CEB7-8C95-3393-650E7DC838AC} -> C:\ProgramData\SaaveNewaAppz\dmP.x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-21] (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-11-22] (DVDVideoSoft Ltd.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default
FF DefaultSearchEngine: Wikipedia (de)
FF DefaultSearchEngine,S:
FF DefaultSearchUrl: hxxp://www.bing.com/search?FORM=IEFM1&q=
FF SearchEngineOrder.1:
FF SearchEngineOrder.1,S:
FF SelectedSearchEngine: Wikipedia (de)
FF SelectedSearchEngine,S:
FF Homepage: hxxp://facebook.de/
FF Keyword.URL:
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2011-06-07] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2011-06-07] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2010-10-04] (Apple Inc.)
FF SearchPlugin: C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\searchplugins\transfermarktde.xml [2014-05-09]
FF Extension: Avira Browser Safety - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\abs@avira.com [2015-04-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-05]
FF Extension: MEGA - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\firefox@mega.co.nz.xpi [2014-07-12]
FF Extension: Adblock Plus - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-04-24]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2012-12-08]

Chrome:
=======
CHR Profile: C:\Users\TeckForce\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SaaveNewaAppz) - C:\Users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh [2013-12-31]
CHR Extension: (ReguluarDeealls) - C:\ProgramData\glabdaacdcpgfhaijchagfpccpompelb\ []
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5214384 2014-01-13] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2011-11-13] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2011-11-13] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 dfc86759; "C:\Windows\system32\rundll32.exe" "c:\progra~4\perfor~1\PerformancerSvc.dll",service

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-28] (DT Soft Ltd)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
S3 Secdrv; C:\Windows\SysWOW64\drivers\SECDRV.SYS [11616 2001-08-25] () [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-14] (Duplex Secure Ltd.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-20 21:44 - 2015-05-20 21:44 - 00014519 _____ () C:\Users\TeckForce\Desktop\FRST.txt
2015-05-20 21:43 - 2015-05-20 21:43 - 02107904 _____ (Farbar) C:\Users\TeckForce\Desktop\FRST64.exe
2015-05-18 06:06 - 2015-05-18 06:06 - 01203488 _____ () C:\Users\TeckForce\Desktop\Poweroff - CHIP-Installer.exe
2015-05-18 02:28 - 2015-05-20 21:44 - 00000000 ____D () C:\Users\TeckForce\Desktop\bot
2015-05-16 22:31 - 2015-05-16 22:31 - 00858000 _____ () C:\Windows\Minidump\051615-19250-01.dmp
2015-05-12 23:37 - 2015-05-12 23:37 - 00001037 _____ () C:\Users\TeckForce\Desktop\Patcher - Verknüpfung.lnk
2015-05-12 21:46 - 2015-05-19 15:25 - 00000000 ____D () C:\Users\TeckForce\Desktop\Lariya3
2015-04-24 15:00 - 2015-04-24 15:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-20 21:44 - 2014-01-03 05:39 - 00000000 ____D () C:\FRST
2015-05-20 21:31 - 2010-10-19 17:19 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-20 21:28 - 2013-01-01 18:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-20 21:12 - 2009-07-14 06:45 - 00014080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-20 21:12 - 2009-07-14 06:45 - 00014080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-20 21:11 - 2009-07-14 19:58 - 12580602 _____ () C:\Windows\system32\perfh007.dat
2015-05-20 21:11 - 2009-07-14 19:58 - 03987066 _____ () C:\Windows\system32\perfc007.dat
2015-05-20 21:11 - 2009-07-14 07:13 - 00006212 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-20 21:08 - 2010-01-23 18:23 - 01833570 _____ () C:\Windows\WindowsUpdate.log
2015-05-20 21:04 - 2010-10-19 17:19 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-20 21:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-20 21:04 - 2009-07-14 06:51 - 00210419 _____ () C:\Windows\setupact.log
2015-05-16 22:31 - 2010-12-24 16:03 - 289159053 _____ () C:\Windows\MEMORY.DMP
2015-05-16 22:31 - 2010-12-24 16:03 - 00000000 ____D () C:\Windows\Minidump
2015-05-16 22:31 - 2010-01-23 18:47 - 03004150 _____ () C:\Windows\PFRO.log
2015-05-16 13:22 - 2015-04-17 23:49 - 00000000 ____D () C:\Users\TeckForce\Desktop\spanch-2015-gobe
2015-05-16 13:19 - 2014-09-11 22:43 - 00000000 ____D () C:\Users\TeckForce\AppData\Local\Adobe
2015-05-16 13:19 - 2013-01-01 18:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-05-16 13:19 - 2012-10-17 08:55 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-16 13:19 - 2011-07-05 19:56 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-05 15:22 - 2013-04-26 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-05 15:20 - 2013-04-26 19:36 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-05-05 15:20 - 2013-04-26 19:36 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-05-04 08:48 - 2010-03-13 17:31 - 00000000 ____D () C:\Users\TeckForce\Desktop\Metin2
2015-04-29 12:20 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-25 12:52 - 2012-05-05 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2010-04-27 19:58 - 2010-06-05 16:29 - 0037611 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_01.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0006253 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_02.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0006569 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_04.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0004916 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_05.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005844 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_06.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005670 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_08.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005273 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_09.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0001628 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_10.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0009442 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_11.jpg
2010-04-27 19:58 - 2010-06-05 16:31 - 0031000 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_12.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0003319 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_13.jpg
2010-08-01 16:07 - 2010-08-01 16:07 - 0000040 _____ () C:\ProgramData\ra3.ini

Some content of TEMP:
====================
C:\Users\TeckForce\AppData\Local\Temp\avgnt.exe
C:\Users\TeckForce\AppData\Local\Temp\comver.dll
C:\Users\TeckForce\AppData\Local\Temp\EBUB4A7.EXE
C:\Users\TeckForce\AppData\Local\Temp\EBUC52B.DLL
C:\Users\TeckForce\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\TeckForce\AppData\Local\Temp\JavaRa.exe
C:\Users\TeckForce\AppData\Local\Temp\jli.dll
C:\Users\TeckForce\AppData\Local\Temp\jre-7u67-windows-i586.exe
C:\Users\TeckForce\AppData\Local\Temp\keytool.exe
C:\Users\TeckForce\AppData\Local\Temp\msvcr100.dll
C:\Users\TeckForce\AppData\Local\Temp\node.exe
C:\Users\TeckForce\AppData\Local\Temp\SkypeSetup.exe
C:\Users\TeckForce\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-14 19:02

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-05-2015
Ran by TeckForce at 2015-05-20 21:45:19
Running from C:\Users\TeckForce\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4082847748-2108349381-1701915676-500 - Administrator - Disabled)
Gast (S-1-5-21-4082847748-2108349381-1701915676-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4082847748-2108349381-1701915676-1019 - Limited - Enabled)
TeckForce (S-1-5-21-4082847748-2108349381-1701915676-1000 - Administrator - Enabled) => C:\Users\TeckForce
UpdatusUser (S-1-5-21-4082847748-2108349381-1701915676-1020 - Limited - Enabled) => C:\Users\UpdatusUser.Malte-Notebook

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader 9.4.6 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A94000000001}) (Version: 9.4.6 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.1.629 - Adobe Systems, Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
BatteryLifeExtender (HKLM-x32\...\{AA16A9E5-40E9-44F5-801E-6B3D3CFE79E5}) (Version: 1.0.0 - Samsung)
C&C Red Alert 2 (HKLM-x32\...\{025BA1DC-204E-4563-8A46-79B09457020E}_is1) (Version: 1.006 & 1.001 - Westwood)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
EA Download Manager (x32 Version: 4.0.0.462 - Electronic Arts) Hidden
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
Gameforge Live 1.5.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.5.0 - Gameforge)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
ICQ Sparberater (HKLM-x32\...\{FE163F11-1919-4257-A280-FF5AF8DAEECB}) (Version: 1.2.662 - solute gmbh)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java(TM) 6 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NVIDIA Grafiktreiber 306.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.23 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.10.69 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5919 - Realtek Semiconductor Corp.)
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.4.12 - Synaptics Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-01-04 10:45 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {06E3E035-C0B7-4D16-B5AB-625A79D9EADF} - System32\Tasks\{BFE82A32-DCB1-4660-A60C-4FBAABDDD5A8} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {0B7C26E6-F026-418D-B4A2-2EFC9436F6A2} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {0D4C30AA-7672-4133-9EA3-96F8FA149306} - System32\Tasks\{490364F2-9218-4129-8D56-D83BCC86298F} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {21F47211-0818-401F-B277-F62149B7944A} - System32\Tasks\{12B3241E-BF63-4B1D-BABE-44E827AAF952} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {2EBBBC28-425B-49B6-A282-EE485410EBF3} - System32\Tasks\{871D3A79-6BAA-435D-9226-7617C86F3D1A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {34AF3751-21B0-45C2-9AB4-62CE2A8CAD91} - System32\Tasks\{35CB8C92-0CB6-4CCB-87A5-9B8D37409850} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {39E51012-8B93-44FC-A029-A81490FBDE55} - System32\Tasks\{4740860E-9541-48F6-9656-F98FA40D226B} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {3D247461-7ED1-41A5-8BD9-B9A346247559} - System32\Tasks\{EB6352A1-CB3C-4EB9-8314-1D7E1221D00D} => pcalua.exe -a C:\Users\TeckForce\Downloads\avira_de_av_43666566_97kej3lfg1as4ot0j3y8_wd.exe -d C:\Users\TeckForce\Downloads
Task: {44D19DE4-2652-401A-9452-F3B425B28C3C} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe
Task: {54D231B5-52D0-4C21-B19C-F93C479F7236} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe
Task: {562399FA-AFCE-4F98-8366-9F2D09F92073} - System32\Tasks\{4A1FC634-EC50-4714-B8C3-ED1008E3EFDE} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {56F81B24-5C26-49ED-AF26-ACFFB681FA51} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {8CA882A9-D53C-4EB5-A763-AF85FA0E4ED2} - System32\Tasks\{83EE9674-59D2-4E73-9FED-472D1E3892E1} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto San Andreas\GTA San Andreas.exe
Task: {A7AEC60D-453E-49AF-AA77-E04D45F16FDE} - System32\Tasks\{0FF9432E-6ECD-4E54-B139-B09F2E4645EE} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {B41FE991-6356-4D97-BFDD-26B3C763180C} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {B4CF05FF-91C6-415D-B144-8B94B583EE9B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {B541288D-C974-4D39-B7BB-B4B9F1097E79} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {BAEC2B7D-0B29-4286-A7B2-0C37805456F3} - System32\Tasks\{17D3819D-E9B2-4C47-8983-6CF621736FA5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {BBB8F094-DB07-4262-99C9-B9C009B06600} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {C0E88FFC-F433-44A3-95F9-9EB5E5DA5F4E} - System32\Tasks\{4ADB7176-B7AA-4562-9C3C-AB29E8E33E43} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {CFE93261-A299-4DEB-9C40-FE12CA35AB3E} - System32\Tasks\{096FCD2A-B244-4388-9F6C-2F5AF2C79ABA} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {D5B8F0CA-C0B6-4C41-8568-E2421987DFE2} - System32\Tasks\{3D37A216-BE66-4E9F-B670-8293DAABA87C} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {E1C36F30-AB1D-454B-B5E5-E1C5595FA09E} - System32\Tasks\{DD972019-67A4-45E7-B914-3B2E4F1CF65A} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2012-09-29 02:40 - 2012-08-30 18:17 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-28 18:50 - 2009-12-12 16:12 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-11-13 04:49 - 2011-11-13 04:49 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-11-13 04:49 - 2011-11-13 04:49 - 00103736 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\TeckForce\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^TeckForce^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ctfmon.lnk => C:\Windows\pss\ctfmon.lnk.Startup
MSCONFIG\startupfolder: C:^Users^TeckForce^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{D3070277-0D37-4D80-A817-9E9AC9F82719}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43377027-F39E-4EFD-8F26-B9EBEC93A810}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{23E4CA84-E2B0-4A02-A8EC-2563A9939442}] => (Allow) C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{08444CC0-1FEA-473A-A208-F5D9B6D6A688}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C42BFFE5-6F80-49CB-9E23-961E27A6D0E7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{8B47C0E7-B9FD-4722-9561-50CD12153DDF}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{2A13344C-F8FE-49F0-A437-D8E1DE8859BE}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{5CA09CE7-4B3F-4E22-8712-099E2EB7EAAD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2D962EB4-BADD-4491-B487-059F6E82583D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A9A730CF-365E-4550-93BC-9F12A66EB29A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{37ACDB2E-3099-4107-82C8-371CC3A2A769}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{E8B8BF9F-38D7-490A-81F2-9AD9EFF81794}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [TCP Query User{0F298AC3-7EB1-46C0-94CF-9D71FA243845}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{4C4A8026-1630-4FDB-9DA1-06E3792A43E1}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [{3DBD3D65-6256-42FE-BD62-5269120CA34C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0E43FE3D-8441-4D27-B89B-72EF3FB1DA12}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9345403B-B806-47ED-80E7-4EE4EAE36FB8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2852CEAB-0CE6-45EC-B0AD-D49FF1F5CE80}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8FCEBDBD-2CD4-40C7-B7DB-C40C7441886B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2C3ECF23-930E-4157-9E6C-5DC75E9E928C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{07896D8D-B32F-4FE7-92CD-50BB547E9ECB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5EE7C62F-AD3D-46E7-9C23-B3C04D4FE5BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B94D9493-47A7-457D-874B-0F4555C6A7DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C3A62303-0C64-43C6-839E-90DD9348F434}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6782C989-C1EB-478D-9381-3B47096CE0F7}H:\blacknight-mt2 client 1.2\lib\game\game.exe] => (Allow) H:\blacknight-mt2 client 1.2\lib\game\game.exe
FirewallRules: [UDP Query User{61AE0544-18E0-4C93-9D2E-CAB1E478994F}H:\blacknight-mt2 client 1.2\lib\game\game.exe] => (Allow) H:\blacknight-mt2 client 1.2\lib\game\game.exe
FirewallRules: [{E85D7E31-C5E2-42B8-A43C-508D29B0FD92}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F24D9C5-24E2-4888-9634-9887DB21474D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A9EABF9F-7071-43C9-B577-62E113C9D3CA}C:\users\teckforce\desktop\finalmt2old\metin2client.bin] => (Block) C:\users\teckforce\desktop\finalmt2old\metin2client.bin
FirewallRules: [UDP Query User{A6542AC8-9E05-41FB-A9F3-681211F7D367}C:\users\teckforce\desktop\finalmt2old\metin2client.bin] => (Block) C:\users\teckforce\desktop\finalmt2old\metin2client.bin
FirewallRules: [{0EB0D9B9-A2E2-4204-8744-63E0ACE3A344}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4F435F5F-E306-4E03-A78A-C2CE0B2C4A19}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6044A457-0CEC-4AD0-99F6-0A9B2AFA2C45}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9FBDBE24-9FC7-41CC-9041-A218E43E9122}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FDCF3BBC-5704-4626-A778-6B884C37CE1A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FD46FDDF-DC29-456B-B104-4D6398142B4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{23C5986E-8D70-4A6E-9C5C-9B227336BC25}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7B1A238F-362D-46EC-8FB4-7FD1D5553FC8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B62400F-0EA2-4C4A-8A32-C3A43DAED38E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{474858DB-0A3A-4AFF-AA06-645CE091C932}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F6D21280-A3D5-4F98-AF7B-E64996854A17}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{190E16C5-AD39-4994-ACC0-16BFCB728CAD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9055E820-975E-4D65-B92B-79CE6F95B711}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DA441D15-B571-4734-BE66-054340D0878A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AE98853E-A303-4F85-AF44-918A2CF76EA4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A21D50B9-7BFF-46CB-BB74-6EB9DB7A44A7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8138C11E-65F9-416F-9365-4331119E9354}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6C1BD50C-5A25-497B-B02E-B9543B4B7487}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5A73A9A7-0EA0-4F80-9523-AE8633A806F8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27B152A1-410A-48C5-AECF-4EB9346E6E11}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{903A1FC4-2CEE-4EC1-829A-1416E2BDEEF7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EF853346-4D3F-4AE4-8062-15C828D065D0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1BC60DC2-CB34-462A-9BAC-C6C1BDEFD431}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D5302B9C-B05A-456B-B8A7-B445BB8833EB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{28D35C5D-9FCB-4D20-9243-9257C1DB13E6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A909E80E-1434-4E31-9731-E42CCC1E69FE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4D2A244B-A737-4092-ADC2-428DB51ADAB7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCD5CD72-F23A-4D48-BFE3-AE17A80BC815}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{16254156-C810-4890-9579-62B19217B2D4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{40F9AD6E-B5A7-4D24-9267-21C937F210F3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BE0E4B1-2D11-4A7E-A4D5-D9360A8FFD21}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B2493322-0428-40E1-9F99-8CD356FAF57F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A6D0FB6E-581D-47E6-8FCB-EF47A981D01C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B0C1D792-D7F2-41DF-B8F2-CD0A9E827A6C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F72DE475-2642-468F-9178-E99AD5B3BF99}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B6538AF-3B78-427F-B15C-34F554E3D4BF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C167F6A1-0406-4E60-848C-3402C7F13ED1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4134D578-B91A-49D5-9B26-D4B9E38A7595}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE69B175-DB35-482F-9423-22B9E2200BD0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{615B8DE9-81B7-478C-A412-680E35A14584}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4A9CAFD2-C130-44AC-B14B-C10B0828B1D8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FD4E9065-8945-44AD-A957-A21184CBBBA8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B5E4573-67A0-4678-B7F1-8688B865DC8B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00C73321-6230-439D-9EA5-9953115A28BD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D00A7E74-708A-4158-BF36-6D4FD23FA255}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A88132D1-42FE-48A4-9A16-4A427C0BB0B5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78C0F730-3C90-4756-A665-48A1F7C5B4D1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA7A53E4-3EAA-4E10-BA68-37D14F0081AB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA53DE5D-538B-47AB-8A7B-3712B7921A5E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{351EE3AE-7841-431F-9381-42A00708731F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11CCB5CD-B7B4-40CB-8BA8-83ABB4A8A8D6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1C1F7C81-BCF2-47F3-A598-DE35631598C7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{14727FCF-DAEE-483E-B1B0-5E41FF997595}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D64A9869-8A65-4034-9C5B-A84F45CD1BFD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{21D8649C-17EC-4CF3-9B4C-A684A59A641D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11EC81BC-5E34-4331-B5A0-28FEC1649E71}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0BC646B-3729-4109-9ACB-F17E3D149D0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7EE22D9B-59FE-483A-A3C7-35BA28EEBCCF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43CA25BC-12A3-4081-BAE1-84EFE592AF3F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C5AE5CC8-2B55-4CE4-9FEA-434EC0273000}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CAF82CF1-1A65-44EF-8253-954FD04F0D2E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9C4EF57B-50A3-426C-BAF3-B893AFEF1A1D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4A215375-87FE-458A-8379-FDFA92FACEF1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B81E0A0D-BAD6-4682-A57D-9BDEC85417DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0A63FA9B-9B39-4756-9894-13E344589480}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F751C1AA-0D7C-4C10-8F0F-E13D65F8DBC7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4DFD718F-F3B7-41AC-9299-8A215C9FF1D3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ED4AD060-0A3D-425D-BAC4-803B4ED77A7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B81BD72F-623A-4402-AC9B-F02F57FA916E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBA1D791-E616-4726-8FB0-007EB4654D4D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{800BA9E8-2E12-43D8-9CE0-D5E832A3847C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{550808ED-CB7D-44D3-AAD0-D3DDD4734E1F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6B6AB528-B6CD-4774-898A-4DFF65A5E8A8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B062B8B7-C4D5-4A2E-93FE-46F7B90B9871}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{139BD1D5-CE1C-4FF5-9079-DC55E41ED091}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F3A4EA12-C0BD-4A0A-AFD2-1B178B1F34DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA7E58F5-76EF-47BB-B421-87676FD9146D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CBCDF8C8-1106-4814-AD2F-D594826FF270}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27591001-38BB-4237-BCEB-77F929F5FD97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43EC68EA-E4AC-4854-A3E0-256169443828}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6002CD0A-0988-465A-AA77-F4C5358DF268}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6EE762AD-3518-4BA4-831C-261162A5337D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0392F9A-903E-45C3-9DC9-FD238AAB4EB4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4374A950-2F0D-431D-BBF6-8AE63BAB29B8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4EFEDBA6-B9C1-4811-9103-7A2526A4CBA3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DE4202DD-EB8C-4ABD-B558-FBEEF84E6D0F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{314B57BE-BB64-4106-9AC9-4DC2437D79F7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8C2350DF-FFA2-488F-892B-BC630DBB17DD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{61A456D5-0967-45DA-882C-71C20812DB6B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E9EA059A-3F5E-491C-977C-6F72E8F86B78}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7B66A9C8-99EF-43FF-96BC-2DE4639F7B4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9230E404-9993-4E67-9762-00CFB8E9F231}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0A835ECF-6B6B-4951-B13B-148A55811C2A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E8B4C0FC-4F83-4DC3-A670-B1F5A29CF65A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DB3574A6-3F26-4CF5-AA67-41BA2405F35E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{056EEF26-CDA1-426B-BC98-D855A72539CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B80D4666-0EB7-4E9E-9748-BD2C406CE6C1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{71FD457B-238E-4617-9426-59B3FA85A631}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0630ADFC-74DB-4519-A17B-14D3B8B5F559}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C101E3DC-CBD7-4CBB-A9D9-5BE5B4937155}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1F2C342A-DACF-4C1F-A20D-CA36D3F7688B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ED4DD82B-1541-4F7B-9F17-9B643A73F628}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{42B9D3B3-0BD9-42FB-AEBE-6AE37147FAE1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C133F4A2-545A-4EE8-B919-93AD03AC9C9B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{C42C30EA-0DDD-4B1D-9552-185C6AF29FD4}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [{BD1123DD-A56F-4130-8024-5390CB52C7CE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C0230E69-9B1C-4AAA-A4AF-5D1C0010367B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{462CC9F9-2934-4753-990E-13159A293985}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{B0DC7D01-D368-45D1-94D5-C2D7BC635D34}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{8F0A29BE-383A-48EB-831A-8BB59772529C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{090A5E98-3D09-4F97-BEFD-865B8BC15775}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{246D4E8B-27F4-4368-A880-000BE9DF51BE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5D9B330B-01AF-4C61-9577-BD833E8BC814}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCC6240C-0BCE-4D06-93D7-57948C622CEB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5A2E2136-0C8B-41C3-9AF5-499830DCEB0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CB654A85-4155-4E21-A02E-51B307816806}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43C123F7-684F-444D-9BD6-96C9A21449D9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0587D897-D151-4654-8B5C-23081038B38D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCBC8A5A-92AE-4AF3-8380-299DC1100B8D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1DB9CEFF-AB65-430E-970A-012AD16D8653}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D24A259F-FBEE-48F3-B54B-9D182BE4C68A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{429AE150-9D40-40E2-B2C7-87636884ED73}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8008BBDF-7086-416A-BA82-1130F199D29F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{79C26398-2A9F-4DCE-86EB-006681808707}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D4BFD0EF-9216-4D09-9698-C0349F66932E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0807B0C6-1D6B-4375-8E80-89A708A31590}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1E7A5CA5-33BA-4819-8697-82A2BAF92B16}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{92334DE2-A471-405E-9D01-37FB83CCC00A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B2C18756-4C4D-4EA6-A381-B7940BBB9A72}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{F8093E29-7BE3-47DA-91E8-93D7DD6BC05F}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{A6ADA755-31AD-4722-AC79-5A2E71153E5E}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [TCP Query User{F8F846F0-C719-4A93-8D34-75383C7C0E53}C:\program files (x86)\logmein hamachi\test.serv\portmap.exe] => (Allow) C:\program files (x86)\logmein hamachi\test.serv\portmap.exe
FirewallRules: [UDP Query User{74ECFBB1-6A5B-4CCA-BABF-3DADB904CECE}C:\program files (x86)\logmein hamachi\test.serv\portmap.exe] => (Allow) C:\program files (x86)\logmein hamachi\test.serv\portmap.exe
FirewallRules: [{B623B4A2-5DA0-4116-885C-107ADFA2063D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9CE94020-BC62-4EE1-A278-F82F249E47AF}] => (Allow) svchost.exe
FirewallRules: [{F1184629-0D40-4143-B075-EB97F5DE028F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DF8E4BC4-938C-4F90-B819-68B4E2165BC0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F44E569C-C91C-4771-8079-3C6E7B015E2A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B4207451-C679-467B-9F0C-4E4D98D588A3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D10B6CD9-FBC6-4A82-8661-1913C4659091}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{54D0350F-5BDE-43EF-888C-079024E5A1CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1156832A-32C4-4D56-B477-88F8DA1D0AD1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CB63160E-F40C-4CF2-905E-729FD2A56810}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95605CAD-A364-45FE-86FF-49C28066169E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{58140915-9868-4930-9763-C368ADC0C19E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8CFC151C-67E2-4E5A-A60E-A038299792A8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EC329234-E3C7-4747-B1DD-DA4642A5963D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1790C24D-A53B-4B06-B342-9E664A871AB1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{58AC17BF-A458-414A-945F-68A3C9DC9746}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{152D71C5-5414-40EB-8BFE-F6CA0AC6EACF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A3A0106A-9742-4415-8BAC-857575F32639}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A8BE122-B191-4D3F-9AE4-176D22CE12B6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{268BE45F-1C06-459E-AE94-942366CABCC5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{37DD1E72-EA5C-4B23-9038-EA8DE5505497}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ABE01C81-7841-4A3C-B326-A110B1F3D59A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{321B7907-1745-4860-AD08-62C6D47413E3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3E1765E8-75DD-48F3-B33E-6649C0504D5B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BF0DEDC-9FF5-4CC1-9066-938DF861263C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{17080F74-F25F-4BEA-8A00-3666433F2D31}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FB7DC312-82D1-420A-A3A1-2809395E0A0F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{04743749-2A35-4CA7-845C-64DED2039931}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9CBBF4FB-4F62-44DA-860A-9801B0370062}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{188B5F6B-54D4-4C74-BD38-FC0527FE06B7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B4AEE73-9C9A-46A6-9F8A-666D75DB720B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B7179430-1B1A-4FB7-8560-0905FC9DFAE8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{115C20D2-B075-422F-A5B2-FE6A8561099E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6AF43D0F-9042-49BD-ADD9-3E47776981A5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9A3B7D26-43E5-4207-AF3D-5B43D9C934B9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBC228DA-14AC-41A6-A109-0882124450D2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27B541A2-7888-44E8-983F-96CBFA484C9A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AB48942B-236E-4969-9DDF-87228D83CEB1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9E00D8BF-CD94-4D10-B4F4-6E9B544C61EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7EDAD267-0007-4A28-8FEE-23511A8792B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6075D8A6-5DED-4E6F-B210-720EFA0922F6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1CDB7B16-0331-441D-BC63-DA8F4FF15AA4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3DCC5C71-3E4A-49FF-9F03-A17AFF2E14FF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F60A215E-2812-41BB-BF32-886D6AD4267D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{935143DF-14BB-474C-B2E3-DA5E894AAC97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F068E02F-0611-4F38-806C-1FC459AEB2A0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BCEECCCF-18AF-439D-9B40-D2AAFE7D1F06}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5F0B4A81-3119-4B80-9D3C-089D820E9419}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2CB307B5-8655-4857-A964-290A3364D06A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6B8A7A24-F1D0-4049-B4A7-9372CD6023F3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B1B7B374-E107-4AE2-9893-C71782B6C28E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B278212-895E-4090-BEA9-A4F3596F1AA0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0F08A151-CFB3-4C3B-B69C-6F0D573238D7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4744A08E-4535-4CB5-BFD3-AA838409AAFB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{467DCDDD-BFEC-4207-9E27-B5ACA7F337B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78D4F369-A06D-4295-A6A4-0578D05F5DA0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EC50BE97-4113-4CAD-9A41-3355799536B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4DE09A85-77A3-4A61-A4DF-41AB352896B0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FEAF20E-EFC8-49CF-842E-F43031A154D5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78EA05E5-FA20-4537-A37C-A38BB956B368}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{84924695-668C-42B4-9B73-CFF67E012C35}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1071C524-EFB5-4817-BB90-79E7E6728272}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{48958417-50E7-4437-B350-267BE9F2EE2B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00972DF2-FFB9-4C96-BC46-26EAA1499AC3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F726F263-A4C6-4E8A-86B2-84DD4459F7B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D3262721-1083-4D00-9894-63D130223942}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{65E19B58-E4DB-428C-A29A-C1C40DBD32AA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E6EAFDAF-D3EA-4CD8-8C84-C735516F5C4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA0099EB-B4BE-487C-A93A-3729779C6A35}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B21E9B6-1E79-4DBB-8690-7CED56E120F9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8222233A-961D-45E6-BC31-305F30017B7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95AE8580-BFC2-4503-A798-F371AA3B7463}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{099800FF-447A-4EA7-92B0-162B145B01CC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5C5F8958-2C6C-4687-B115-4B157615F128}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B9E2DE3-7EEE-48C6-B5BA-812D608B317B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C1C64EE9-A936-4FCE-B3DC-1F4F3060A626}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1714966C-38A2-41B7-BD1A-0CEEB1B2AB97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D8480C14-F8E4-489E-990B-946A1F948873}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{21454F68-77B6-4F83-B340-27C3F0513477}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E0B45A8D-0DC7-4197-ACFA-F01424E4CF4E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B7CAFF2-06D4-498F-955A-BB250AD8C72A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7CA7F0EF-7104-4726-A11F-6F504FC40E92}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CDE68075-9FA6-4BD5-8112-6749E9B06662}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4236E8B8-66EE-4390-8B64-0E0FB2B3F66B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3CC3D678-2477-45E2-8FD0-997AA486B717}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4383D057-D820-4EA0-82EE-4648FA65BCD3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A2315CA4-E0BA-423B-A30D-A2AF8E128FE9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B2108D0-9DB7-4D23-8133-ACEA6B088740}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{33B57803-49D4-4489-9142-F3CECBE9CAC3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EDE5B27F-0DD7-4106-AFEE-FC9D989DE83F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{40B1181F-8941-4B07-B4F1-A3D4021AA918}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FA2E0248-48F1-4414-89F9-85706CB141E6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25B96E92-71B8-4BC4-BBCF-C763CAD058AF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{15828D68-D1FC-4D76-823A-2C34D251700D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6554B95B-7D4B-4908-A738-549FDE434A1A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B613961D-4D0F-40BF-8306-A4A30363D7D5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8706ED8A-BA28-4990-B3E5-DD61E5CFE9DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0B435146-455C-4525-8B01-ADD3FB959E7A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4E4F3950-0A8B-4152-A70F-8E6AF942140F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9BAD320D-7C8C-448A-AE56-128E1D5876DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{38A5AE31-2EF3-448D-BC00-170D13423EF3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2A6A942D-5172-4545-8FDE-81AF91C845F1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{096E6E31-C13B-4134-ADC0-0BCC3DDD0B72}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E2258C61-7526-42ED-83B4-177ADD179573}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{01D3E2A4-CE6F-47FD-8E9C-5755968CFD44}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BFADBDD3-5899-4238-B303-E0F831495339}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{47ED954F-786D-4CF3-A13F-DD834C2A86CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6336A3AB-6622-4F63-9A8E-9F9A45836C3B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{298715E7-2CDA-4C78-A079-8F6B49D1CA9B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BE1C2867-70D7-4727-B908-0B6DFD686349}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{FADE2034-9211-4675-9E78-F8CC7C33E929}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{B6288528-998B-4E21-8E98-44734A68EF1C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{E8735903-F4D7-4458-8CF1-FD068256A36A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{202DA89C-F196-438E-BC04-FD4660CD821F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78E7D527-1A96-499B-9471-A47263846D4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{15149A18-B5CB-4E45-AF32-42D950042D0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F31657B8-8ED9-4DBA-8557-92987F952ABE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B9F2C2A8-A434-46E6-9DE1-E758491A86E5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3DBA3D10-7FE5-4E9C-B825-5C912628D74C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{93C32D34-6181-4011-8844-37050854A08F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F2C7A950-7997-4C9B-946C-4DE3ACBF7392}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A7028626-A102-4CBB-A6C6-388E5C26A4D3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B7BA2029-34EC-4037-A011-4CD9DE06AEF0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{735669DC-AAB2-4612-A31E-8A98EC02A16F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0F29E73E-2EE5-4F6E-A6D9-DE33B6A5BF55}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BB12FCBB-9445-4E7C-9647-C8E83FC32A68}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AB81B775-BDF3-478B-9F1C-6A9A4A450CEA}] => (Allow) C:\Program Files (x86)\ICQ7.6\ICQ.exe
FirewallRules: [{DA36FD3E-BEE9-428C-B39B-855EE484EAC4}] => (Allow) C:\Program Files (x86)\ICQ7.6\ICQ.exe
FirewallRules: [{B5803757-C912-44DD-9427-195343E169DB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B0245F9B-1AB9-4F22-89C1-D34199A3EE16}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A8405D5D-80F0-4BF3-8150-DB9654E8A1B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A1AF6AFD-0FE6-4E76-8E42-CCE59392356B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{BCF1525B-0C68-4D0E-A3F4-C4A3E90A7CAD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0968E1CB-6117-44B9-8237-15714C2E069D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8AD30BD1-34D4-43CD-B352-37887A9B1D5F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C9C6CD58-0118-43AC-82D7-01C6E5CB8682}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C659C18A-1DD8-481D-A10D-B98932113104}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{869CC805-05FB-4331-9E9F-9AC20D9D9D0A}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{C50F7E15-87C4-4C4A-B573-65FDCD84CB55}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{D748A75D-8065-417D-89B6-C373976FE82F}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{7833A975-1999-40BC-B77D-0FE9FE14DF0B}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{3D4C29E8-197F-4A51-8D73-BDDCB994D510}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe
FirewallRules: [{6A2E970F-11D1-45A4-88F1-860FB2D7D029}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe
FirewallRules: [TCP Query User{9C3BD875-8E4C-4F13-9C5B-1EBCFCF7A4CA}C:\users\teckforce\desktop\vumenia2\vumenia2.exe] => (Allow) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [UDP Query User{2FD210D2-E03D-400E-82F9-59315E7AC117}C:\users\teckforce\desktop\vumenia2\vumenia2.exe] => (Allow) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{4762E01E-C90D-49E8-861C-3327A21F362B}] => (Block) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{D1AE6896-CD2F-4F69-92F4-C42F68618930}] => (Block) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{52C02D1E-89DE-4BF4-89B1-F8A57E9E0295}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6E349CAA-3BFA-4BC3-BF56-599C05CEA63C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7092E162-2356-488E-8E53-0C5327A35031}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{88C717DF-2AA0-4D77-9492-52835E7DC54A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7471852F-8455-45D5-853B-5C41B716765D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F6133C9C-F960-431A-BDDF-A6FAD30692A2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{43DA5E72-74F5-412D-BB6E-C47F8A145813}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5BD5DCBB-91F9-4468-BF5D-8E50837E8CFB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{26442636-D13F-4CD5-9668-328035FC9EF4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6B1365A9-1EC4-4032-8242-2A3B010296EB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8CB84FFD-9D4E-40F1-B354-75697D3DB879}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E1DE482D-916B-4D9F-9CA8-6544D83A9A42}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A37EFA7F-53C2-484A-8C41-7DB411738DFF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8A8C3D45-C110-44E0-A7C0-64F1A6C3CB47}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2CC37623-5D07-407A-B285-FEA19A9A4E43}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8F8DB39D-CFE7-4E49-B29B-9586F794BB8F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F2E8D19D-ADB3-4344-AAA9-071B5500A862}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50D92BA8-F9DA-43FD-8455-D68F2BD1C3F2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{32D13594-51C0-437E-8476-E73049BE8E8A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1700D243-BDFF-41F7-B129-3F950BCEF054}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{BC2E52F4-9CEF-4DB6-BFB6-86C5007D0836}C:\users\teckforce\desktop\metin2\metin2client.bin] => (Allow) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [UDP Query User{CBBE4A73-B927-4478-957F-D6D9A80A7C0A}C:\users\teckforce\desktop\metin2\metin2client.bin] => (Allow) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{6442A2A3-975E-466E-A642-2B4B23276CED}] => (Block) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{90FE4F88-D135-4ABE-8D6E-2BDF950BC916}] => (Block) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{36834823-8BFD-47CC-9D0C-9934A2DAA141}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{513B04AF-7755-412B-A257-69DB5FC40823}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{27AE1CC5-340C-443C-9013-79BC03FDC649}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EEF2FC46-5A8C-4071-8067-867C1EE394BE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2BC3CFF9-A4C3-4DB8-AA12-E4F9CB07F5BE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5827A075-B847-40C2-A406-2A02DC3537D6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{72F22BDE-7E7F-4D91-B80F-55A8883FA5D2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{80580968-5407-43E9-9A86-564C3320E450}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{383E4BF1-1074-4C3D-A761-E90DA9CB7662}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0039D3B6-0272-4C8F-9114-5051CD044B14}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37ED2E93-D608-4A06-9114-8387371B655F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1655209D-088E-4A7B-8B36-3BE116B476E1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{04EA8240-A73F-4D61-A446-03105FBAA96D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A0AF5EC6-DE9B-4BA6-9E6A-7E5A6CE3C9D6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F3BA402A-DC21-47DB-8EF0-0615782797D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{976BB8C6-AFB8-4B02-9D9E-ECE2BB42FA06}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6187C7D1-EC04-4F3F-9073-6A177CA7E056}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{17DF1A3C-9C0E-45AB-A2A1-BBEF0789A17E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{6D38F81A-2FED-41D4-83F9-BD6AA7B99E36}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{DB6CDF30-E5A2-4EB1-9429-378A49B3C75E}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [{FE654041-35ED-4E6F-98DB-FD6A21C22E8C}] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{DFEB9A5D-54B0-42BE-A8E6-1BEBD1D667EB}] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{5306828E-BA37-4221-B2CE-FEB17CC0A7D9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{07C59F8D-6786-4083-B63C-70C58388FE07}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6CF6D41B-CC76-403B-90DD-31BCB934523A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E378E7CF-C8A6-4173-8523-E2EBD0FA80F2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C259888B-C895-421E-83E7-0AB15CDF1438}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{332D052C-572E-415A-8A81-B7465F6DE4FC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0F73D657-7D01-47BA-BA3A-8A1A05843B34}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1E832C0A-F47D-4D79-8FDC-D31DF46E8CFA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{066335DA-4AEC-4544-AC94-E5B1CCF9CD0C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{43AF6553-C738-4266-9B51-2E1E20E2DF78}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5E972F85-3C5D-44EC-8F45-97F42934EF75}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5E9D91FC-D5C6-443B-8AE2-5C884383303E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BC9D635C-0153-4743-8EFA-F4B81F811FF8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D57F5729-4432-4820-8847-D785CA4BC52C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CBF93D5B-B781-496A-9665-F7408C8A1612}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D7CB9B66-C5E9-4626-B36E-6CC1C0ED4E75}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{14A9D45E-0082-4B98-B5FB-D3EFCEC42E1C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7370CA1A-CF08-41A3-9B15-B24591D433A0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A9B54383-4AD9-47E8-BAAB-BB1B494AAB87}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C91C1912-DA92-4E07-BA89-26ECBC4A2CC7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1BC51B06-6546-440B-B5B0-70A02FEA97CD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AD4781B9-6FAC-4916-95C8-E77A11C99CFC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C2C7E4C9-51F2-44E4-86D3-4ECAB3D0EFA1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61D70A8E-FE41-42F0-B137-AD47060788B9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7A9D6F3B-B27F-40E3-B6FA-175BFA124A91}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AD118D60-A260-4574-BE71-ED5C1DD59222}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2498BEBA-687D-472F-9A4A-F5A585B186D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B8F82006-ADE5-46A2-9886-18BD5FB8CD8E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E912A990-6F56-429D-9EDE-5F98052335B6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6F3D0176-78EF-4295-9174-0D62FBC00180}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61185482-E5A7-41FF-9D44-049BEFCE5925}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CD9DA73F-F605-43C9-857A-D15BD6A77863}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{59B4A149-EC2A-44D5-A7E2-20B7668B0B0B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{315173DF-F9AE-4E53-9150-6E0F8A062407}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50EEA41D-C772-4AF3-8496-FB95FAA7F970}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{488CB525-6ECE-4000-9B6A-347B0F31CC5D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50F7EA88-5601-446B-9EB6-4300C72CC77C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{17FA35D3-B345-4870-ADBA-DFCC92F58F84}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E32B6F21-B8A5-481A-A482-2CDF12399981}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FB92F921-4069-4448-8470-87606E6AE4D1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1CB2299A-9E61-4523-AC9C-BF1D5610CCDB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FA6FE3DB-68E9-40AA-B9E3-E24121BD633E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{21B0540C-BBA6-47C5-AC66-994CDFA00052}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D19E8F4F-7827-41D3-A4AD-8870495BF188}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5D65F749-0CF4-45BE-B962-4AB6F353033F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E8B3C8B-6600-4B79-9146-76AB87A4BB81}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{380106DA-60E8-4C7F-9496-ACED79883725}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E4637B76-F408-4FBB-84D3-C3BE9CA7AEBC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{475DEB7D-BC60-4EB4-AEA5-03C9F7683E3D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C8EA2C4E-9042-49EE-BC6B-1C0514E1C630}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{73956F95-D999-49CC-A1D1-42EE079B13BD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CB3F1794-3734-42B4-82F1-9720B5DAE835}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5F416C69-4FD2-483E-A407-E41A81EDF56C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9AF5E1F4-2550-4DE7-936E-9154EF9E0DFC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{713A3BC8-10C4-4342-A704-1B8590258211}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2AFBE6FC-8DE3-4FF4-84A4-9ED8F42E37D7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{98D4676D-61E7-4E41-848A-717A2AA958E9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{98FF3AC5-3942-4B85-A28C-B55346A4D5DD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F96F263D-177A-46F6-8B7B-57834906035A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E58E0286-7B2F-4E42-95B1-26BCBED36EBB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{41F711C8-54D3-4AA8-8E2D-AE88D34AE97C}C:\users\teckforce\desktop\shiro2 client\shiro2.exe] => (Allow) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [UDP Query User{09EC14F9-DF3D-4953-AD79-8232F698D9A3}C:\users\teckforce\desktop\shiro2 client\shiro2.exe] => (Allow) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{5C630DD4-C266-42FC-B1A9-3E69D2D7399D}] => (Block) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{4A3ACA5D-52AF-4FDB-A829-0007854E7F00}] => (Block) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{50F957C0-E905-440A-8C4B-6A39CAD39B87}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{888DEF3F-8592-40D2-BB5B-4DBC32E47D27}C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe] => (Allow) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [UDP Query User{7B7F646C-3D63-412A-848A-8B8DF3B512FD}C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe] => (Allow) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{91FD620C-7313-4BE8-88CD-1A713A1A3760}] => (Block) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{ED2BB6DA-7505-4A8E-A11D-5C83AD315A24}] => (Block) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{44200003-1407-4B65-BB25-19DBB2654F1A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7BE9BB8D-FA9D-4342-A7DD-71A9F566D0D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AF2D41C6-09FB-4A1B-9B88-927FA1470CF5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C21C530A-A91E-484F-AEB8-26A5E6590432}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{59AB9268-5571-4463-8250-3E54613DF6B8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4BAB3DE7-2911-44FB-B33C-C9FA4FF1F3C9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{A3BB2BA5-B3D3-413C-9B5B-2E43AE3904D3}C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe] => (Allow) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [UDP Query User{C63B2418-C158-4FC9-8E47-13C10C0CF5E8}C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe] => (Allow) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{4DB87106-F1A0-48BE-898E-42A6ED057DF9}] => (Block) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{CFBADD12-A013-4108-9EDA-B1E5BF1EA58F}] => (Block) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{F7F31AE7-147E-4647-935C-E613E607A5DB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4A0826EA-D7D0-43E5-9FCA-7504D0B1B5F4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{07C65C28-60D6-4C1F-9493-7A597CEB98C1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{574BE9E5-FAE9-444D-B6F7-A85212480CFE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{330B1653-7FAB-47FC-AC31-AC2E1E04F142}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{700FB579-6639-4389-A5BC-443E0F1A9B4D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{64D9118D-FEF0-409D-8E0C-9C3F8FC85312}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9E32F005-61F6-49C1-A2AF-DE6141244236}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{89AFBB7C-FEA5-4EC9-BB1E-401B2C9A21D8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{392A2924-87ED-468E-9252-4AC794374C60}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{426A6B38-1A4B-41CE-BB35-A6CD9F74BF1A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{E2C07EE3-19A0-4226-A3A5-2945E941D831}C:\program files (x86)\red alert 2\gamemd.exe] => (Allow) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [UDP Query User{FE47BC43-48B5-41A0-B8DF-B78D863B334C}C:\program files (x86)\red alert 2\gamemd.exe] => (Allow) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [{18D871B0-1809-49ED-805C-729AD1640344}] => (Block) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [{4E6E0E36-D0C4-49AD-B06F-9B80E34448BD}] => (Block) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [TCP Query User{DB025DD1-30B8-4F7A-AF19-886EE097DAE4}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe] => (Allow) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [UDP Query User{D782C4F6-8B87-45DE-A137-14771879BD4E}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe] => (Allow) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [{382453E8-2961-4E46-AAA7-7BC695114024}] => (Block) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [{A5D417D0-62C1-44A5-804C-775623C3AA60}] => (Block) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [TCP Query User{0EBD8E02-2888-477C-B0A0-1EE8D561E595}C:\users\teckforce\desktop\eclipse\eclipse.exe] => (Allow) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{B2505C5F-6665-4AE1-B061-7FA5A7A2C11C}C:\users\teckforce\desktop\eclipse\eclipse.exe] => (Allow) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{A9DF3D7B-CA76-44CD-A59E-983D84D093B1}] => (Block) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{2676206F-1161-4281-AAE2-E006CAFA6421}] => (Block) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{52065A4E-0E8B-449D-990B-04219129F3FE}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{B10F01F2-7346-423B-BB5E-11D328047CF6}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [TCP Query User{A3EAD308-1A9F-40DC-88E8-58E8C935B8EF}C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe] => (Allow) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [UDP Query User{BCACF70A-9197-4AA7-A6ED-1E197DCC08E3}C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe] => (Allow) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [{0503DA23-063B-4DAE-AEAD-3567C551E6AD}] => (Block) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [{5744734D-7D0F-4846-911E-ED6444537609}] => (Block) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [TCP Query User{B17E6F1C-E477-4491-8D34-07D715DA7280}C:\users\teckforce\desktop\zerania2\client starter.exe] => (Allow) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [UDP Query User{B826808B-94D4-4D06-8BBE-099DC1E55AFF}C:\users\teckforce\desktop\zerania2\client starter.exe] => (Allow) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [{E6CE6BCD-4592-4F25-AF47-8B12D03325B8}] => (Block) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [{BF837295-649F-47DB-8742-2CCBA234BC99}] => (Block) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [TCP Query User{9F9E94BB-287A-4C9A-88A4-7C69D8BCE984}C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe] => (Allow) C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe
FirewallRules: [UDP Query User{D3DBE63C-A0E8-4445-AC1D-13AF0B9AFB2F}C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe] => (Allow) C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe
FirewallRules: [TCP Query User{254C5990-F181-48F2-A805-E72167BC18CF}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Allow) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [UDP Query User{A4AA56EB-9F12-44D7-9E7F-56FBA594BFBB}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Allow) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [TCP Query User{6BABDA50-B3B7-4190-B277-5C63566CF32C}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Block) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [UDP Query User{5F090277-2A2D-4A0E-AC0D-962EBA7BAFB5}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Block) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [TCP Query User{F0961457-B789-49AA-A826-130BB0194232}C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe] => (Allow) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [UDP Query User{4C0910BB-D59C-48C1-9F07-31B4DCA741E5}C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe] => (Allow) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [{9795A152-7B9E-45C7-8013-4FFEFD59F25C}] => (Block) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [{7BFF77EF-D6C0-4784-8946-FFFC4849ACA5}] => (Block) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [TCP Query User{7149089F-AD1B-430A-A95A-C91DE56C5A34}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [UDP Query User{0E045F19-7317-42F2-B210-470019E40A91}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{68A33C37-A5C3-4A41-AECB-B6CA5F1489A1}] => (Block) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{E1E13E63-E61C-46B4-9D4B-6FC29EFE3CCD}] => (Block) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [TCP Query User{B5FBD8CB-52C7-4A79-A2BA-3F72B24E2050}C:\program files (x86)\microsoft games\rise of nations\patriots.exe] => (Allow) C:\program files (x86)\microsoft games\rise of nations\patriots.exe
FirewallRules: [UDP Query User{CDD684EF-65B1-4B3E-967B-38D857E84E3E}C:\program files (x86)\microsoft games\rise of nations\patriots.exe] => (Allow) C:\program files (x86)\microsoft games\rise of nations\patriots.exe
FirewallRules: [TCP Query User{8E2030E2-86B5-4BD2-AD52-DE239B44DBAF}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{499C0427-DF42-426C-9CDD-415B9355547E}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{91ECFBDA-B271-46F8-83BB-F0030B810FF4}C:\users\teckforce\desktop\bin\metin2client.bin] => (Allow) C:\users\teckforce\desktop\bin\metin2client.bin
FirewallRules: [UDP Query User{96719C91-097F-4CFA-BBC6-DB6C206515C9}C:\users\teckforce\desktop\bin\metin2client.bin] => (Allow) C:\users\teckforce\desktop\bin\metin2client.bin
FirewallRules: [{EC9CDCB2-0C63-49E0-A548-C57E1B811D3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AB88B155-C762-4DFF-A4A7-F623496767AA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4F0EAD65-0BD4-4693-A19E-2D1D9F665257}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{98CD7A60-C7C8-4CF1-9EFA-33684ABE96DB}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{131BA9EB-9E05-4B6D-9105-F8A68115CF5E}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{CD1D73BC-F0C5-4CCA-A89A-6CD76F45F279}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe

==================== Faulty Device Manager Devices =============

Name: Atheros AR9285 Wireless Network Adapter
Description: Atheros AR9285 Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (05/19/2015 05:57:07 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x80042306).

Error: (05/19/2015 05:57:07 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80042306).

Error: (05/19/2015 05:57:02 PM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000164,0x0053c008,00000000000F27D0,0,00000000000F37E0,4096,[0])". hr = 0x80070005, Zugriff verweigert
.


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:52 PM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000130,0x0053c008,00000000000F07D0,0,00000000000F17E0,4096,[0])". hr = 0x80070005, Zugriff verweigert
.


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:41 PM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 000000000000013C,0x0053c008,000000000058EC00,0,00000000000EFFD0,4096,[0])". hr = 0x80070005, Zugriff verweigert
.


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:31 PM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000130,0x0053c008,000000000058BBF0,0,000000000058EC00,4096,[0])". hr = 0x80070005, Zugriff verweigert
.


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:20 PM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 000000000000013C,0x0053c008,000000000058BBF0,0,000000000058EC00,4096,[0])". hr = 0x80070005, Zugriff verweigert
.


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider


System errors:
=============
Error: (05/20/2015 09:04:57 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Performancer erreicht.

Error: (05/19/2015 05:57:02 PM) (Source: volsnap) (EventID: 4) (User: )
Description: Die Schattenkopie von Volume "C:" konnte aufgrund unzureichender Ressourcen für Arbeitsthreads nicht erstellt werden.

Error: (05/19/2015 05:56:52 PM) (Source: volsnap) (EventID: 4) (User: )
Description: Die Schattenkopie von Volume "C:" konnte aufgrund unzureichender Ressourcen für Arbeitsthreads nicht erstellt werden.

Error: (05/19/2015 05:56:41 PM) (Source: volsnap) (EventID: 4) (User: )
Description: Die Schattenkopie von Volume "C:" konnte aufgrund unzureichender Ressourcen für Arbeitsthreads nicht erstellt werden.

Error: (05/19/2015 05:56:31 PM) (Source: volsnap) (EventID: 4) (User: )
Description: Die Schattenkopie von Volume "C:" konnte aufgrund unzureichender Ressourcen für Arbeitsthreads nicht erstellt werden.

Error: (05/19/2015 05:56:20 PM) (Source: volsnap) (EventID: 4) (User: )
Description: Die Schattenkopie von Volume "C:" konnte aufgrund unzureichender Ressourcen für Arbeitsthreads nicht erstellt werden.

Error: (05/19/2015 05:51:37 PM) (Source: volsnap) (EventID: 14) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.

Error: (05/19/2015 10:41:31 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Performancer erreicht.

Error: (05/18/2015 01:25:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Performancer erreicht.

Error: (05/17/2015 04:12:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Performancer erreicht.


Microsoft Office Sessions:
=========================
Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (05/20/2015 09:11:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (05/19/2015 05:57:07 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x80042306

Error: (05/19/2015 05:57:07 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x80042306

Error: (05/19/2015 05:57:02 PM) (Source: VSS) (EventID: 12289) (User: )
Description: DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000164,0x0053c008,00000000000F27D0,0,00000000000F37E0,4096,[0])0x80070005, Zugriff verweigert


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:52 PM) (Source: VSS) (EventID: 12289) (User: )
Description: DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000130,0x0053c008,00000000000F07D0,0,00000000000F17E0,4096,[0])0x80070005, Zugriff verweigert


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:41 PM) (Source: VSS) (EventID: 12289) (User: )
Description: DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 000000000000013C,0x0053c008,000000000058EC00,0,00000000000EFFD0,4096,[0])0x80070005, Zugriff verweigert


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:31 PM) (Source: VSS) (EventID: 12289) (User: )
Description: DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 0000000000000130,0x0053c008,000000000058BBF0,0,000000000058EC00,4096,[0])0x80070005, Zugriff verweigert


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider

Error: (05/19/2015 05:56:20 PM) (Source: VSS) (EventID: 12289) (User: )
Description: DeviceIoControl(\\?\Volume{1b2e7bad-083b-11df-8443-806e6f6e6963} - 000000000000013C,0x0053c008,000000000058BBF0,0,000000000058EC00,4096,[0])0x80070005, Zugriff verweigert


Vorgang:
  EndPrepareSnapshots wird verarbeitet

Kontext:
  Ausführungskontext: System Provider


CodeIntegrity Errors:
===================================
  Date: 2014-12-07 05:24:19.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:24:19.617
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:24:19.607
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.934
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.924
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.914
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:05.170
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..rics-storageadapter_31bf3856ad364e35_6.1.7600.16385_none_d67ca3c3b6af653e\winbiostorageadapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:05.160
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..rics-storageadapter_31bf3856ad364e35_6.1.7600.16385_none_d67ca3c3b6af653e\winbiostorageadapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:05.150
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..rics-storageadapter_31bf3856ad364e35_6.1.7600.16385_none_d67ca3c3b6af653e\winbiostorageadapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:12:56.567
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_5722666f137ae177\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz
Percentage of memory in use: 40%
Total physical RAM: 4060.61 MB
Available physical RAM: 2417.86 MB
Total Pagefile: 8119.38 MB
Available Pagefile: 5871.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:144.21 GB) (Free:62.64 GB) NTFS
Drive d: () (Fixed) (Total:306.45 GB) (Free:306.32 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 07A54FFB)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=306.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

deeprybka 20.05.2015 20:54
Hi,
Echtzeitscanner bitte deaktivieren:

http://deeprybka.trojaner-board.de/zoek/avira.gif

Schritt 1
http://deeprybka.trojaner-board.de/b...s/combofix.pngScan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Divinely 20.05.2015 21:01
Könnte sein, dass er gleich nen Bot für ein Spiel als Virus anzeigt, der aber keiner ist.

Editiere gleich die Logs hier rein.

deeprybka 20.05.2015 21:18
Combofix zeigt keinen Bot oder sowas an. Er killt ihn gleich...:D

Divinely 20.05.2015 21:26
Also gekillt hat er ihn nicht, zeigt sowieso nur Avira als "Trojaner" an. Aber Avira ist ja eh nicht das Beste, nä :D

Während Combofix gearbeitet hat kamplötzlich das:
http://fs1.directupload.net/images/150520/t6odhw6l.jpg

Code:
ComboFix 15-05-19.01 - TeckForce 20.05.2015  22:06:30.2.2 - x64
Microsoft Windows 7 Professional  6.1.7600.0.1252.49.1031.18.4061.2606 [GMT 2:00]
ausgeführt von:: c:\users\TeckForce\Downloads\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\TECKFO~1\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\background.html
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\content.js
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\jURhd.js
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\lsdb.js
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\manifest.json
c:\users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\preferences
c:\users\TeckForce\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-04-20 bis 2015-05-20  ))))))))))))))))))))))))))))))
.
.
2015-05-20 20:12 . 2015-05-20 20:12        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2015-05-20 20:12 . 2015-05-20 20:12        --------        d-----w-        c:\users\UpdatusUser.Malte-Notebook\AppData\Local\temp
2015-05-20 20:12 . 2015-05-20 20:12        --------        d-----w-        c:\users\Public\AppData\Local\temp
2015-05-20 20:12 . 2015-05-20 20:12        --------        d-----w-        c:\users\Default\AppData\Local\temp
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-16 11:19 . 2012-10-17 06:55        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-05-16 11:19 . 2011-07-05 17:56        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-05-05 13:20 . 2013-04-26 17:36        152744        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2015-05-05 13:20 . 2013-04-26 17:36        132120        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2015-03-10 15:01 . 2013-05-07 15:31        44088        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2015-02-27 07:04 . 2015-02-27 07:01        129752        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-11-22 12:54        323752        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-05-05 728312]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2015-03-16 129272]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dfc86759;Performancer;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
S0 BMLoad;Bytemobile Boot Time Load Driver;c:\windows\system32\drivers\BMLoad.sys;c:\windows\SYSNATIVE\drivers\BMLoad.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2015-05-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-17 11:19]
.
2015-05-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19 15:19]
.
2015-05-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19 15:19]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{065B7D9A-4AD5-1B34-D5C0-E4BCAA3B3210}]
c:\programdata\ReguluarDeealls\YGpfp.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-11-20 13:53        357376        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEF0F387-CEB7-8C95-3393-650E7DC838AC}]
c:\programdata\SaaveNewaAppz\dmP.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-23 8067616]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Wikipedia (de)
FF - prefs.js: browser.startup.homepage - hxxp://facebook.de/
FF - prefs.js: keyword.URL -
FF - ExtSQL: !HIDDEN! 2012-12-08 06:23; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4082847748-2108349381-1701915676-1000\Software\SecuROM\License information*]
"datasecu"=hex:be,15,04,d8,ad,b3,97,ba,26,cb,93,26,21,f9,c5,cb,3e,ba,0c,2a,33,
  a9,2f,fa,d5,c3,28,fb,9b,71,e1,83,77,30,d3,c5,88,fa,33,f0,24,f1,d1,97,1e,4f,\
"rkeysecu"=hex:5d,26,3e,51,f3,a7,2f,5d,71,8e,9a,02,12,38,31,b8
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-05-20  22:19:50 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-05-20 20:19
.
Vor Suchlauf: 17 Verzeichnis(se), 66.908.581.888 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 68.427.468.800 Bytes frei
.
- - End Of File - - A79A93D075C54766DE211B6483F4DB00
A36C5E4F47E84449FF07ED3517B43A31

deeprybka 20.05.2015 21:29
Das gehört zu Combofix.

Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



(Neue Version!)
Schritt 2

http://deeprybka.trojaner-board.de/m...mbamlogo4a.pnghttp://deeprybka.trojaner-board.de/m...mbamlogo4b.png
  • Download und Anleitung
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
  • Unter Einstellungen/ Erkennung und Schutz setze bitte einen Haken bei "Suche nach Rootkits".
  • Gehe zurück zum Armaturenbrett und klicke auf "Jetzt scannen".
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben und poste mir das Log.

Schritt 3

http://filepony.de/icon/frst.pnghttp://deeprybka.trojaner-board.de/b...t/frstscan.png

Bitte starte FRST erneut, und drücke auf Scan.
Bitte poste mir den Inhalt des Logs.

Divinely 20.05.2015 23:12
Code:
# AdwCleaner v4.204 - Bericht erstellt 20/05/2015 um 22:38:34
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-12.2 [Lokal]
# Betriebssystem : Windows 7 Professional  (x64)
# Benutzername : TeckForce - MALTENOTEBOOK
# Gestarted von : C:\Users\TeckForce\Desktop\AdwCleaner_4.204.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : dfc86759

***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\ProgramData\Performancer
[!] Ordner Gelöscht : C:\ProgramData\84c21818bc06a818
[!] Ordner Gelöscht : C:\ProgramData\glabdaacdcpgfhaijchagfpccpompelb

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKU\.DEFAULT\Software\ICQ\ICQToolbar

***** [ Internetbrowser ] *****

-\\ Internet Explorer v8.0.7600.16385


-\\ Mozilla Firefox v37.0.2 (x86 de)

[b7q0tiwk.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
[b7q0tiwk.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [10994 Bytes] - [03/01/2014 05:15:48]
AdwCleaner[R1].txt - [2802 Bytes] - [20/05/2015 22:37:12]
AdwCleaner[S0].txt - [10717 Bytes] - [03/01/2014 05:17:49]
AdwCleaner[S1].txt - [2616 Bytes] - [20/05/2015 22:38:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2675  Bytes] ##########
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 20.05.2015
Suchlauf-Zeit: 22:45:22
Logdatei: malware-log.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.20.05
Rootkit Datenbank: v2015.05.16.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7
CPU: x64
Dateisystem: NTFS
Benutzer: TeckForce

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 445974
Verstrichene Zeit: 45 Min, 56 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Tiefer Rootkit-Suchlauf: Aktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 2
PUP.Optional.ICQToolbar.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{855F3B16-6D32-4fe6-8A56-BBB695989046}, In Quarantäne, [a63fbbda9cee290d33ab91c1f80b28d8],
PUP.Optional.ICQToolbar.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{855F3B16-6D32-4FE6-8A56-BBB695989046}, In Quarantäne, [a63fbbda9cee290d33ab91c1f80b28d8],

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-05-2015
Ran by TeckForce (administrator) on MALTENOTEBOOK on 21-05-2015 00:02:52
Running from C:\Users\TeckForce\Desktop
Loaded Profiles: TeckForce &  (Available profiles: TeckForce)
Platform: Windows 7 Professional (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2010-01-23] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2010-01-23] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ReguluarDeealls -> {065B7D9A-4AD5-1B34-D5C0-E4BCAA3B3210} -> C:\ProgramData\ReguluarDeealls\YGpfp.x64.dll No File
BHO: SaaveNewaAppz -> {EEF0F387-CEB7-8C95-3393-650E7DC838AC} -> C:\ProgramData\SaaveNewaAppz\dmP.x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-21] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default
FF DefaultSearchEngine: Wikipedia (de)
FF DefaultSearchEngine,S:
FF DefaultSearchUrl: hxxp://www.bing.com/search?FORM=IEFM1&q=
FF SearchEngineOrder.1:
FF SearchEngineOrder.1,S:
FF SelectedSearchEngine: Wikipedia (de)
FF SelectedSearchEngine,S:
FF Homepage: hxxp://facebook.de/
FF Keyword.URL:
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2011-06-07] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2011-06-07] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2010-10-04] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2010-10-04] (Apple Inc.)
FF SearchPlugin: C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\searchplugins\transfermarktde.xml [2014-05-09]
FF Extension: Avira Browser Safety - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\abs@avira.com [2015-04-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-05]
FF Extension: MEGA - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\firefox@mega.co.nz.xpi [2014-07-12]
FF Extension: Adblock Plus - C:\Users\TeckForce\AppData\Roaming\Mozilla\Firefox\Profiles\b7q0tiwk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-05-20]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2012-12-08]

Chrome:
=======
CHR Profile: C:\Users\TeckForce\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5214384 2014-01-13] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2011-11-13] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2011-11-13] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-28] (DT Soft Ltd)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S3 Secdrv; C:\Windows\SysWOW64\drivers\SECDRV.SYS [11616 2001-08-25] () [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-14] (Duplex Secure Ltd.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-21 00:02 - 2015-05-21 00:03 - 00014039 _____ () C:\Users\TeckForce\Desktop\FRST.txt
2015-05-20 22:35 - 2015-05-20 22:35 - 02209792 _____ () C:\Users\TeckForce\Desktop\AdwCleaner_4.204.exe
2015-05-20 22:23 - 2015-05-20 22:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-20 22:19 - 2015-05-20 22:19 - 00014659 _____ () C:\ComboFix.txt
2015-05-20 22:03 - 2015-05-20 22:19 - 00000000 ____D () C:\ComboFix
2015-05-20 22:02 - 2015-05-20 22:02 - 05627500 ____R (Swearware) C:\Users\TeckForce\Downloads\ComboFix.exe
2015-05-20 22:02 - 2015-05-20 22:02 - 00001508 _____ () C:\Users\TeckForce\Desktop\ComboFix - Verknüpfung.lnk
2015-05-20 21:43 - 2015-05-20 21:43 - 02107904 _____ (Farbar) C:\Users\TeckForce\Desktop\FRST64.exe
2015-05-18 06:06 - 2015-05-18 06:06 - 01203488 _____ () C:\Users\TeckForce\Desktop\Poweroff - CHIP-Installer.exe
2015-05-18 02:28 - 2015-05-20 21:44 - 00000000 ____D () C:\Users\TeckForce\Desktop\bot
2015-05-16 22:31 - 2015-05-16 22:31 - 00858000 _____ () C:\Windows\Minidump\051615-19250-01.dmp
2015-05-12 23:37 - 2015-05-12 23:37 - 00001037 _____ () C:\Users\TeckForce\Desktop\Patcher - Verknüpfung.lnk
2015-05-12 21:46 - 2015-05-19 15:25 - 00000000 ____D () C:\Users\TeckForce\Desktop\Lariya3

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-21 00:03 - 2010-01-23 18:23 - 01845120 _____ () C:\Windows\WindowsUpdate.log
2015-05-21 00:02 - 2014-01-03 05:39 - 00000000 ____D () C:\FRST
2015-05-20 23:59 - 2012-05-05 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-20 23:59 - 2010-10-19 17:19 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-20 23:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-20 23:59 - 2009-07-14 06:51 - 00210587 _____ () C:\Windows\setupact.log
2015-05-20 23:31 - 2010-10-19 17:19 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-20 23:28 - 2013-01-01 18:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-20 22:47 - 2009-07-14 06:45 - 00014080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-20 22:47 - 2009-07-14 06:45 - 00014080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-20 22:45 - 2015-02-27 09:01 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-20 22:44 - 2015-02-27 09:00 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-20 22:44 - 2015-02-27 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-20 22:44 - 2015-02-27 09:00 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-05-20 22:44 - 2009-07-14 19:58 - 12610546 _____ () C:\Windows\system32\perfh007.dat
2015-05-20 22:44 - 2009-07-14 19:58 - 03996898 _____ () C:\Windows\system32\perfc007.dat
2015-05-20 22:44 - 2009-07-14 07:13 - 00006212 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-20 22:38 - 2014-01-03 05:15 - 00000000 ____D () C:\AdwCleaner
2015-05-20 22:19 - 2014-01-04 10:34 - 00000000 ____D () C:\Qoobox
2015-05-20 22:14 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-20 22:13 - 2010-01-23 18:47 - 03004702 _____ () C:\Windows\PFRO.log
2015-05-20 22:10 - 2011-06-19 15:44 - 00000000 ____D () C:\Users\TeckForce\AppData\Local\CrashDumps
2015-05-16 22:31 - 2010-12-24 16:03 - 289159053 _____ () C:\Windows\MEMORY.DMP
2015-05-16 22:31 - 2010-12-24 16:03 - 00000000 ____D () C:\Windows\Minidump
2015-05-16 13:22 - 2015-04-17 23:49 - 00000000 ____D () C:\Users\TeckForce\Desktop\spanch-2015-gobe
2015-05-16 13:19 - 2014-09-11 22:43 - 00000000 ____D () C:\Users\TeckForce\AppData\Local\Adobe
2015-05-16 13:19 - 2013-01-01 18:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-05-16 13:19 - 2012-10-17 08:55 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-16 13:19 - 2011-07-05 19:56 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-05 15:22 - 2013-04-26 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-05 15:20 - 2013-04-26 19:36 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-05-05 15:20 - 2013-04-26 19:36 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-05-04 08:48 - 2010-03-13 17:31 - 00000000 ____D () C:\Users\TeckForce\Desktop\Metin2
2015-04-29 12:20 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2010-04-27 19:58 - 2010-06-05 16:29 - 0037611 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_01.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0006253 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_02.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0006569 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_04.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0004916 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_05.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005844 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_06.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005670 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_08.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0005273 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_09.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0001628 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_10.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0009442 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_11.jpg
2010-04-27 19:58 - 2010-06-05 16:31 - 0031000 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_12.jpg
2010-04-27 19:58 - 2010-04-25 20:25 - 0003319 _____ () C:\Users\TeckForce\AppData\Local\TempPatcher1_13.jpg
2010-08-01 16:07 - 2010-08-01 16:07 - 0000040 _____ () C:\ProgramData\ra3.ini

Some content of TEMP:
====================
C:\Users\TeckForce\AppData\Local\Temp\avgnt.exe
C:\Users\TeckForce\AppData\Local\Temp\Quarantine.exe
C:\Users\TeckForce\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-14 19:02

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-05-2015
Ran by TeckForce at 2015-05-21 00:03:50
Running from C:\Users\TeckForce\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4082847748-2108349381-1701915676-500 - Administrator - Disabled)
Gast (S-1-5-21-4082847748-2108349381-1701915676-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4082847748-2108349381-1701915676-1019 - Limited - Enabled)
TeckForce (S-1-5-21-4082847748-2108349381-1701915676-1000 - Administrator - Enabled) => C:\Users\TeckForce
UpdatusUser (S-1-5-21-4082847748-2108349381-1701915676-1020 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader 9.4.6 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A94000000001}) (Version: 9.4.6 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.1.629 - Adobe Systems, Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
BatteryLifeExtender (HKLM-x32\...\{AA16A9E5-40E9-44F5-801E-6B3D3CFE79E5}) (Version: 1.0.0 - Samsung)
C&C Red Alert 2 (HKLM-x32\...\{025BA1DC-204E-4563-8A46-79B09457020E}_is1) (Version: 1.006 & 1.001 - Westwood)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
EA Download Manager (x32 Version: 4.0.0.462 - Electronic Arts) Hidden
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
Gameforge Live 1.5.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.5.0 - Gameforge)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
ICQ Sparberater (HKLM-x32\...\{FE163F11-1919-4257-A280-FF5AF8DAEECB}) (Version: 1.2.662 - solute gmbh)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java(TM) 6 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NVIDIA Grafiktreiber 306.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.23 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.10.69 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5919 - Realtek Semiconductor Corp.)
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.4.12 - Synaptics Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

20-05-2015 22:03:24 ComboFix created restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-05-20 22:14 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {06E3E035-C0B7-4D16-B5AB-625A79D9EADF} - System32\Tasks\{BFE82A32-DCB1-4660-A60C-4FBAABDDD5A8} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {0B7C26E6-F026-418D-B4A2-2EFC9436F6A2} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {0D4C30AA-7672-4133-9EA3-96F8FA149306} - System32\Tasks\{490364F2-9218-4129-8D56-D83BCC86298F} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {21F47211-0818-401F-B277-F62149B7944A} - System32\Tasks\{12B3241E-BF63-4B1D-BABE-44E827AAF952} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {2EBBBC28-425B-49B6-A282-EE485410EBF3} - System32\Tasks\{871D3A79-6BAA-435D-9226-7617C86F3D1A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {34AF3751-21B0-45C2-9AB4-62CE2A8CAD91} - System32\Tasks\{35CB8C92-0CB6-4CCB-87A5-9B8D37409850} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {39E51012-8B93-44FC-A029-A81490FBDE55} - System32\Tasks\{4740860E-9541-48F6-9656-F98FA40D226B} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {3D247461-7ED1-41A5-8BD9-B9A346247559} - System32\Tasks\{EB6352A1-CB3C-4EB9-8314-1D7E1221D00D} => pcalua.exe -a C:\Users\TeckForce\Downloads\avira_de_av_43666566_97kej3lfg1as4ot0j3y8_wd.exe -d C:\Users\TeckForce\Downloads
Task: {44D19DE4-2652-401A-9452-F3B425B28C3C} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe
Task: {54D231B5-52D0-4C21-B19C-F93C479F7236} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe
Task: {562399FA-AFCE-4F98-8366-9F2D09F92073} - System32\Tasks\{4A1FC634-EC50-4714-B8C3-ED1008E3EFDE} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {56F81B24-5C26-49ED-AF26-ACFFB681FA51} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {8CA882A9-D53C-4EB5-A763-AF85FA0E4ED2} - System32\Tasks\{83EE9674-59D2-4E73-9FED-472D1E3892E1} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto San Andreas\GTA San Andreas.exe
Task: {A7AEC60D-453E-49AF-AA77-E04D45F16FDE} - System32\Tasks\{0FF9432E-6ECD-4E54-B139-B09F2E4645EE} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {B41FE991-6356-4D97-BFDD-26B3C763180C} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {B4CF05FF-91C6-415D-B144-8B94B583EE9B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {B541288D-C974-4D39-B7BB-B4B9F1097E79} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {BAEC2B7D-0B29-4286-A7B2-0C37805456F3} - System32\Tasks\{17D3819D-E9B2-4C47-8983-6CF621736FA5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {BBB8F094-DB07-4262-99C9-B9C009B06600} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {C0E88FFC-F433-44A3-95F9-9EB5E5DA5F4E} - System32\Tasks\{4ADB7176-B7AA-4562-9C3C-AB29E8E33E43} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {CFE93261-A299-4DEB-9C40-FE12CA35AB3E} - System32\Tasks\{096FCD2A-B244-4388-9F6C-2F5AF2C79ABA} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {D5B8F0CA-C0B6-4C41-8568-E2421987DFE2} - System32\Tasks\{3D37A216-BE66-4E9F-B670-8293DAABA87C} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: {E1C36F30-AB1D-454B-B5E5-E1C5595FA09E} - System32\Tasks\{DD972019-67A4-45E7-B914-3B2E4F1CF65A} => C:\Users\TeckForce\Desktop\Dovetail Games Fishing Installer.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2012-09-29 02:40 - 2012-08-30 18:17 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-11-13 04:49 - 2011-11-13 04:49 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-11-13 04:49 - 2011-11-13 04:49 - 00103736 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4082847748-2108349381-1701915676-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\TeckForce\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^TeckForce^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ctfmon.lnk => C:\Windows\pss\ctfmon.lnk.Startup
MSCONFIG\startupfolder: C:^Users^TeckForce^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{D3070277-0D37-4D80-A817-9E9AC9F82719}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43377027-F39E-4EFD-8F26-B9EBEC93A810}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{23E4CA84-E2B0-4A02-A8EC-2563A9939442}] => (Allow) C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{08444CC0-1FEA-473A-A208-F5D9B6D6A688}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C42BFFE5-6F80-49CB-9E23-961E27A6D0E7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{8B47C0E7-B9FD-4722-9561-50CD12153DDF}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{2A13344C-F8FE-49F0-A437-D8E1DE8859BE}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{5CA09CE7-4B3F-4E22-8712-099E2EB7EAAD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2D962EB4-BADD-4491-B487-059F6E82583D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A9A730CF-365E-4550-93BC-9F12A66EB29A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{37ACDB2E-3099-4107-82C8-371CC3A2A769}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{E8B8BF9F-38D7-490A-81F2-9AD9EFF81794}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [TCP Query User{0F298AC3-7EB1-46C0-94CF-9D71FA243845}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{4C4A8026-1630-4FDB-9DA1-06E3792A43E1}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [{3DBD3D65-6256-42FE-BD62-5269120CA34C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0E43FE3D-8441-4D27-B89B-72EF3FB1DA12}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9345403B-B806-47ED-80E7-4EE4EAE36FB8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2852CEAB-0CE6-45EC-B0AD-D49FF1F5CE80}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8FCEBDBD-2CD4-40C7-B7DB-C40C7441886B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2C3ECF23-930E-4157-9E6C-5DC75E9E928C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{07896D8D-B32F-4FE7-92CD-50BB547E9ECB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5EE7C62F-AD3D-46E7-9C23-B3C04D4FE5BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B94D9493-47A7-457D-874B-0F4555C6A7DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C3A62303-0C64-43C6-839E-90DD9348F434}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6782C989-C1EB-478D-9381-3B47096CE0F7}H:\blacknight-mt2 client 1.2\lib\game\game.exe] => (Allow) H:\blacknight-mt2 client 1.2\lib\game\game.exe
FirewallRules: [UDP Query User{61AE0544-18E0-4C93-9D2E-CAB1E478994F}H:\blacknight-mt2 client 1.2\lib\game\game.exe] => (Allow) H:\blacknight-mt2 client 1.2\lib\game\game.exe
FirewallRules: [{E85D7E31-C5E2-42B8-A43C-508D29B0FD92}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F24D9C5-24E2-4888-9634-9887DB21474D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A9EABF9F-7071-43C9-B577-62E113C9D3CA}C:\users\teckforce\desktop\finalmt2old\metin2client.bin] => (Block) C:\users\teckforce\desktop\finalmt2old\metin2client.bin
FirewallRules: [UDP Query User{A6542AC8-9E05-41FB-A9F3-681211F7D367}C:\users\teckforce\desktop\finalmt2old\metin2client.bin] => (Block) C:\users\teckforce\desktop\finalmt2old\metin2client.bin
FirewallRules: [{0EB0D9B9-A2E2-4204-8744-63E0ACE3A344}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4F435F5F-E306-4E03-A78A-C2CE0B2C4A19}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6044A457-0CEC-4AD0-99F6-0A9B2AFA2C45}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9FBDBE24-9FC7-41CC-9041-A218E43E9122}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FDCF3BBC-5704-4626-A778-6B884C37CE1A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FD46FDDF-DC29-456B-B104-4D6398142B4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{23C5986E-8D70-4A6E-9C5C-9B227336BC25}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7B1A238F-362D-46EC-8FB4-7FD1D5553FC8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B62400F-0EA2-4C4A-8A32-C3A43DAED38E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{474858DB-0A3A-4AFF-AA06-645CE091C932}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F6D21280-A3D5-4F98-AF7B-E64996854A17}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{190E16C5-AD39-4994-ACC0-16BFCB728CAD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9055E820-975E-4D65-B92B-79CE6F95B711}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DA441D15-B571-4734-BE66-054340D0878A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AE98853E-A303-4F85-AF44-918A2CF76EA4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A21D50B9-7BFF-46CB-BB74-6EB9DB7A44A7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8138C11E-65F9-416F-9365-4331119E9354}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6C1BD50C-5A25-497B-B02E-B9543B4B7487}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5A73A9A7-0EA0-4F80-9523-AE8633A806F8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27B152A1-410A-48C5-AECF-4EB9346E6E11}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{903A1FC4-2CEE-4EC1-829A-1416E2BDEEF7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EF853346-4D3F-4AE4-8062-15C828D065D0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1BC60DC2-CB34-462A-9BAC-C6C1BDEFD431}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D5302B9C-B05A-456B-B8A7-B445BB8833EB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{28D35C5D-9FCB-4D20-9243-9257C1DB13E6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A909E80E-1434-4E31-9731-E42CCC1E69FE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4D2A244B-A737-4092-ADC2-428DB51ADAB7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCD5CD72-F23A-4D48-BFE3-AE17A80BC815}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{16254156-C810-4890-9579-62B19217B2D4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{40F9AD6E-B5A7-4D24-9267-21C937F210F3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BE0E4B1-2D11-4A7E-A4D5-D9360A8FFD21}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B2493322-0428-40E1-9F99-8CD356FAF57F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A6D0FB6E-581D-47E6-8FCB-EF47A981D01C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B0C1D792-D7F2-41DF-B8F2-CD0A9E827A6C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F72DE475-2642-468F-9178-E99AD5B3BF99}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B6538AF-3B78-427F-B15C-34F554E3D4BF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C167F6A1-0406-4E60-848C-3402C7F13ED1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4134D578-B91A-49D5-9B26-D4B9E38A7595}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE69B175-DB35-482F-9423-22B9E2200BD0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{615B8DE9-81B7-478C-A412-680E35A14584}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4A9CAFD2-C130-44AC-B14B-C10B0828B1D8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FD4E9065-8945-44AD-A957-A21184CBBBA8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B5E4573-67A0-4678-B7F1-8688B865DC8B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00C73321-6230-439D-9EA5-9953115A28BD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D00A7E74-708A-4158-BF36-6D4FD23FA255}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A88132D1-42FE-48A4-9A16-4A427C0BB0B5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78C0F730-3C90-4756-A665-48A1F7C5B4D1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA7A53E4-3EAA-4E10-BA68-37D14F0081AB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA53DE5D-538B-47AB-8A7B-3712B7921A5E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{351EE3AE-7841-431F-9381-42A00708731F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11CCB5CD-B7B4-40CB-8BA8-83ABB4A8A8D6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1C1F7C81-BCF2-47F3-A598-DE35631598C7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{14727FCF-DAEE-483E-B1B0-5E41FF997595}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D64A9869-8A65-4034-9C5B-A84F45CD1BFD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{21D8649C-17EC-4CF3-9B4C-A684A59A641D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11EC81BC-5E34-4331-B5A0-28FEC1649E71}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0BC646B-3729-4109-9ACB-F17E3D149D0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7EE22D9B-59FE-483A-A3C7-35BA28EEBCCF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43CA25BC-12A3-4081-BAE1-84EFE592AF3F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C5AE5CC8-2B55-4CE4-9FEA-434EC0273000}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CAF82CF1-1A65-44EF-8253-954FD04F0D2E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9C4EF57B-50A3-426C-BAF3-B893AFEF1A1D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4A215375-87FE-458A-8379-FDFA92FACEF1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B81E0A0D-BAD6-4682-A57D-9BDEC85417DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0A63FA9B-9B39-4756-9894-13E344589480}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F751C1AA-0D7C-4C10-8F0F-E13D65F8DBC7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4DFD718F-F3B7-41AC-9299-8A215C9FF1D3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ED4AD060-0A3D-425D-BAC4-803B4ED77A7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B81BD72F-623A-4402-AC9B-F02F57FA916E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBA1D791-E616-4726-8FB0-007EB4654D4D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{800BA9E8-2E12-43D8-9CE0-D5E832A3847C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{550808ED-CB7D-44D3-AAD0-D3DDD4734E1F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6B6AB528-B6CD-4774-898A-4DFF65A5E8A8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B062B8B7-C4D5-4A2E-93FE-46F7B90B9871}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{139BD1D5-CE1C-4FF5-9079-DC55E41ED091}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F3A4EA12-C0BD-4A0A-AFD2-1B178B1F34DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA7E58F5-76EF-47BB-B421-87676FD9146D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CBCDF8C8-1106-4814-AD2F-D594826FF270}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27591001-38BB-4237-BCEB-77F929F5FD97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43EC68EA-E4AC-4854-A3E0-256169443828}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6002CD0A-0988-465A-AA77-F4C5358DF268}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6EE762AD-3518-4BA4-831C-261162A5337D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0392F9A-903E-45C3-9DC9-FD238AAB4EB4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4374A950-2F0D-431D-BBF6-8AE63BAB29B8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4EFEDBA6-B9C1-4811-9103-7A2526A4CBA3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DE4202DD-EB8C-4ABD-B558-FBEEF84E6D0F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{314B57BE-BB64-4106-9AC9-4DC2437D79F7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8C2350DF-FFA2-488F-892B-BC630DBB17DD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{61A456D5-0967-45DA-882C-71C20812DB6B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E9EA059A-3F5E-491C-977C-6F72E8F86B78}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7B66A9C8-99EF-43FF-96BC-2DE4639F7B4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9230E404-9993-4E67-9762-00CFB8E9F231}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0A835ECF-6B6B-4951-B13B-148A55811C2A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E8B4C0FC-4F83-4DC3-A670-B1F5A29CF65A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DB3574A6-3F26-4CF5-AA67-41BA2405F35E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{056EEF26-CDA1-426B-BC98-D855A72539CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B80D4666-0EB7-4E9E-9748-BD2C406CE6C1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{71FD457B-238E-4617-9426-59B3FA85A631}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0630ADFC-74DB-4519-A17B-14D3B8B5F559}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C101E3DC-CBD7-4CBB-A9D9-5BE5B4937155}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1F2C342A-DACF-4C1F-A20D-CA36D3F7688B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ED4DD82B-1541-4F7B-9F17-9B643A73F628}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{42B9D3B3-0BD9-42FB-AEBE-6AE37147FAE1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C133F4A2-545A-4EE8-B919-93AD03AC9C9B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{C42C30EA-0DDD-4B1D-9552-185C6AF29FD4}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [{BD1123DD-A56F-4130-8024-5390CB52C7CE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C0230E69-9B1C-4AAA-A4AF-5D1C0010367B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{462CC9F9-2934-4753-990E-13159A293985}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{B0DC7D01-D368-45D1-94D5-C2D7BC635D34}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{8F0A29BE-383A-48EB-831A-8BB59772529C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{090A5E98-3D09-4F97-BEFD-865B8BC15775}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{246D4E8B-27F4-4368-A880-000BE9DF51BE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5D9B330B-01AF-4C61-9577-BD833E8BC814}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCC6240C-0BCE-4D06-93D7-57948C622CEB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5A2E2136-0C8B-41C3-9AF5-499830DCEB0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CB654A85-4155-4E21-A02E-51B307816806}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{43C123F7-684F-444D-9BD6-96C9A21449D9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0587D897-D151-4654-8B5C-23081038B38D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCBC8A5A-92AE-4AF3-8380-299DC1100B8D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1DB9CEFF-AB65-430E-970A-012AD16D8653}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D24A259F-FBEE-48F3-B54B-9D182BE4C68A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{429AE150-9D40-40E2-B2C7-87636884ED73}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8008BBDF-7086-416A-BA82-1130F199D29F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{79C26398-2A9F-4DCE-86EB-006681808707}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D4BFD0EF-9216-4D09-9698-C0349F66932E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0807B0C6-1D6B-4375-8E80-89A708A31590}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1E7A5CA5-33BA-4819-8697-82A2BAF92B16}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{92334DE2-A471-405E-9D01-37FB83CCC00A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B2C18756-4C4D-4EA6-A381-B7940BBB9A72}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{F8093E29-7BE3-47DA-91E8-93D7DD6BC05F}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{A6ADA755-31AD-4722-AC79-5A2E71153E5E}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [TCP Query User{F8F846F0-C719-4A93-8D34-75383C7C0E53}C:\program files (x86)\logmein hamachi\test.serv\portmap.exe] => (Allow) C:\program files (x86)\logmein hamachi\test.serv\portmap.exe
FirewallRules: [UDP Query User{74ECFBB1-6A5B-4CCA-BABF-3DADB904CECE}C:\program files (x86)\logmein hamachi\test.serv\portmap.exe] => (Allow) C:\program files (x86)\logmein hamachi\test.serv\portmap.exe
FirewallRules: [{B623B4A2-5DA0-4116-885C-107ADFA2063D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9CE94020-BC62-4EE1-A278-F82F249E47AF}] => (Allow) svchost.exe
FirewallRules: [{F1184629-0D40-4143-B075-EB97F5DE028F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DF8E4BC4-938C-4F90-B819-68B4E2165BC0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F44E569C-C91C-4771-8079-3C6E7B015E2A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B4207451-C679-467B-9F0C-4E4D98D588A3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D10B6CD9-FBC6-4A82-8661-1913C4659091}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{54D0350F-5BDE-43EF-888C-079024E5A1CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1156832A-32C4-4D56-B477-88F8DA1D0AD1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CB63160E-F40C-4CF2-905E-729FD2A56810}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95605CAD-A364-45FE-86FF-49C28066169E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{58140915-9868-4930-9763-C368ADC0C19E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8CFC151C-67E2-4E5A-A60E-A038299792A8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EC329234-E3C7-4747-B1DD-DA4642A5963D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1790C24D-A53B-4B06-B342-9E664A871AB1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{58AC17BF-A458-414A-945F-68A3C9DC9746}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{152D71C5-5414-40EB-8BFE-F6CA0AC6EACF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A3A0106A-9742-4415-8BAC-857575F32639}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A8BE122-B191-4D3F-9AE4-176D22CE12B6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{268BE45F-1C06-459E-AE94-942366CABCC5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{37DD1E72-EA5C-4B23-9038-EA8DE5505497}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ABE01C81-7841-4A3C-B326-A110B1F3D59A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{321B7907-1745-4860-AD08-62C6D47413E3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3E1765E8-75DD-48F3-B33E-6649C0504D5B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BF0DEDC-9FF5-4CC1-9066-938DF861263C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{17080F74-F25F-4BEA-8A00-3666433F2D31}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FB7DC312-82D1-420A-A3A1-2809395E0A0F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{04743749-2A35-4CA7-845C-64DED2039931}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9CBBF4FB-4F62-44DA-860A-9801B0370062}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{188B5F6B-54D4-4C74-BD38-FC0527FE06B7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B4AEE73-9C9A-46A6-9F8A-666D75DB720B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B7179430-1B1A-4FB7-8560-0905FC9DFAE8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{115C20D2-B075-422F-A5B2-FE6A8561099E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6AF43D0F-9042-49BD-ADD9-3E47776981A5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9A3B7D26-43E5-4207-AF3D-5B43D9C934B9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBC228DA-14AC-41A6-A109-0882124450D2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{27B541A2-7888-44E8-983F-96CBFA484C9A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AB48942B-236E-4969-9DDF-87228D83CEB1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9E00D8BF-CD94-4D10-B4F4-6E9B544C61EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7EDAD267-0007-4A28-8FEE-23511A8792B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6075D8A6-5DED-4E6F-B210-720EFA0922F6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1CDB7B16-0331-441D-BC63-DA8F4FF15AA4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3DCC5C71-3E4A-49FF-9F03-A17AFF2E14FF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F60A215E-2812-41BB-BF32-886D6AD4267D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{935143DF-14BB-474C-B2E3-DA5E894AAC97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F068E02F-0611-4F38-806C-1FC459AEB2A0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BCEECCCF-18AF-439D-9B40-D2AAFE7D1F06}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5F0B4A81-3119-4B80-9D3C-089D820E9419}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2CB307B5-8655-4857-A964-290A3364D06A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6B8A7A24-F1D0-4049-B4A7-9372CD6023F3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B1B7B374-E107-4AE2-9893-C71782B6C28E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B278212-895E-4090-BEA9-A4F3596F1AA0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0F08A151-CFB3-4C3B-B69C-6F0D573238D7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4744A08E-4535-4CB5-BFD3-AA838409AAFB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{467DCDDD-BFEC-4207-9E27-B5ACA7F337B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78D4F369-A06D-4295-A6A4-0578D05F5DA0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EC50BE97-4113-4CAD-9A41-3355799536B1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4DE09A85-77A3-4A61-A4DF-41AB352896B0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FEAF20E-EFC8-49CF-842E-F43031A154D5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78EA05E5-FA20-4537-A37C-A38BB956B368}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{84924695-668C-42B4-9B73-CFF67E012C35}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1071C524-EFB5-4817-BB90-79E7E6728272}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{48958417-50E7-4437-B350-267BE9F2EE2B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00972DF2-FFB9-4C96-BC46-26EAA1499AC3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F726F263-A4C6-4E8A-86B2-84DD4459F7B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D3262721-1083-4D00-9894-63D130223942}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{65E19B58-E4DB-428C-A29A-C1C40DBD32AA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E6EAFDAF-D3EA-4CD8-8C84-C735516F5C4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BA0099EB-B4BE-487C-A93A-3729779C6A35}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1B21E9B6-1E79-4DBB-8690-7CED56E120F9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8222233A-961D-45E6-BC31-305F30017B7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95AE8580-BFC2-4503-A798-F371AA3B7463}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{099800FF-447A-4EA7-92B0-162B145B01CC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5C5F8958-2C6C-4687-B115-4B157615F128}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B9E2DE3-7EEE-48C6-B5BA-812D608B317B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C1C64EE9-A936-4FCE-B3DC-1F4F3060A626}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1714966C-38A2-41B7-BD1A-0CEEB1B2AB97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D8480C14-F8E4-489E-990B-946A1F948873}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{21454F68-77B6-4F83-B340-27C3F0513477}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E0B45A8D-0DC7-4197-ACFA-F01424E4CF4E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9B7CAFF2-06D4-498F-955A-BB250AD8C72A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7CA7F0EF-7104-4726-A11F-6F504FC40E92}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CDE68075-9FA6-4BD5-8112-6749E9B06662}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4236E8B8-66EE-4390-8B64-0E0FB2B3F66B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3CC3D678-2477-45E2-8FD0-997AA486B717}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4383D057-D820-4EA0-82EE-4648FA65BCD3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A2315CA4-E0BA-423B-A30D-A2AF8E128FE9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5B2108D0-9DB7-4D23-8133-ACEA6B088740}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{33B57803-49D4-4489-9142-F3CECBE9CAC3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EDE5B27F-0DD7-4106-AFEE-FC9D989DE83F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{40B1181F-8941-4B07-B4F1-A3D4021AA918}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FA2E0248-48F1-4414-89F9-85706CB141E6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25B96E92-71B8-4BC4-BBCF-C763CAD058AF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{15828D68-D1FC-4D76-823A-2C34D251700D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6554B95B-7D4B-4908-A738-549FDE434A1A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B613961D-4D0F-40BF-8306-A4A30363D7D5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8706ED8A-BA28-4990-B3E5-DD61E5CFE9DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0B435146-455C-4525-8B01-ADD3FB959E7A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4E4F3950-0A8B-4152-A70F-8E6AF942140F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9BAD320D-7C8C-448A-AE56-128E1D5876DC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{38A5AE31-2EF3-448D-BC00-170D13423EF3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2A6A942D-5172-4545-8FDE-81AF91C845F1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{096E6E31-C13B-4134-ADC0-0BCC3DDD0B72}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E2258C61-7526-42ED-83B4-177ADD179573}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{01D3E2A4-CE6F-47FD-8E9C-5755968CFD44}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BFADBDD3-5899-4238-B303-E0F831495339}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{47ED954F-786D-4CF3-A13F-DD834C2A86CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6336A3AB-6622-4F63-9A8E-9F9A45836C3B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{298715E7-2CDA-4C78-A079-8F6B49D1CA9B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BE1C2867-70D7-4727-B908-0B6DFD686349}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{FADE2034-9211-4675-9E78-F8CC7C33E929}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{B6288528-998B-4E21-8E98-44734A68EF1C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{E8735903-F4D7-4458-8CF1-FD068256A36A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{202DA89C-F196-438E-BC04-FD4660CD821F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78E7D527-1A96-499B-9471-A47263846D4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{15149A18-B5CB-4E45-AF32-42D950042D0E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F31657B8-8ED9-4DBA-8557-92987F952ABE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B9F2C2A8-A434-46E6-9DE1-E758491A86E5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3DBA3D10-7FE5-4E9C-B825-5C912628D74C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{93C32D34-6181-4011-8844-37050854A08F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F2C7A950-7997-4C9B-946C-4DE3ACBF7392}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A7028626-A102-4CBB-A6C6-388E5C26A4D3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B7BA2029-34EC-4037-A011-4CD9DE06AEF0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{735669DC-AAB2-4612-A31E-8A98EC02A16F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0F29E73E-2EE5-4F6E-A6D9-DE33B6A5BF55}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BB12FCBB-9445-4E7C-9647-C8E83FC32A68}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AB81B775-BDF3-478B-9F1C-6A9A4A450CEA}] => (Allow) C:\Program Files (x86)\ICQ7.6\ICQ.exe
FirewallRules: [{DA36FD3E-BEE9-428C-B39B-855EE484EAC4}] => (Allow) C:\Program Files (x86)\ICQ7.6\ICQ.exe
FirewallRules: [{B5803757-C912-44DD-9427-195343E169DB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B0245F9B-1AB9-4F22-89C1-D34199A3EE16}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A8405D5D-80F0-4BF3-8150-DB9654E8A1B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A1AF6AFD-0FE6-4E76-8E42-CCE59392356B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{BCF1525B-0C68-4D0E-A3F4-C4A3E90A7CAD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0968E1CB-6117-44B9-8237-15714C2E069D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8AD30BD1-34D4-43CD-B352-37887A9B1D5F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C9C6CD58-0118-43AC-82D7-01C6E5CB8682}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C659C18A-1DD8-481D-A10D-B98932113104}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{869CC805-05FB-4331-9E9F-9AC20D9D9D0A}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{C50F7E15-87C4-4C4A-B573-65FDCD84CB55}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{D748A75D-8065-417D-89B6-C373976FE82F}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{7833A975-1999-40BC-B77D-0FE9FE14DF0B}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{3D4C29E8-197F-4A51-8D73-BDDCB994D510}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe
FirewallRules: [{6A2E970F-11D1-45A4-88F1-860FB2D7D029}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe
FirewallRules: [TCP Query User{9C3BD875-8E4C-4F13-9C5B-1EBCFCF7A4CA}C:\users\teckforce\desktop\vumenia2\vumenia2.exe] => (Allow) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [UDP Query User{2FD210D2-E03D-400E-82F9-59315E7AC117}C:\users\teckforce\desktop\vumenia2\vumenia2.exe] => (Allow) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{4762E01E-C90D-49E8-861C-3327A21F362B}] => (Block) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{D1AE6896-CD2F-4F69-92F4-C42F68618930}] => (Block) C:\users\teckforce\desktop\vumenia2\vumenia2.exe
FirewallRules: [{52C02D1E-89DE-4BF4-89B1-F8A57E9E0295}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6E349CAA-3BFA-4BC3-BF56-599C05CEA63C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7092E162-2356-488E-8E53-0C5327A35031}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{88C717DF-2AA0-4D77-9492-52835E7DC54A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7471852F-8455-45D5-853B-5C41B716765D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F6133C9C-F960-431A-BDDF-A6FAD30692A2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{43DA5E72-74F5-412D-BB6E-C47F8A145813}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5BD5DCBB-91F9-4468-BF5D-8E50837E8CFB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{26442636-D13F-4CD5-9668-328035FC9EF4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6B1365A9-1EC4-4032-8242-2A3B010296EB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8CB84FFD-9D4E-40F1-B354-75697D3DB879}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E1DE482D-916B-4D9F-9CA8-6544D83A9A42}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A37EFA7F-53C2-484A-8C41-7DB411738DFF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8A8C3D45-C110-44E0-A7C0-64F1A6C3CB47}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2CC37623-5D07-407A-B285-FEA19A9A4E43}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8F8DB39D-CFE7-4E49-B29B-9586F794BB8F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F2E8D19D-ADB3-4344-AAA9-071B5500A862}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50D92BA8-F9DA-43FD-8455-D68F2BD1C3F2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{32D13594-51C0-437E-8476-E73049BE8E8A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1700D243-BDFF-41F7-B129-3F950BCEF054}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{BC2E52F4-9CEF-4DB6-BFB6-86C5007D0836}C:\users\teckforce\desktop\metin2\metin2client.bin] => (Allow) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [UDP Query User{CBBE4A73-B927-4478-957F-D6D9A80A7C0A}C:\users\teckforce\desktop\metin2\metin2client.bin] => (Allow) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{6442A2A3-975E-466E-A642-2B4B23276CED}] => (Block) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{90FE4F88-D135-4ABE-8D6E-2BDF950BC916}] => (Block) C:\users\teckforce\desktop\metin2\metin2client.bin
FirewallRules: [{36834823-8BFD-47CC-9D0C-9934A2DAA141}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{513B04AF-7755-412B-A257-69DB5FC40823}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{27AE1CC5-340C-443C-9013-79BC03FDC649}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EEF2FC46-5A8C-4071-8067-867C1EE394BE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2BC3CFF9-A4C3-4DB8-AA12-E4F9CB07F5BE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5827A075-B847-40C2-A406-2A02DC3537D6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{72F22BDE-7E7F-4D91-B80F-55A8883FA5D2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{80580968-5407-43E9-9A86-564C3320E450}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{383E4BF1-1074-4C3D-A761-E90DA9CB7662}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0039D3B6-0272-4C8F-9114-5051CD044B14}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37ED2E93-D608-4A06-9114-8387371B655F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1655209D-088E-4A7B-8B36-3BE116B476E1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{04EA8240-A73F-4D61-A446-03105FBAA96D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A0AF5EC6-DE9B-4BA6-9E6A-7E5A6CE3C9D6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F3BA402A-DC21-47DB-8EF0-0615782797D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{976BB8C6-AFB8-4B02-9D9E-ECE2BB42FA06}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6187C7D1-EC04-4F3F-9073-6A177CA7E056}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{17DF1A3C-9C0E-45AB-A2A1-BBEF0789A17E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{6D38F81A-2FED-41D4-83F9-BD6AA7B99E36}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{DB6CDF30-E5A2-4EB1-9429-378A49B3C75E}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [{FE654041-35ED-4E6F-98DB-FD6A21C22E8C}] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{DFEB9A5D-54B0-42BE-A8E6-1BEBD1D667EB}] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{5306828E-BA37-4221-B2CE-FEB17CC0A7D9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{07C59F8D-6786-4083-B63C-70C58388FE07}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6CF6D41B-CC76-403B-90DD-31BCB934523A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E378E7CF-C8A6-4173-8523-E2EBD0FA80F2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C259888B-C895-421E-83E7-0AB15CDF1438}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{332D052C-572E-415A-8A81-B7465F6DE4FC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0F73D657-7D01-47BA-BA3A-8A1A05843B34}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1E832C0A-F47D-4D79-8FDC-D31DF46E8CFA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{066335DA-4AEC-4544-AC94-E5B1CCF9CD0C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{43AF6553-C738-4266-9B51-2E1E20E2DF78}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5E972F85-3C5D-44EC-8F45-97F42934EF75}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5E9D91FC-D5C6-443B-8AE2-5C884383303E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BC9D635C-0153-4743-8EFA-F4B81F811FF8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D57F5729-4432-4820-8847-D785CA4BC52C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CBF93D5B-B781-496A-9665-F7408C8A1612}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D7CB9B66-C5E9-4626-B36E-6CC1C0ED4E75}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{14A9D45E-0082-4B98-B5FB-D3EFCEC42E1C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7370CA1A-CF08-41A3-9B15-B24591D433A0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A9B54383-4AD9-47E8-BAAB-BB1B494AAB87}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C91C1912-DA92-4E07-BA89-26ECBC4A2CC7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1BC51B06-6546-440B-B5B0-70A02FEA97CD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AD4781B9-6FAC-4916-95C8-E77A11C99CFC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C2C7E4C9-51F2-44E4-86D3-4ECAB3D0EFA1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61D70A8E-FE41-42F0-B137-AD47060788B9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7A9D6F3B-B27F-40E3-B6FA-175BFA124A91}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AD118D60-A260-4574-BE71-ED5C1DD59222}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2498BEBA-687D-472F-9A4A-F5A585B186D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B8F82006-ADE5-46A2-9886-18BD5FB8CD8E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E912A990-6F56-429D-9EDE-5F98052335B6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6F3D0176-78EF-4295-9174-0D62FBC00180}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61185482-E5A7-41FF-9D44-049BEFCE5925}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CD9DA73F-F605-43C9-857A-D15BD6A77863}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{59B4A149-EC2A-44D5-A7E2-20B7668B0B0B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{315173DF-F9AE-4E53-9150-6E0F8A062407}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50EEA41D-C772-4AF3-8496-FB95FAA7F970}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{488CB525-6ECE-4000-9B6A-347B0F31CC5D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{50F7EA88-5601-446B-9EB6-4300C72CC77C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{17FA35D3-B345-4870-ADBA-DFCC92F58F84}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E32B6F21-B8A5-481A-A482-2CDF12399981}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FB92F921-4069-4448-8470-87606E6AE4D1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1CB2299A-9E61-4523-AC9C-BF1D5610CCDB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FA6FE3DB-68E9-40AA-B9E3-E24121BD633E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{21B0540C-BBA6-47C5-AC66-994CDFA00052}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D19E8F4F-7827-41D3-A4AD-8870495BF188}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5D65F749-0CF4-45BE-B962-4AB6F353033F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E8B3C8B-6600-4B79-9146-76AB87A4BB81}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{380106DA-60E8-4C7F-9496-ACED79883725}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E4637B76-F408-4FBB-84D3-C3BE9CA7AEBC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{475DEB7D-BC60-4EB4-AEA5-03C9F7683E3D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C8EA2C4E-9042-49EE-BC6B-1C0514E1C630}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{73956F95-D999-49CC-A1D1-42EE079B13BD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CB3F1794-3734-42B4-82F1-9720B5DAE835}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5F416C69-4FD2-483E-A407-E41A81EDF56C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9AF5E1F4-2550-4DE7-936E-9154EF9E0DFC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{713A3BC8-10C4-4342-A704-1B8590258211}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2AFBE6FC-8DE3-4FF4-84A4-9ED8F42E37D7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{98D4676D-61E7-4E41-848A-717A2AA958E9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{98FF3AC5-3942-4B85-A28C-B55346A4D5DD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F96F263D-177A-46F6-8B7B-57834906035A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E58E0286-7B2F-4E42-95B1-26BCBED36EBB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{41F711C8-54D3-4AA8-8E2D-AE88D34AE97C}C:\users\teckforce\desktop\shiro2 client\shiro2.exe] => (Allow) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [UDP Query User{09EC14F9-DF3D-4953-AD79-8232F698D9A3}C:\users\teckforce\desktop\shiro2 client\shiro2.exe] => (Allow) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{5C630DD4-C266-42FC-B1A9-3E69D2D7399D}] => (Block) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{4A3ACA5D-52AF-4FDB-A829-0007854E7F00}] => (Block) C:\users\teckforce\desktop\shiro2 client\shiro2.exe
FirewallRules: [{50F957C0-E905-440A-8C4B-6A39CAD39B87}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{888DEF3F-8592-40D2-BB5B-4DBC32E47D27}C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe] => (Allow) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [UDP Query User{7B7F646C-3D63-412A-848A-8B8DF3B512FD}C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe] => (Allow) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{91FD620C-7313-4BE8-88CD-1A713A1A3760}] => (Block) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{ED2BB6DA-7505-4A8E-A11D-5C83AD315A24}] => (Block) C:\users\teckforce\desktop\seyonin-client 2013\metin2client.exe
FirewallRules: [{44200003-1407-4B65-BB25-19DBB2654F1A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7BE9BB8D-FA9D-4342-A7DD-71A9F566D0D5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AF2D41C6-09FB-4A1B-9B88-927FA1470CF5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C21C530A-A91E-484F-AEB8-26A5E6590432}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{59AB9268-5571-4463-8250-3E54613DF6B8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4BAB3DE7-2911-44FB-B33C-C9FA4FF1F3C9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{A3BB2BA5-B3D3-413C-9B5B-2E43AE3904D3}C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe] => (Allow) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [UDP Query User{C63B2418-C158-4FC9-8E47-13C10C0CF5E8}C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe] => (Allow) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{4DB87106-F1A0-48BE-898E-42A6ED057DF9}] => (Block) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{CFBADD12-A013-4108-9EDA-B1E5BF1EA58F}] => (Block) C:\users\teckforce\desktop\legonia - offizieller client\metin2client.exe
FirewallRules: [{F7F31AE7-147E-4647-935C-E613E607A5DB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4A0826EA-D7D0-43E5-9FCA-7504D0B1B5F4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{07C65C28-60D6-4C1F-9493-7A597CEB98C1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{574BE9E5-FAE9-444D-B6F7-A85212480CFE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{330B1653-7FAB-47FC-AC31-AC2E1E04F142}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{700FB579-6639-4389-A5BC-443E0F1A9B4D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{64D9118D-FEF0-409D-8E0C-9C3F8FC85312}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9E32F005-61F6-49C1-A2AF-DE6141244236}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{89AFBB7C-FEA5-4EC9-BB1E-401B2C9A21D8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{392A2924-87ED-468E-9252-4AC794374C60}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{426A6B38-1A4B-41CE-BB35-A6CD9F74BF1A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{E2C07EE3-19A0-4226-A3A5-2945E941D831}C:\program files (x86)\red alert 2\gamemd.exe] => (Allow) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [UDP Query User{FE47BC43-48B5-41A0-B8DF-B78D863B334C}C:\program files (x86)\red alert 2\gamemd.exe] => (Allow) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [{18D871B0-1809-49ED-805C-729AD1640344}] => (Block) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [{4E6E0E36-D0C4-49AD-B06F-9B80E34448BD}] => (Block) C:\program files (x86)\red alert 2\gamemd.exe
FirewallRules: [TCP Query User{DB025DD1-30B8-4F7A-AF19-886EE097DAE4}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe] => (Allow) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [UDP Query User{D782C4F6-8B87-45DE-A137-14771879BD4E}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe] => (Allow) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [{382453E8-2961-4E46-AAA7-7BC695114024}] => (Block) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [{A5D417D0-62C1-44A5-804C-775623C3AA60}] => (Block) C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe
FirewallRules: [TCP Query User{0EBD8E02-2888-477C-B0A0-1EE8D561E595}C:\users\teckforce\desktop\eclipse\eclipse.exe] => (Allow) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{B2505C5F-6665-4AE1-B061-7FA5A7A2C11C}C:\users\teckforce\desktop\eclipse\eclipse.exe] => (Allow) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{A9DF3D7B-CA76-44CD-A59E-983D84D093B1}] => (Block) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{2676206F-1161-4281-AAE2-E006CAFA6421}] => (Block) C:\users\teckforce\desktop\eclipse\eclipse.exe
FirewallRules: [{52065A4E-0E8B-449D-990B-04219129F3FE}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{B10F01F2-7346-423B-BB5E-11D328047CF6}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [TCP Query User{A3EAD308-1A9F-40DC-88E8-58E8C935B8EF}C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe] => (Allow) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [UDP Query User{BCACF70A-9197-4AA7-A6ED-1E197DCC08E3}C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe] => (Allow) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [{0503DA23-063B-4DAE-AEAD-3567C551E6AD}] => (Block) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [{5744734D-7D0F-4846-911E-ED6444537609}] => (Block) C:\users\teckforce\desktop\apollo2_patcher\apollo2 - back to the golden times.exe
FirewallRules: [TCP Query User{B17E6F1C-E477-4491-8D34-07D715DA7280}C:\users\teckforce\desktop\zerania2\client starter.exe] => (Allow) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [UDP Query User{B826808B-94D4-4D06-8BBE-099DC1E55AFF}C:\users\teckforce\desktop\zerania2\client starter.exe] => (Allow) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [{E6CE6BCD-4592-4F25-AF47-8B12D03325B8}] => (Block) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [{BF837295-649F-47DB-8742-2CCBA234BC99}] => (Block) C:\users\teckforce\desktop\zerania2\client starter.exe
FirewallRules: [TCP Query User{9F9E94BB-287A-4C9A-88A4-7C69D8BCE984}C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe] => (Allow) C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe
FirewallRules: [UDP Query User{D3DBE63C-A0E8-4445-AC1D-13AF0B9AFB2F}C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe] => (Allow) C:\users\teckforce\desktop\nyphos2 client\nyphos2.exe
FirewallRules: [TCP Query User{254C5990-F181-48F2-A805-E72167BC18CF}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Allow) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [UDP Query User{A4AA56EB-9F12-44D7-9E7F-56FBA594BFBB}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Allow) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [TCP Query User{6BABDA50-B3B7-4190-B277-5C63566CF32C}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Block) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [UDP Query User{5F090277-2A2D-4A0E-AC0D-962EBA7BAFB5}C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe] => (Block) C:\users\teckforce\desktop\elitarius2\elitarius2(haupt).exe
FirewallRules: [TCP Query User{F0961457-B789-49AA-A826-130BB0194232}C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe] => (Allow) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [UDP Query User{4C0910BB-D59C-48C1-9F07-31B4DCA741E5}C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe] => (Allow) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [{9795A152-7B9E-45C7-8013-4FFEFD59F25C}] => (Block) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [{7BFF77EF-D6C0-4784-8946-FFFC4849ACA5}] => (Block) C:\users\teckforce\desktop\xelonia2 client\xelonia2 client.exe
FirewallRules: [TCP Query User{7149089F-AD1B-430A-A95A-C91DE56C5A34}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [UDP Query User{0E045F19-7317-42F2-B210-470019E40A91}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{68A33C37-A5C3-4A41-AECB-B6CA5F1489A1}] => (Block) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{E1E13E63-E61C-46B4-9D4B-6FC29EFE3CCD}] => (Block) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [TCP Query User{B5FBD8CB-52C7-4A79-A2BA-3F72B24E2050}C:\program files (x86)\microsoft games\rise of nations\patriots.exe] => (Allow) C:\program files (x86)\microsoft games\rise of nations\patriots.exe
FirewallRules: [UDP Query User{CDD684EF-65B1-4B3E-967B-38D857E84E3E}C:\program files (x86)\microsoft games\rise of nations\patriots.exe] => (Allow) C:\program files (x86)\microsoft games\rise of nations\patriots.exe
FirewallRules: [TCP Query User{8E2030E2-86B5-4BD2-AD52-DE239B44DBAF}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{499C0427-DF42-426C-9CDD-415B9355547E}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{91ECFBDA-B271-46F8-83BB-F0030B810FF4}C:\users\teckforce\desktop\bin\metin2client.bin] => (Allow) C:\users\teckforce\desktop\bin\metin2client.bin
FirewallRules: [UDP Query User{96719C91-097F-4CFA-BBC6-DB6C206515C9}C:\users\teckforce\desktop\bin\metin2client.bin] => (Allow) C:\users\teckforce\desktop\bin\metin2client.bin
FirewallRules: [{EC9CDCB2-0C63-49E0-A548-C57E1B811D3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AB88B155-C762-4DFF-A4A7-F623496767AA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4F0EAD65-0BD4-4693-A19E-2D1D9F665257}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{98CD7A60-C7C8-4CF1-9EFA-33684ABE96DB}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{131BA9EB-9E05-4B6D-9105-F8A68115CF5E}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{CD1D73BC-F0C5-4CCA-A89A-6CD76F45F279}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe

==================== Faulty Device Manager Devices =============

Name: Atheros AR9285 Wireless Network Adapter
Description: Atheros AR9285 Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MALTENOTEBOOK)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MALTENOTEBOOK)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: MALTENOTEBOOK)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil.

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht.

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\UpdatusUser.Malte-Notebook\ntuser.dat

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (05/20/2015 11:13:48 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:48 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:48 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:48 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.

Error: (05/20/2015 11:13:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk0\DR0 gefunden.


Microsoft Office Sessions:
=========================
Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MALTENOTEBOOK)
Description:

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MALTENOTEBOOK)
Description:

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: MALTENOTEBOOK)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (05/21/2015 00:02:23 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
C:\Users\UpdatusUser.Malte-Notebook\ntuser.dat

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (05/20/2015 10:44:14 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (05/20/2015 10:20:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


CodeIntegrity Errors:
===================================
  Date: 2015-05-20 22:12:29.352
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-20 22:12:29.352
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-20 22:12:29.352
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-20 22:12:29.336
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-07 05:24:19.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:24:19.617
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:24:19.607
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.934
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.924
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-07 05:19:07.914
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz
Percentage of memory in use: 37%
Total physical RAM: 4060.61 MB
Available physical RAM: 2524.05 MB
Total Pagefile: 8119.38 MB
Available Pagefile: 6341.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:144.21 GB) (Free:63.63 GB) NTFS
Drive d: () (Fixed) (Total:306.45 GB) (Free:306.32 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 07A54FFB)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=306.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
So das müssten alle gewesen sein :)

deeprybka 21.05.2015 08:11
Hi,

Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Divinely 21.05.2015 19:24
Normal, dass das Programm schon 3h am prüfen ist & erst bei 45 % ist..?

Ok. Nun fertig:
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=9a1d73f4bdee6e4e89d8c90a37a41c23
# engine=23957
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-05-21 06:37:01
# local_time=2015-05-21 08:37:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7600 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 74077 184639092 0 0
# scanned=272635
# found=151
# cleaned=0
# scan_time=9739
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=1A04DEC1F43916D0A0CEC8B06739DF8687BE9166 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.EB Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\glabdaacdcpgfhaijchagfpccpompelb\Mp1n5J5.js.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run145D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1630.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1812.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run196B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1AE0.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1BD9.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1BEA.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1C50.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1DCC.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1ED6.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run1F06.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run2133.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run23F4.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run2AD9.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run2BF2.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run2EAF.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run318C.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run335F.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run36A6.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run3A04.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run3E7A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run3F81.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4174.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run418A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4432.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run470F.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run48E2.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4A1.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4B90.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4C3D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4EFE.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4F0A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run4FCD.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5543.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5726.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5A78.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5C25.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5CB1.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run5E07.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run649C.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run64AC.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run6660.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run668.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run671B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run687.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run6A87.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run6C99.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run6D72.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run6DA0.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7070.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7234.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run749E.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7530.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run76C4.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run77CD.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7A01.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7A3F.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7A7E.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7B47.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run7E24.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run801A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run8313.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run83AA.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run845D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run875A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run87D6.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run8AD2.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run8EC7.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run9388.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run959C.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run96A4.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run984B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run990E.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run9ABA.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\run9D59.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runA055.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runA295.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runA397.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runA7C4.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runA997.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAA71.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAA81.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAB3E.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runACF1.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAEB7.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAF1D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runAF8A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runB1B1.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runB26D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runB30B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runB923.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runBD.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runBFF6.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC2F3.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC442.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC51D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC5C0.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC6D9.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC88D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runC9D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runCC55.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runCF19.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runCFC.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runD08.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runD0F4.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runD403.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runD5A8.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDA1B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDA2A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDB43.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDCA9.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDDFF.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runDE2F.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE36D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE428.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE486.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE704.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE7CE.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runE947.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runEB1B.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runECAF.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runEDB9.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runEEE0.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runEF01.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF0D5.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF1DD.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF3B2.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF410.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF6AE.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF6AF.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runF70D.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runFE9A.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runFF85.tmp.vir"
sh=2A66DF9B2896C82E7F0ED2692674B76C3FD817E1 ft=1 fh=19a25d7f65819511 vn="Win32/GenUpdater evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Premium\MagniPic\runFFF3.tmp.vir"
sh=C56C3858F68CC42C37FE80A6F0763BAE298E4A66 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooaoddbahjfekekgbmmabfdpfeajnfpf\1\51633d22ef7811.62456279.js.vir"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnic.dll"
sh=FFA8B6510D624A55F3EB7FFD6D5221A44944681C ft=1 fh=3386eb0d6ed0e5e1 vn="Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnstub.exe"
sh=1A3F14C0A66F9AF050D1F34FBACBAADC31751A07 ft=1 fh=2704a03a0f47b728 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apntoolbarinstaller.exe"
sh=5F46FBBE7D473D3CE698607BC8405CF0CBF80E65 ft=1 fh=ed076bd4363291fe vn="Variante von Win32/InstalleRex.U evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\MagniPic\_Setupx.dll"
sh=F64E233F85E294ED3D622EDD73429244DB0B0255 ft=1 fh=12c6d72efd160e1f vn="Win32/InstalleRex.T evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{09F3AE8E-87F4-4D2A-AFC1-CFD6D2108C78}\Custom.dll"
sh=41A2661217E301B215046E9742B27032864646FB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.EB Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\TeckForce\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgeleddekloegnjmjdpiiahleecfkonh\5.5\jURhd.js.vir"
sh=5F46FBBE7D473D3CE698607BC8405CF0CBF80E65 ft=1 fh=ed076bd4363291fe vn="Variante von Win32/InstalleRex.U evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\MagniPic\_Setupx.dll"
sh=F64E233F85E294ED3D622EDD73429244DB0B0255 ft=1 fh=12c6d72efd160e1f vn="Win32/InstalleRex.T evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{09F3AE8E-87F4-4D2A-AFC1-CFD6D2108C78}\Custom.dll"
sh=47B19AB97028D8925579BED54EFEE88C8107D6B6 ft=1 fh=34f71966959b3eb8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\TeckForce\AppData\Local\Temp\DMR\dmr_72.exe"
sh=7A8AD995750D4A41D13178179D9281EB9630B3DA ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\TeckForce\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\320d00b0-43f2bfbc"
sh=092E0166A9E887E52609E2CEEFA66E1744039F9A ft=1 fh=2b689c17d49a9ad0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\TeckForce\Desktop\Poweroff - CHIP-Installer.exe"
sh=CA4FE3B641C8B955E74D5CB8CD632E5582DEC0C3 ft=1 fh=5be581be1b3cdbff vn="Variante von Win32/Packed.Themida.ACU Trojaner" ac=I fn="C:\Users\TeckForce\Desktop\bot\M2Bob - Patcher.exe"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\ApnIC[1].0"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\ApnIC[1].0"

deeprybka 21.05.2015 20:56
http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Divinely 21.05.2015 21:59
Zitat:
Zitat von deeprybka (Beitrag 1468659)
http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
Muss ich erst beobachten.

Bin Laie, hast du, als Experte, etwas gefunden in den Logs, was auf etwas verdächtiges hinweist?

Haben die Programme irgendwelche Viren/Malware etc gefunden? da bei dem ESET 159 Bedrohungen angezeigt wurden :pfui:

deeprybka 21.05.2015 22:25
Das meiste davon ist schon in Quarantäne. Ich schlage vor Du beobachtest jetzt mal bis Samstag und dann meldest Dich wieder. Dann räumen wir auf.

Es kann auch sein, dass Du Probleme hast, weil Dir ja paar Jahre an Updates fehlen. :)

Divinely 21.05.2015 23:13
Zitat:
Zitat von deeprybka (Beitrag 1468683)
Das meiste davon ist schon in Quarantäne. Ich schlage vor Du beobachtest jetzt mal bis Samstag und dann meldest Dich wieder. Dann räumen wir auf.

Es kann auch sein, dass Du Probleme hast, weil Dir ja paar Jahre an Updates fehlen. :)
Gut, alles klar :)

Ja, keine Ahnung warum. Ist auf jeden Fall aktiviertes original Windows7:glaskugel:


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:56 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19