Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Seit Mitternacht SPAM Versand (https://www.trojaner-board.de/175035-seit-mitternacht-spam-versand.html)

Mav 12.01.2016 19:20
Seit Mitternacht SPAM Versand
 
Hallo Leute,

mir ist aufgefallen das seit relativ genau 0 Uhr heute Nacht SPAM Mails versendet werden auf eine meine Mail Adressen.

Es kommen immer wieder Meldungen wie diese:

Mail delivery failed: returning message to sender

Davon habe ich ca 200 mittlerweile in meinem Posteingang.
Programm ist Outlook 2013.
Ich verarbeite dort 5 Mail Adressen, jedoch scheint nur eine betroffen.

Malwarebytes war negativ.

Sys ist Win7

Ich hoffe ihr könnt mir hier helfen

cosinus 12.01.2016 19:29
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Mav 12.01.2016 20:51
Hallo Cosinus,

das Log vom letzten Scan mit Malewarebytes

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 12.01.2016
Suchlaufzeit: 18:09
Protokolldatei: Log1.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.01.12.05
Rootkit-Datenbank: v2016.01.09.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Alienware

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 397307
Abgelaufene Zeit: 38 Min., 52 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 1
PUP.Optional.VulnerableDellSystemDetect, HKU\S-1-5-21-1339448428-3584763171-402926134-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DellSystemDetect, C:\Users\Alienware\AppData\Local\Apps\2.0\X0O827TK.VGZ\V7V9JN0J.70Z\dell..tion_0f612f649c4a10af_0005.0006_f9e15713f5aac8ac\DellSystemDetect.exe, In Quarantäne, [5e6744f4158493a3ea6fe1313bc918e8]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
FRST poste ich sobald es da ist

Anderer Scanner (Security Essentials) ist hier auch ohne Einträge

FRST LOG

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:10-01-2015 01
durchgeführt von Alienware (Administrator) auf ALIEN (12-01-2016 20:39:12)
Gestartet von C:\Users\Alienware\Downloads
Geladene Profile: Alienware (Verfügbare Profile: Alienware)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Guillemot Corporation ®) C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe
() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(DJHERCULESMIX®) C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe
(Dell) C:\Users\Alienware\AppData\Local\Apps\2.0\X0O827TK.VGZ\V7V9JN0J.70Z\dell..tion_0f612f649c4a10af_0005.0006_f9e15713f5aac8ac\DellSystemDetect.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(DJHERCULESMIX®) C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\HDJSeriesCPL.exe
(DJHERCULESMIX®) C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\cpl2\HDJSeries2CPL.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareTactXMacroController.exe
() C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
(Creative Technology Ltd) C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Avira Operations GmbH & Co. KG) C:\Users\Alienware\AppData\Local\Temp\cleaner\avwebloader.exe
(Avira Operations GmbH & Co. KG) C:\Users\Alienware\AppData\Local\Temp\cleaner\eucleaner\setup\cleaner.exe
(Avira Operations GmbH & Co. KG) C:\Users\Alienware\AppData\Local\Temp\cleaner\eucleaner\setup\avscan.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2890000 2012-03-16] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [Hercules DJ Series TrayAgent] => C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe [1817248 2015-09-02] (DJHERCULESMIX®)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE
HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-09] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [1636208 2011-12-02] ()
HKLM-x32\...\Run: [Integrated Webcam Live! Central] => C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [577024 2012-03-06] (Creative Technology Ltd)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-10-05] (Malwarebytes)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\MountPoints2: {42245c3b-7e08-11e3-853a-f01faf18f760} - F:\Startme.exe
Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-15] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-15] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-15] (Microsoft Corporation)
Startup: C:\Users\Alienware\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-08-05]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
Startup: C:\Users\Alienware\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-11-24]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2013-06-26]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952 2012-02-15] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\BfLLR.dll [189952 2012-02-15] (Bigfoot Networks, Inc.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{50E9FA02-9E06-48DB-AB2E-4698D5194D2F}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{99BBC372-4245-47F2-9D97-A4F5D96462FA}: [NameServer] 192.168.100.1

Internet Explorer:
==================
HKU\S-1-5-21-1339448428-3584763171-402926134-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alienwarearena.com/welcome-de
HKU\S-1-5-21-1339448428-3584763171-402926134-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.alienwarearena.com/welcome-de
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2013-07-31] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-12-15] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-15] (Microsoft Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-22] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2013-07-31] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-12-15] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-22] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
DPF: HKLM-x32 {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} hxxps://support.dell.com/systemprofiler/SysProExe.CAB
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-02-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-02-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-11] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-05-11] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1339448428-3584763171-402926134-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-05-11] (Pando Networks)
FF Plugin HKU\S-1-5-21-1339448428-3584763171-402926134-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-11-21] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2013-06-26] (Nullsoft, Inc.)
FF Extension: NoScript - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-01-08]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\Extensions\artur.dubovoy@gmail.com [2015-12-09]
FF Extension: mpeg4 player - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\Extensions\{113e976e-df36-42a9-ab2b-b45773758636}.xpi [2015-12-18] [ist nicht signiert]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2015-10-12]
FF Extension: Adblock Plus - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]
FF Extension: search addon - C:\Users\Alienware\AppData\Roaming\Mozilla\Firefox\Profiles\dwl0tapa.default-1410292639613\Extensions\{e1880178-6226-4e5d-bcb4-f394c5d47b35}.xpi [2015-08-25] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-09-18] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-10-12] [ist nicht signiert]
FF HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome:
=======
CHR Profile: C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-08]
CHR Extension: (Google Docs) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-08]
CHR Extension: (Google Drive) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-08]
CHR Extension: (YouTube) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-08]
CHR Extension: (Google-Suche) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-08]
CHR Extension: (Google Tabellen) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-27]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-08]
CHR Extension: (Google Mail) - C:\Users\Alienware\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [936832 2015-03-13] ()
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2802360 2015-11-24] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-06-26] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-06-26] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-20] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-27] (Creative Technology Ltd) [Datei ist nicht signiert]
S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
R2 HerculesDJControlMP3; C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE [98816 2015-08-24] (Guillemot Corporation ®) [Datei ist nicht signiert]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-10-21] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-15] (Electronic Arts)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6849808 2015-11-10] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-10-12] ()
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [339104 2015-08-24] (© Guillemot R&D, 2015. All rights reserved.)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-27] (Creative Technology Ltd)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [38472 2011-02-02] (Dell Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [329888 2015-08-24] (© Guillemot R&D, 2015. All rights reserved.)
S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [283296 2015-08-24] (© Guillemot R&D, 2015. All rights reserved.)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [Datei ist nicht signiert]
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-20] (Intel Corporation)
S3 iscFlash; C:\Users\Alienware\AppData\Local\Temp\7zS24BF.tmp\iscflashx64.sys [58464 2012-07-12] (Insyde Software)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-10-12] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-01-12] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-12-16] (NVIDIA Corporation)
R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_ACCEL.sys [67184 2012-01-03] (STMicroelectronics)
U0 wrmfs; C:\Windows\System32\drivers\qsne.sys [79064 2016-01-12] (Malwarebytes)
S3 PCDSRVC{0FF99CEB-15C9CE9E-06020200}_0; \??\c:\program files\alienautopsy\pcdsrvc_x64.pkms [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-12 20:39 - 2016-01-12 20:41 - 00031545 _____ C:\Users\Alienware\Downloads\FRST.txt
2016-01-12 20:37 - 2016-01-12 20:39 - 00000000 ____D C:\FRST
2016-01-12 20:35 - 2016-01-12 20:35 - 02370560 _____ (Farbar) C:\Users\Alienware\Downloads\FRST64.exe
2016-01-12 18:49 - 2016-01-12 18:49 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\qsne.sys
2016-01-12 18:17 - 2016-01-12 18:17 - 02209056 _____ C:\Users\Alienware\Downloads\avira-eu-cleaner_de.exe
2016-01-12 18:17 - 2016-01-12 18:17 - 00001999 _____ C:\Users\Alienware\Desktop\Entfernen des Avira EU-Cleaners.lnk
2016-01-12 18:17 - 2016-01-12 18:17 - 00001943 _____ C:\Users\Alienware\Desktop\Avira EU-Cleaner.lnk
2016-01-05 11:28 - 2016-01-05 11:28 - 07635472 _____ (Microsoft Corporation) C:\Users\Alienware\Downloads\GetWindows10-Web_Default_Attr.exe
2015-12-27 14:55 - 2016-01-12 20:32 - 00000000 ____D C:\Users\Alienware\AppData\Local\CrashDumps
2015-12-27 13:43 - 2015-12-27 13:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-27 13:43 - 2015-12-27 13:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-26 23:41 - 2015-12-16 18:34 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-12-26 23:41 - 2015-12-16 18:34 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-12-26 23:41 - 2015-12-16 18:34 - 00111520 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2015-12-26 23:39 - 2015-12-16 15:39 - 00103032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-12-26 23:37 - 2015-12-16 15:53 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-12-26 23:37 - 2015-12-16 15:53 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-12-26 23:37 - 2015-12-16 15:49 - 06090019 _____ C:\Windows\system32\nvcoproc.bin
2015-12-26 23:34 - 2015-12-16 18:34 - 42977072 _____ C:\Windows\system32\nvcompiler.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 37609080 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 31061624 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 24895792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 21122456 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 20663816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 17561432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 17156968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 16286888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 12334200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-12-26 23:34 - 2015-12-16 18:34 - 03168376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 02755704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 01915696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436143.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436143.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00938104 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00872056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00734512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00681592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-12-26 23:34 - 2015-12-16 18:34 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-12-26 23:34 - 2015-12-16 18:34 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-12-26 23:34 - 2015-12-16 18:34 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-12-26 23:26 - 2015-12-26 23:29 - 336974040 _____ (NVIDIA Corporation) C:\Users\Alienware\Downloads\361.43-notebook-win8-win7-64bit-international-whql.exe
2015-12-26 23:21 - 2015-12-26 23:46 - 00000000 ____D C:\Users\Alienware\Documents\STAR WARS Battlefront
2015-12-23 11:25 - 2015-12-23 11:58 - 00002065 _____ C:\TotalA_log.txt
2015-12-19 12:20 - 2015-12-19 12:20 - 00000000 ____D C:\Users\Alienware\Documents\Heroes of the Storm
2015-12-18 15:17 - 2015-12-18 15:17 - 00002028 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-12-17 21:17 - 2015-12-17 21:17 - 00000000 ____D C:\Users\Alienware\Documents\Sony

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-12 20:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-12 20:32 - 2014-06-22 21:08 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-12 20:15 - 2014-03-16 10:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-12 19:44 - 2014-02-06 19:58 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-12 19:18 - 2013-12-26 16:34 - 00000000 ____D C:\Users\Alienware\Documents\Outlook-Dateien
2016-01-12 17:10 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-12 17:10 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-12 16:50 - 2013-06-26 14:35 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2016-01-12 16:50 - 2013-06-26 14:35 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2016-01-12 16:50 - 2013-06-26 14:30 - 00000000 ____D C:\Program Files (x86)\AlienRespawn
2016-01-12 16:49 - 2014-02-06 19:58 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-12 16:44 - 2013-06-26 14:25 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-12 16:44 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-11 22:04 - 2013-07-03 17:05 - 00000000 ____D C:\Users\Alienware\AppData\Roaming\Skype
2016-01-10 19:28 - 2014-08-15 17:52 - 00000000 ____D C:\Users\Alienware\AppData\Local\LogMeIn Hamachi
2016-01-09 17:23 - 2013-08-29 09:16 - 00000000 ____D C:\ProgramData\Origin
2016-01-07 21:24 - 2013-09-15 11:06 - 00000000 ____D C:\Users\Alienware\AppData\Roaming\dvdcss
2016-01-04 16:35 - 2013-07-05 20:46 - 00000000 ____D C:\Users\Alienware\AppData\Roaming\vlc
2016-01-02 14:15 - 2014-03-16 11:15 - 18506432 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-01-02 14:15 - 2014-03-16 10:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-02 14:15 - 2013-06-26 14:00 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-02 14:15 - 2013-06-26 14:00 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-31 09:59 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-30 22:01 - 2013-07-03 16:53 - 00000000 ____D C:\Program Files (x86)\Steam
2015-12-30 15:33 - 2013-08-17 18:39 - 00000000 ____D C:\Users\Alienware\Documents\my games
2015-12-27 13:43 - 2014-06-06 16:40 - 00000000 ____D C:\Users\Alienware\AppData\Local\Skype
2015-12-27 13:43 - 2013-07-03 17:05 - 00000000 ____D C:\ProgramData\Skype
2015-12-27 09:40 - 2010-11-21 07:50 - 00711806 _____ C:\Windows\system32\perfh007.dat
2015-12-27 09:40 - 2010-11-21 07:50 - 00155602 _____ C:\Windows\system32\perfc007.dat
2015-12-27 09:40 - 2009-07-14 06:13 - 01655244 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-27 09:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-26 23:43 - 2013-06-26 14:24 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-26 23:41 - 2013-06-26 14:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-26 23:41 - 2013-06-26 14:23 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-26 23:39 - 2013-06-26 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-26 23:39 - 2013-06-26 14:30 - 00000000 ____D C:\Temp
2015-12-26 22:46 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-26 21:34 - 2013-08-29 09:18 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-12-26 21:32 - 2014-02-12 18:59 - 00000000 ____D C:\Users\Alienware\AppData\Local\Battle.net
2015-12-26 21:28 - 2014-02-12 18:59 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-12-23 11:25 - 2013-12-14 17:55 - 00000000 ____D C:\Users\Alienware\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-12-20 21:37 - 2013-07-03 19:07 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-12-19 15:11 - 2011-02-11 19:06 - 01629524 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-12-19 12:34 - 2015-05-14 16:42 - 00000000 ____D C:\Program Files (x86)\Diablo III
2015-12-18 22:43 - 2015-04-04 18:30 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-18 22:43 - 2015-04-04 18:30 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-18 15:17 - 2015-05-09 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-12-18 15:17 - 2013-06-26 14:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 10:44 - 2015-11-08 20:51 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-16 18:34 - 2013-12-17 20:52 - 01846016 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-12-16 18:34 - 2013-12-17 20:52 - 01530240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-12-16 18:34 - 2013-12-17 20:51 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-12-16 18:34 - 2013-09-16 20:37 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 18716176 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 16981976 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 14005408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 03637352 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 03211760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-12-16 18:34 - 2013-08-11 17:14 - 00034848 _____ C:\Windows\system32\nvinfo.pb
2015-12-16 18:34 - 2013-06-26 15:40 - 00207152 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-12-16 18:34 - 2013-06-26 15:40 - 00194680 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-12-16 15:53 - 2013-08-11 17:16 - 06359672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-12-16 15:53 - 2013-08-11 17:16 - 02985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-12-16 15:53 - 2013-08-11 17:16 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-12-16 15:53 - 2013-08-11 17:16 - 01256240 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-12-16 15:53 - 2013-08-11 17:16 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-12-16 15:53 - 2013-08-11 17:16 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-12-15 18:18 - 2013-08-29 09:16 - 00000000 ____D C:\Program Files (x86)\Origin
2015-12-15 16:59 - 2013-07-03 17:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-15 16:58 - 2013-07-03 17:01 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-12-13 12:07 - 2014-04-30 13:03 - 00015353 _____ C:\Users\Alienware\Desktop\Papa.zip

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-04-16 19:01 - 2014-04-16 19:01 - 0000047 _____ () C:\Users\Alienware\AppData\Roaming\WB.CFG
2013-08-22 10:53 - 2013-09-28 18:47 - 0005120 _____ () C:\Users\Alienware\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-13 09:18 - 2014-07-13 09:18 - 0000097 _____ () C:\Users\Alienware\AppData\Local\fusioncache.dat
2014-05-16 15:02 - 2014-05-16 15:02 - 0000866 _____ () C:\Users\Alienware\AppData\Local\recently-used.xbel
2013-09-16 20:33 - 2015-08-19 23:16 - 0007604 _____ () C:\Users\Alienware\AppData\Local\Resmon.ResmonCfg
2015-03-05 08:52 - 2015-03-05 08:52 - 0000000 _____ () C:\Users\Alienware\AppData\Local\{5F5F57E0-AF16-4CC5-AD48-9F94F58E95CC}
2014-07-29 19:16 - 2014-07-29 19:16 - 0028553 _____ () C:\ProgramData\dxdiag.txt
2013-10-12 09:41 - 2013-10-12 10:57 - 0000800 _____ () C:\ProgramData\hpzinstall.log
2013-12-30 12:08 - 2013-12-30 12:08 - 0000040 _____ () C:\ProgramData\ra3.ini

Einige Dateien in TEMP:
====================
C:\Users\Alienware\AppData\Local\Temp\0i0n5aqb.dll
C:\Users\Alienware\AppData\Local\Temp\CNC4LauncherUpdate.exe
C:\Users\Alienware\AppData\Local\Temp\cpcn9tnz.dll
C:\Users\Alienware\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Alienware\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Alienware\AppData\Local\Temp\ejdixji0.dll
C:\Users\Alienware\AppData\Local\Temp\FreemakeYouTubeToMP3Boom_1.0.1.0.exe
C:\Users\Alienware\AppData\Local\Temp\JDSetup130421411997201335.exe
C:\Users\Alienware\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Alienware\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Alienware\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Alienware\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Alienware\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Alienware\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Alienware\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\Alienware\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Alienware\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Alienware\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Alienware\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Alienware\AppData\Local\Temp\nvStInst.exe
C:\Users\Alienware\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Alienware\AppData\Local\Temp\patchw32.dll
C:\Users\Alienware\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Alienware\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Alienware\AppData\Local\Temp\Setup_OnHD.exe
C:\Users\Alienware\AppData\Local\Temp\SIntf16.dll
C:\Users\Alienware\AppData\Local\Temp\SIntf32.dll
C:\Users\Alienware\AppData\Local\Temp\SIntfNT.dll
C:\Users\Alienware\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Alienware\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Alienware\AppData\Local\Temp\t18k7wd9.dll
C:\Users\Alienware\AppData\Local\Temp\vlc-2.0.8-win64.exe
C:\Users\Alienware\AppData\Local\Temp\vlc-2.1.5-win64.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-09 09:46

==================== Ende von FRST.txt ============================

Mav 12.01.2016 20:52
Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:10-01-2015 01
durchgeführt von Alienware (2016-01-12 20:42:13)
Gestartet von C:\Users\Alienware\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2013-07-02 16:29:37)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1339448428-3584763171-402926134-500 - Administrator - Disabled)
Alienware (S-1-5-21-1339448428-3584763171-402926134-1001 - Administrator - Enabled) => C:\Users\Alienware
ASPNET (S-1-5-21-1339448428-3584763171-402926134-1003 - Limited - Enabled)
Gast (S-1-5-21-1339448428-3584763171-402926134-501 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Out of date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Out of date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1310 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
1310_Help (x32 Version: 82.0.58.000 - Hewlett-Packard) Hidden
1310Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
4K YouTube to MP3 2.10 (HKLM-x32\...\4K YouTube to MP3_is1) (Version: 2.10.9.1525 - Open Media LLC)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11)  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version:  - Spicy Horse Games)
AlienAutopsy (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
AlienRespawn - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Alienware)
AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Alienware)
Alienware Command Center (HKLM-x32\...\InstallShield_{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}) (Version: 2.8.8.0 - Alienware Corp.)
Alienware Command Center (Version: 2.8.8.0 - Alienware Corp.) Hidden
Alienware On-Screen Display (HKLM-x32\...\InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.32.0.2C - )
Alienware On-Screen Display (x32 Version: 0.32.0.2C - ) Hidden
Anno 2070 (HKLM-x32\...\Steam App 48240) (Version:  - BlueByte)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Audiosurf 2 (HKLM-x32\...\Steam App 235800) (Version:  - Dylan Fitterer)
Batman: Arkham Asylum Game of the Year Edition (HKLM-x32\...\{CFABC775-5386-4BA5-86B4-505BBD36E812}) (Version: 1.0.0.0 - Square Enix Limited)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BMW Standard Tools (HKLM-x32\...\{70994916-61E9-40D2-A30C-89D2C030017F}_is1) (Version: 2.3.0 - BMW Group)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
BrowseMark (HKLM\...\BrowseMark) (Version: 2014.04.15.204612 - BrowseMark) <==== ACHTUNG
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.71.1.2014 - Georgy Berdyshev)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Cool Edit Pro 2.1 (HKLM-x32\...\Cool Edit Pro 2.1) (Version:  - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
Dead Space™ 2 (HKLM-x32\...\{6580792A-35FC-4600-9FAE-A981F3F92D98}) (Version: 1.0.941.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Dell System Detect (HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\9204f5692a8faf3b) (Version: 5.6.0.4 - Dell)
Dell System Detect Bootstrapper (HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\8e3135b376bd523e) (Version: 1.1.0.15 - Dell)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Deus Ex: Human Revolution - The Missing Link (HKLM-x32\...\Steam App 201280) (Version:  - Eidos Montreal)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Die Siedler 2 - Die nächste Generation (HKLM-x32\...\{ED56EF4F-35FF-48D4-B616-A66E791EF1B6}) (Version: 1.00.0000 - UBISOFT)
DJ Console 4-mx  Manuals (HKLM-x32\...\{5E8CA90A-DE80-453A-9BCF-46A605688DB5}) (Version: 0.9 - Hercules)
DJHERCULESMIX Products Series drivers (HKLM-x32\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 5.HDJS.2015 - Guillemot Corporation)
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Earth 2160 (HKLM-x32\...\Steam App 1900) (Version:  - Reality Pump Studios)
Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)
EMSC (x32 Version: 0.0.0.22C - Compal Electronics, Inc.) Hidden
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEMon (HKLM-x32\...\EVEMon) (Version: 1.8.4.4125 - battleclinic.com)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FlatOut 2 (HKLM-x32\...\Steam App 2990) (Version:  - Bugbear Entertainment)
Free YouTube to MP3 Converter version 3.12.59.505 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.505 - DVDVideoSoft Ltd.)
Freespace 2 (HKLM-x32\...\Steam App 273620) (Version:  - Volition Inc)
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Grey Goo (HKLM-x32\...\Steam App 290790) (Version:  - Petroglyph)
GRID (HKLM-x32\...\Steam App 12750) (Version:  - Codemasters Studios)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version:  - Valve)
Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version:  - Valve)
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version:  - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version:  - Valve)
Homeworld Remastered Collection (HKLM-x32\...\Steam App 244160) (Version:  - Gearbox Software)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Integrated Webcam Live! Central (HKLM-x32\...\Integrated Webcam Live! Central) (Version: 2.01.15 - Creative Technology Ltd)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version:  - Avalanche Studios)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
L.A. Noire (HKLM-x32\...\Steam App 110800) (Version:  - Team Bondi)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.266 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.266 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Mass Effect™ (HKLM-x32\...\{44A570EE-FD93-4086-8997-2C38DFDE0019}) (Version: 1.2.20608.0 - Electronic Arts)
Mass Effect™ 2 (HKLM-x32\...\{E19B628D-A9BC-4519-B1D4-4C8C09074F7F}) (Version: 1.2.1604.0 - Electronic Arts)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4779.1002 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Miranda Fusion 3.2.24.0 (HKLM-x32\...\MirandaFusion) (Version: 3.2.24.0 - Miranda Fusion Team)
MotioninJoy Gamepad tool 0.7.0000 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.0000 - www.motioninjoy.com)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mp3tag v2.65a (HKLM-x32\...\Mp3tag) (Version: v2.65a - Florian Heidenreich)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Network Stumbler 0.4.0 (remove only) (HKLM-x32\...\Network Stumbler) (Version:  - )
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.3.2.2730 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version:  - Ndemic Creations)
Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Qualcomm Atheros Killer Network Manager (HKLM-x32\...\InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}) (Version: 6.1.0.304 - Qualcomm Atheros)
Qualcomm Atheros Killer Network Manager (Version: 6.1.0.304 - Qualcomm Atheros) Hidden
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.1 beta r2255 - )
Red Light Center 3D Client (HKLM-x32\...\Red Light Center 3D Client) (Version: 1.9.4745 - Utherverse Digital Inc)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Sins of a Solar Empire: Rebellion (HKLM-x32\...\Steam App 204880) (Version:  - Ironclad Games)
Sins of a Solar Empire: Trinity (HKLM-x32\...\Steam App 201290) (Version:  - Ironclad Games, Stardock Entertainment)
SketchUp 2015 (HKLM\...\{A83795B9-570F-40FF-ACB4-710B568EBA22}) (Version: 15.3.331 - Trimble Navigation Limited)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SOMA (HKLM-x32\...\Steam App 282140) (Version:  - Frictional Games)
Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)
Sound Blaster Recon3Di (HKLM-x32\...\{C8AAFCDC-CD3A-40AD-9FA9-07FB70F08224}) (Version: 1.00.08 - Creative Technology Limited)
Sound Blaster Recon3Di Extras (HKLM-x32\...\{C45E715E-442E-4D82-BD46-A08A0870957C}) (Version: 1.0 - Creative Technology Limited)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.12.0018 - ST Microelectronics)
Star Trek Online (HKLM-x32\...\Steam App 9900) (Version:  - Cryptic Studios)
Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version:  - Petroglyph)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.28745 - Electronic Arts)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Starpoint Gemini 2 (HKLM-x32\...\Steam App 236150) (Version:  - Little Green Men Games)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Supreme Commander (HKLM-x32\...\Steam App 9350) (Version:  - Gas Powered Games)
Supreme Commander: Forged Alliance (HKLM-x32\...\Steam App 9420) (Version:  - Gas Powered Games)
Sweet Home 3D version 4.6 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.4.0 - Synaptics Incorporated)
Take On Mars (HKLM-x32\...\Steam App 244030) (Version:  - Bohemia Interactive)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.51091 Beta - TeamViewer)
The Crew (HKLM-x32\...\Steam App 241560) (Version:  - Ivory Tower in collaboration with Ubisoft Reflections)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 5.2 - Ubisoft)
VCDS DRV 12.12.0 (HKLM-x32\...\VCDS DRV 12.12.0) (Version: DRV 12.12.0 - Ross-Tech)
Virtual DJ LE - Atomix Productions (HKLM-x32\...\Virtual DJ LE - Atomix Productions) (Version:  - )
VirtualDJ PRO Full (HKLM-x32\...\{4769E972-2E92-49C5-B6F9-465EFD0C4D94}) (Version: 7.0.5 - Atomix Productions)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Steam App 243470) (Version:  - Ubisoft)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2410 - Broadcom Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.64  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows-Treiberpaket - FTDI CDM Driver Package - Bus/D2XX Driver (07/12/2013 2.08.30) (HKLM\...\22CCD58B53472BE3FCAFF05631111C4062959A43) (Version: 07/12/2013 2.08.30 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package - VCP Driver (07/12/2013 2.08.30) (HKLM\...\BD00013670D26C16E19F284BF8E15DAF813497C7) (Version: 07/12/2013 2.08.30 - FTDI)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {09C255B9-09FB-4257-A347-59690C068FA5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {11BE1FC4-D5D0-4D25-AB49-2029875CEFC4} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {19A85678-41DD-4278-907B-FAB9760B5EEF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-02] (Adobe Systems Incorporated)
Task: {3ABA23C9-AEF2-4722-A50E-8A9038D4A5F3} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {50B351F0-BE82-49D6-BED8-C57A73853297} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\AlienAutopsy\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {55F89EF1-C0A4-48AF-9408-276B1549CDF2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {56EA7270-D93A-43C6-B636-AE3FF509966E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {6311E60A-C47F-41CC-8CD8-2F55C297A44F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {6BFECD77-A9F3-40C1-AA6F-FBBA58FE4268} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {7705C5FD-2FF9-4D00-B36A-ABEAC3E10245} - System32\Tasks\{A984DAA1-43FA-442F-A643-95669A870A5B} => pcalua.exe -a C:\Users\Alienware\Desktop\sambc-up.exe -d C:\Users\Alienware\Desktop
Task: {89CAF588-E526-4B5D-B26D-B4771C5D7843} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {9B683741-A7CB-4D25-ADE6-90118D49F76B} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {AA25293E-97A3-40A2-B885-526C9696FC3B} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {BAC42FF0-FD25-4565-B7F8-41A842AE35BB} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {BC5F1D10-F9BB-4153-B4A0-7FA5F8E8D30E} - System32\Tasks\{D6CFA583-A335-4B1C-B86C-DCA85418B521} => pcalua.exe -a C:\Users\Alienware\Downloads\ASIO4ALL_2_12_Deutsch.exe -d C:\Users\Alienware\Downloads
Task: {C7144AD0-BE55-400C-A466-E2E5580324A9} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {C786837C-820F-44A4-8458-E935BE4B2EA7} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {CD25DFBD-C874-4918-BB00-8B27B4E4D94A} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\AlienAutopsy\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {DFE9A90B-F2FE-43AF-8A7F-C420316064D1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {E2BC8FAB-239F-4D01-8C38-F28060BA7010} - System32\Tasks\{49F873A2-B93D-477C-BDEB-0A7F9BD7784C} => pcalua.exe -a D:\setup.exe -d D:\
Task: {E2C335BE-7F4C-4F3D-9F71-2F50943BB04C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {EEF031D8-A979-4505-A5FF-9292D0CD491E} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2013-08-11 17:16 - 2015-12-16 15:53 - 00126072 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-19 08:52 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-12-26 23:40 - 2015-12-16 18:34 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2012-02-15 20:37 - 2012-02-15 20:37 - 00492032 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
2011-05-10 01:46 - 2011-05-10 01:46 - 02760192 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtCore4.dll
2011-05-10 01:56 - 2011-05-10 01:56 - 09856000 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtGui4.dll
2011-05-10 01:47 - 2011-05-10 01:47 - 00416256 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtXml4.dll
2012-02-15 20:37 - 2012-02-15 20:37 - 00217600 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\BFCommon.dll
2011-05-10 17:32 - 2011-05-10 17:32 - 00731648 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\qwt5.dll
2011-05-10 01:48 - 2011-05-10 01:48 - 00990720 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtNetwork4.dll
2013-06-26 14:30 - 2012-01-27 03:49 - 02751808 ____N () C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
2014-09-18 08:23 - 2014-09-18 08:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-10-14 19:51 - 2014-10-14 19:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 08:23 - 2014-09-18 08:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-10-14 19:51 - 2014-10-14 19:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-01-05 15:24 - 2014-01-05 15:24 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2014-01-05 15:24 - 2014-01-05 15:24 - 00745144 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2014-01-05 15:22 - 2014-01-05 15:22 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2014-01-05 15:23 - 2014-01-05 15:23 - 00055808 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2014-01-05 15:23 - 2014-01-05 15:23 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\RecycleManager.dll
2011-12-02 02:00 - 2011-12-02 02:00 - 01636208 _____ () C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
2015-12-19 10:26 - 2015-12-19 10:26 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\582f6038931a9b63060e663814d293d0\PSIClient.ni.dll
2013-06-26 14:16 - 2012-02-01 23:44 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-12-26 23:40 - 2015-12-16 18:34 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-11-21 17:22 - 2014-11-21 17:22 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2011-12-22 16:31 - 2011-12-22 16:31 - 00593920 _____ () C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\de-DE\SBRcni.resources.dll
2009-12-18 17:07 - 2009-12-18 17:07 - 00577536 _____ () C:\Program Files (x86)\Alienware On-Screen Display\EMSC.dll
2016-01-12 18:17 - 2013-09-05 10:59 - 00023784 _____ () C:\Users\Alienware\AppData\Local\Temp\cleaner\rcNwLoad_de.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1339448428-3584763171-402926134-1001\...\dell.com -> dell.com

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2014-01-31 16:43 - 00000899 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      update.ross-tech.com
127.0.0.1      update.ross-tech.de

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1339448428-3584763171-402926134-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alienware\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: Comrade.exe => C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{5371DBD0-D825-4784-BE23-0AD0D11DE837}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D816662E-1DE2-44A8-BCF0-C97DED647F3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{F049E714-516C-4430-8FC6-969B304D293F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BAACC863-2CEA-4967-B06C-F3DBBFC7E5DD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{20A331F1-67D2-439B-AE13-7CEC0443E978}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{533D3F21-5E25-46F5-AD06-1A75F1458F72}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{4CFEFC2C-2E6D-425E-8929-F27F57DA3A87}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [{C25D75BD-DB0B-4588-BF5C-AA47E3E3BA6E}] => (Allow) C:\Program Files (x86)\MirandaFusion\miranda32.exe
FirewallRules: [{67175E06-A33B-4A27-96C2-A1F4B0583632}] => (Allow) C:\Program Files (x86)\MirandaFusion\miranda32.exe
FirewallRules: [{81AB39F3-5616-4DF5-87B5-C2A06BC1E8B3}] => (Allow) C:\Program Files (x86)\MirandaFusion\fusiontools\updater.exe
FirewallRules: [{1E14954D-EDC0-4478-8283-8DA7AD4EE3FB}] => (Allow) C:\Program Files (x86)\MirandaFusion\fusiontools\updater.exe
FirewallRules: [{8190D0D2-0509-40B3-A50A-7C7C2555132A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{C847E283-3CDC-4559-88F0-979BF27C63F0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{DD0BB44D-582D-447A-BDA3-E801FE7109AB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{D3B3F19D-9532-4DE3-AE31-BCC7313C2FBB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{4A4E406D-7F13-4B0F-9A14-EAD97244FCA2}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{97EA7C21-89AB-4DD6-8AE6-98065D623103}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{C570F018-A3F6-41F2-A6AD-A65DCFAB1564}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{4CDAC928-8936-4A71-97AC-5E1313F82892}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{50662AF1-7702-494B-ACFA-CCAA8044EAFD}C:\program files (x86)\ccp\eve\bin\exefile.exe] => (Allow) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [UDP Query User{FDB58E04-0AC1-4FA9-9CC1-F5401DCA7980}C:\program files (x86)\ccp\eve\bin\exefile.exe] => (Allow) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [TCP Query User{E3449FF2-B35F-4664-A6C9-BD8980EF2207}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{83BE9E01-BFD8-453D-971D-F291D241B201}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [TCP Query User{1D8CC901-E4A6-41F3-81F7-CD7529EF4EB0}C:\program files (x86)\empire interactive\starship troopers\stgame.exe] => (Allow) C:\program files (x86)\empire interactive\starship troopers\stgame.exe
FirewallRules: [UDP Query User{85D67B60-B1F7-4EF8-BC63-FC6DE9CE6FB8}C:\program files (x86)\empire interactive\starship troopers\stgame.exe] => (Allow) C:\program files (x86)\empire interactive\starship troopers\stgame.exe
FirewallRules: [{AB315DD9-B3D6-4191-81C8-7E49DC1921FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [{B9CBD48D-2D59-42B1-8F29-62E9FE10EEC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [TCP Query User{7F772DC9-F122-4224-B970-8B3A5BB77DBB}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe
FirewallRules: [UDP Query User{7A93379A-FF72-4206-86E8-0EDE9EE0DE90}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe
FirewallRules: [{4D42187F-265B-4B82-8A23-3109E756EA13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{13C0552A-8B91-482A-94FF-319E6004A3FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{7CCCE3D7-FDA2-46C5-B15D-5613640CE685}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{A212A2CF-355F-4C12-AFE2-E25F98B06FC5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{FB1E3332-29A3-4B95-806C-D1BCCDA090DA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{D369114A-84E8-4C0E-AF92-FA0975F7DF0B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{A8CD2209-2385-4FE1-A71C-6992895694F0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{7845C522-3C2D-4D97-A7B8-FA5113812D21}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{29F63E1A-3531-4CFA-8EA3-86079BAE30A5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{F81AD340-22AF-4E81-90D9-B824E5211D81}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{5D4A9A3B-11DB-4E5E-B44E-4FAC380A89B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{3872D434-AD79-406C-ADC8-BE654086CCB1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{51CCC56A-E3DB-4681-BFBC-28E069722939}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{1E035ADE-8CE7-4E52-B412-2B729B2DAA73}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{CCE306C6-CCE3-4C4A-811D-C1BA438D0002}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{E16A83E0-3DA7-44F7-B847-F5E352A7FD07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{6B2410E2-2547-4E3E-9EB7-FD91E825991F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{2FCC97F7-5A06-41CC-A22E-579E988C434E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CFAABFC7-9D28-46B7-BD58-BE232D512B1A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{B0709517-00A1-44C2-8349-C6730124CADD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{160D372C-F5E7-4FDF-9218-C0B5DBB6901B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{D8354EC7-8E08-409B-9B8F-4D590EEBC866}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E7849C03-3D00-4867-B28C-00A45FE41638}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{E3BDEF0A-DC42-420E-946F-7137DCED2968}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{B73A87FF-6C3A-4F50-A6ED-F94CED88DF2F}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{7F318815-D215-4993-8522-696C287EE9A3}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{E6BCC41D-CAC6-4B00-958C-A583588CA00E}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{922C0E08-C0FF-4E67-9DC7-D3193AAD8796}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{8E3E331F-A926-436C-ADF8-A219B908771C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{9D486A53-0A3B-4FA0-91D0-63014ABBE239}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{DF7186B1-5F26-4CBF-96D6-CAA539D10452}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{751D4582-8701-454D-8C9F-E97A5E2EA1DC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{0ADFA3AD-43C5-462F-B70E-A8DF7179A3F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire Diplomacy.exe
FirewallRules: [{39E71BCA-BF88-4829-AC2B-0B23F7CA7823}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire Diplomacy.exe
FirewallRules: [{134D646F-AFD8-4DA9-8DA0-4B3DCA78D08A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire Entrenchment.exe
FirewallRules: [{05AE6E0C-3B38-4A20-BF3C-DBC3F0BC19D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire Entrenchment.exe
FirewallRules: [{7D4A91F7-0DBE-4ADD-AC41-86D764436086}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire.exe
FirewallRules: [{E002ED47-2F95-4A25-95C2-F5163C675976}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Trinity\Sins of a Solar Empire.exe
FirewallRules: [TCP Query User{23D2B6B3-0F2D-411E-A712-7E9443AF46EF}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [UDP Query User{7CC31A8B-8687-4C00-9467-B075F9D90CC3}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [{56362547-7F43-4033-899E-522EE9157470}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{E4536D3C-5E02-4A27-8824-12E31B592DCD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{3963055C-17C1-42C3-9901-F2B547252B36}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{53CA0706-927E-4D64-9367-4CBD0128C5C0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [TCP Query User{5F5BD9EE-E131-43C2-A034-6E7CF76D949F}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [UDP Query User{6A0DA71C-3997-4547-A71B-E60531380387}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [{EB6F6B34-8459-42C4-851B-7881D0BD998D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FlatOut2\FlatOut2.exe
FirewallRules: [{3825ED35-44EB-4A97-9543-0924DFF4E02D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FlatOut2\FlatOut2.exe
FirewallRules: [TCP Query User{978A9C99-5324-4DB7-8E70-4C91597A5B06}C:\program files (x86)\steam\steamapps\common\flatout ultimate carnage\fouc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\flatout ultimate carnage\fouc.exe
FirewallRules: [UDP Query User{14F02F73-5A57-4404-93FB-82D6D5036F67}C:\program files (x86)\steam\steamapps\common\flatout ultimate carnage\fouc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\flatout ultimate carnage\fouc.exe
FirewallRules: [{D09E002F-75B4-4526-9F38-F19820126E71}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B481BA7C-176A-43C5-B531-D6DE8A3E2CF6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{98D0C54A-4303-4411-891B-C08D9E0BCCE8}C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{4CD76AC0-5FC9-4E31-9BC7-38A79C794B9A}C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [TCP Query User{43961BC4-B509-46EE-A9B5-1D64E154DF8B}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{56350CA9-D5B2-4A77-88DF-6FD996E1D0B6}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [TCP Query User{A0986228-4132-449C-96C5-EB47D4891A72}C:\users\alienware\desktop\wnhde111 sw cd v1.1\bin\config\configassistant_deu.exe] => (Allow) C:\users\alienware\desktop\wnhde111 sw cd v1.1\bin\config\configassistant_deu.exe
FirewallRules: [UDP Query User{D2024988-8D5E-4FA4-A26A-87084DB6F048}C:\users\alienware\desktop\wnhde111 sw cd v1.1\bin\config\configassistant_deu.exe] => (Allow) C:\users\alienware\desktop\wnhde111 sw cd v1.1\bin\config\configassistant_deu.exe
FirewallRules: [{CFEB2832-4AF6-4E93-BAEA-AF986154FF24}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{A2CB4606-99EF-4BEF-A619-424D30A9589E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{9EDD105F-BF22-4953-8CF1-BE27C4CAAFC0}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{9E9ACBDF-5EFF-44C2-814B-9C727DF4AAAE}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{4FAED5FB-82E5-4D06-879A-7E75AB3EBE78}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B7F15030-1161-4116-9802-3E8B68EDBA5C}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{50A87353-7C17-407B-BADE-D322C9E8168E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 2070\Anno5.exe
FirewallRules: [{E2D8CD4D-76D6-4DEA-A48C-E633F1C2D17E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 2070\Anno5.exe
FirewallRules: [{642EB116-D667-487A-A2DE-6D8A5C42AD64}] => (Allow) C:\Program Files (x86)\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{355A81BC-824F-4B74-84C3-725844479F3B}] => (Allow) C:\Program Files (x86)\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{C402D48B-F73B-49E8-BE0A-4B538571061F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 2070\Anno5.exe
FirewallRules: [{DDB77F30-1C70-4402-B99F-10D88D1901F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 2070\Anno5.exe
FirewallRules: [TCP Query User{2631BE23-A969-434D-9AAC-97F72042CDF8}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [UDP Query User{F0BA812B-516E-4CA9-AE01-6015C2899CC5}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [{D25CA817-04B5-4087-BA4A-EBDBEE46B540}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [{EC13AE3D-DC20-4302-9E50-69B8E25F195A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Marvel Heroes\UnrealEngine3\Binaries\Win32\MarvelGame.exe
FirewallRules: [TCP Query User{F60F6096-91D2-46A1-A7B1-0F43AE5EF95B}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{955A9BC3-0C17-42AA-9A5D-2D98DA1D4777}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{1270E24D-C494-453C-B584-EE3D79CA2F52}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space\Dead Space.exe
FirewallRules: [{64FB9D8D-A1A0-413C-92CB-04817D2371CC}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space\Dead Space.exe
FirewallRules: [{E0B2BC97-45E5-49E4-9C53-8D80A6BFE5CB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{3C9F52F5-D5EB-43C8-A9B5-A7E05896B312}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{E1437172-3F83-438E-96B7-D40AB7790877}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{E25DDE34-63B1-40F7-8C02-3DF71473B9FE}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{9423705D-1FE5-4468-91DC-5D2E04E4435A}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{EF168819-7542-4EE8-8A3D-5981D473FCDE}] => (Allow) LPort=56522
FirewallRules: [{A1D17C34-09C5-42E9-9002-8F83BA239D9F}] => (Allow) LPort=56522
FirewallRules: [{B9CAE038-1BA3-4E64-A07B-F1E40FF0F1BA}] => (Allow) LPort=56522
FirewallRules: [{83C286F2-5DCE-40F1-8C41-7CDCFBFE3D72}] => (Allow) LPort=56522
FirewallRules: [{4370B6D2-C9E9-4071-B0DB-F5137302A36A}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{3441D37A-7953-47FA-85BC-C111B3B5634D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{B0B39816-FB78-437B-9974-214C63667A63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{B7A1B094-C978-4BF3-8100-F8429176336C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{38155F4C-C5A2-4553-A9D0-512927021B94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{D2DF1066-FB1B-4EA4-B033-5637E84CE548}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 2 (DE)\deadspace2.exe
FirewallRules: [{1E67FC7F-2A9B-4310-9EA4-A403B5867DBD}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 2 (DE)\deadspace2.exe
FirewallRules: [{40EF929E-2712-4AC9-BE5E-74341A99845C}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{A8F0BABA-81BF-486D-85D9-50916D0113FA}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [TCP Query User{8DECEDE3-A365-43ED-AE47-A830CB534B4F}C:\program files (x86)\steam\steamapps\common\freespace\fs.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace\fs.exe
FirewallRules: [UDP Query User{945F7FDF-A2D3-4EFA-9C8F-17925ACAF990}C:\program files (x86)\steam\steamapps\common\freespace\fs.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace\fs.exe
FirewallRules: [TCP Query User{5DB23377-D21A-49F2-9FB8-37D65D6D0404}C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0.exe
FirewallRules: [UDP Query User{8240AC96-EB2A-4909-925D-B8E4A72CCC3C}C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0.exe
FirewallRules: [TCP Query User{24908439-3289-449C-BD12-E3011A626069}C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0_sse.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0_sse.exe
FirewallRules: [UDP Query User{C05B0267-E872-48E4-9583-366265F7B897}C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0_sse.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\freespace 2\fs2_open_3_7_0_sse.exe
FirewallRules: [TCP Query User{A4329416-7740-4BDA-AC32-CD05AFB6B607}C:\games\freespace2\fs2_open_3_7_2_rc3.exe] => (Allow) C:\games\freespace2\fs2_open_3_7_2_rc3.exe
FirewallRules: [UDP Query User{643220BB-830A-4A41-8E00-B0C7E0B24E0A}C:\games\freespace2\fs2_open_3_7_2_rc3.exe] => (Allow) C:\games\freespace2\fs2_open_3_7_2_rc3.exe
FirewallRules: [{B24FEB4B-D84F-4558-83A6-A5FBF4129000}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{B1F1733A-5811-4661-AA38-B987BC6E7BFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{6EA1740B-A416-4EFB-A25D-B6DB96110EBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\L.A.Noire\LANLauncher.exe
FirewallRules: [{7DBEC6E9-EEC9-42CF-898A-9A3F9D6FF037}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\L.A.Noire\LANLauncher.exe
FirewallRules: [{19E86653-741D-4464-BCE3-978E06BEA6E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [{2C82563A-52DA-4EFC-BDD0-833EFAE515E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [{EF331822-EC95-47CF-AF00-2D812E2713CE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0D54D35D-5489-4C30-BB4F-8E1188EAE102}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D8066FEB-7AA0-42C1-9B2B-27C9212B86CB}C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe
FirewallRules: [UDP Query User{437CBA4F-AAC0-409C-A5D6-06EDEE35D786}C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe
FirewallRules: [{B198B77E-A66D-4705-94AD-5CBA57850771}] => (Block) C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe
FirewallRules: [{A167AEDE-DFC9-41E5-82C4-8DA9A2F38BAA}] => (Block) C:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe
FirewallRules: [{59409F8F-20B3-4916-90D9-D061CAEAC77E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{10F80D6D-B966-4144-9711-0163A46AE7AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{02DEE6FE-32BD-41C7-81BD-E6B271822F0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{D73B910E-FEB4-42DA-A488-0DA195B4C8D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [TCP Query User{321C2C82-9A8A-4C8E-95B8-18BA77FEC279}C:\users\alienware\documents\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) C:\users\alienware\documents\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [UDP Query User{7776E035-812A-4A29-BCE4-217AB7080B9B}C:\users\alienware\documents\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) C:\users\alienware\documents\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{61A6D01C-6D21-4EFE-BA96-DCC9E799F9DE}C:\program files\guillemot\tools\giwebupdater.exe] => (Allow) C:\program files\guillemot\tools\giwebupdater.exe
FirewallRules: [UDP Query User{B8AA785B-8B83-4289-A9F1-89C95B3D2D5D}C:\program files\guillemot\tools\giwebupdater.exe] => (Allow) C:\program files\guillemot\tools\giwebupdater.exe
FirewallRules: [TCP Query User{F3935675-8C9B-44AF-861D-B4FB518A8809}C:\program files\guillemot\hdjtray\hdjseries2traybar.exe] => (Allow) C:\program files\guillemot\hdjtray\hdjseries2traybar.exe
FirewallRules: [UDP Query User{66667F8D-70E1-4938-80B0-0AA3EE789A5B}C:\program files\guillemot\hdjtray\hdjseries2traybar.exe] => (Allow) C:\program files\guillemot\hdjtray\hdjseries2traybar.exe
FirewallRules: [{E2B852C2-A520-4B7F-A14B-5BD72C42140F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{F3F85B28-BF90-4E49-BEBE-2F277C594FA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{941EC97C-A6A1-4EE9-9BD0-A0DDCB68F099}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Starpoint Gemini 2\StarpointGemini2.exe
FirewallRules: [{4B6E172D-3B72-403D-81BC-0F9984D14392}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Starpoint Gemini 2\StarpointGemini2.exe
FirewallRules: [{0C1D42D2-EEBC-4873-9C53-A87B718BE906}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{D5F8D2DE-E641-45C5-B1E8-1B777A4C4BB1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [TCP Query User{D7562506-FCB0-485B-9580-174520CDE140}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{4179EEB6-36E9-474D-942E-B09D1B5FF4C0}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{EE46D1F8-4FDE-4703-A4C0-79E689EE9EA8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5E016A18-09E0-401C-BA64-4A54F2B8CA4D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{0F503E33-F8D1-47B7-A7CA-B31C5BCCC21D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{CC47EE1E-8ECA-42BA-A0A7-453235C26D86}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{CA68EFB4-3E83-48CE-873C-5ACB68DE0CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Earth 2160\Earth2160_START.exe
FirewallRules: [{727CF1C8-932B-49C3-852B-9526DD45F223}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Earth 2160\Earth2160_START.exe
FirewallRules: [{43ECA712-B0DC-4645-88DC-B6AA8089E7D1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Earth 2160\Earth2160Editor_START.exe
FirewallRules: [{E626B9FB-DDC3-4DA1-9FE9-E7FC93A10560}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Earth 2160\Earth2160Editor_START.exe
FirewallRules: [{8BB9C499-6C72-4842-AC58-A014D663582A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [{3FBA0556-65D4-4D4F-B5D3-1478702E58F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [{98DC48BB-D278-4FE1-B6B2-E6D968959C59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{D9CF18CB-5BB0-4319-8178-834CDF13BB81}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{404FA6C2-36AA-400C-A2A5-09320DFBB4A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{00E03A78-3C5F-4BE1-9E23-C2D42F20B66E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{0153F7B5-E0B2-491E-97D4-5B10A07100D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{DEB2DDAC-2163-4CD9-91B6-210C2AFED7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{0E4F79AC-2C71-4514-8766-9FA8EBEA8B24}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{9910E120-0844-4478-B809-0B96C87BB8E6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{8E2C5FC3-2B7A-4F5D-B9F3-9ED754718D5B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{057D3361-EAA0-4CF7-A370-BB7D079FA5E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{B3EE73BC-8383-4542-A569-453B2AE150D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Crew\TheCrew.exe
FirewallRules: [{1AE21020-BB87-4504-B83E-DCBD77DF1F0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Crew\TheCrew.exe
FirewallRules: [{8E1E2BB0-8C0E-43AD-A0FB-82EFA335A82E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{30AF6616-81B3-422C-B125-C5553D74E58B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{7F978B3A-2C99-4D7F-8F64-6F1F7436DE4E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{D8D50F6F-DC47-4B09-8E01-EDAD1C146832}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{A4EBBA63-5270-45C2-BF24-49912BE8133B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{D335C4D0-45F9-4B52-B72B-7B0E5FFE17FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{204FF596-B2F8-4869-A845-2FF8A324FEF3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3 Blood Dragon\bin\FC3BDUpdaterSteam.exe
FirewallRules: [{47793DB2-12AD-4F1C-91D9-096959A00FD7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3 Blood Dragon\bin\FC3BDUpdaterSteam.exe
FirewallRules: [{8C7D55F4-E7EC-47CF-A7B7-DE86E295FC9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{BC6EAA95-9579-4C5F-B36A-ECB0F3E5A109}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{944541EE-A26F-4E58-8846-B59BC930C476}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DXHRML\dxhrml.exe
FirewallRules: [{D11B3742-5DB4-4F71-B5BF-E07E011F4C37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DXHRML\dxhrml.exe
FirewallRules: [{F3652A1B-3FF1-4974-BCE6-2BDB7F97FBDD}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{9B022F34-A127-48C3-B6B9-489DEC095AD3}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{1C3EE898-7EC0-47A0-8E02-CECE8AC73D32}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{124D9656-575C-4C5F-8F3F-B0E8E91A27ED}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6ED97631-A25E-4EAE-B791-B3C8E86F5DB6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{324C02EF-C308-44C2-B9E5-B9C41406E584}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BE82DB8D-D16A-4D19-902F-EC1AE1685BCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{39E25D24-9F10-43AC-9436-A756E8D46FAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{681D4924-96D0-4307-9814-949033A60A34}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{81C8DF0C-3003-4F0A-9C4F-62F6C6796660}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{7C776316-09D6-450A-86CE-EF0D97814403}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{86E4CB91-4012-4155-9B91-189CC0277E3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CF47676E-D9DC-422E-9E84-E8290BDBFC0D}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{CC47E28E-BB66-4512-949D-FF49BFD41D99}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{51F2AF12-2F3F-4A0D-BFE2-F3EE0FFAE75B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{D6E29683-AD0F-4142-8474-13ED944438BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{3BF36EB3-F8B8-4E52-A837-60450370A0A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cakewalk\Music Creator 6 Touch\CWMC.exe
FirewallRules: [{A16920B6-A0EA-4951-A951-79D450CF03AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cakewalk\Music Creator 6 Touch\CWMC.exe
FirewallRules: [{1190D7D0-3086-406A-ADFE-51FE58442AE0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{D3405CA3-45DB-4348-A2E3-A8841FFAA192}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FB4F8E42-16F4-4FF5-9E7E-2EB481586F3F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8AE03D0A-E4C3-4865-9E2E-71CB105ACB0A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{AE99B636-A9B7-40B4-91C3-26A5486C4285}] => (Allow) C:\Program Files (x86)\Square Enix\Batman Arkham Asylum GOTY\Binaries\ShippingPC-BmGame.exe
FirewallRules: [{8E2AF259-980D-44AB-AE62-9C408DF2B2D9}] => (Allow) C:\Program Files (x86)\Square Enix\Batman Arkham Asylum GOTY\Binaries\ShippingPC-BmGame.exe
FirewallRules: [{593CDC2A-86D6-4902-8AF3-10B92216C6F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{02E7C15C-6659-464D-9C3D-9CC20451CE7A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [TCP Query User{B4FC0BC0-44DE-4233-8225-9A8548C73512}C:\program files\guillemot\hdjtray\hdjseries2traybar.exe] => (Allow) C:\program files\guillemot\hdjtray\hdjseries2traybar.exe
FirewallRules: [UDP Query User{2C413F5B-6362-45F1-9FE6-50298095A8CC}C:\program files\guillemot\hdjtray\hdjseries2traybar.exe] => (Allow) C:\program files\guillemot\hdjtray\hdjseries2traybar.exe
FirewallRules: [{F133D687-91BA-4CBE-8820-557BFB9E7EC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{37CA03F8-E1CE-4C20-BADC-050E1988521E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{1E6D0583-D6C2-4164-9CAA-557368EA824A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{DAC16CFF-46B9-489E-8205-35E93AC6BD93}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{984705CA-D87E-4C91-968B-14CD12A0D0B0}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{210E09AE-1D98-4B89-A752-D78F25F829DA}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{F9B69D68-E478-4DAC-A75D-A049843E798D}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{5559E823-7DE5-41E5-B5FC-0A21BA713C22}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [TCP Query User{83868AF5-07F3-4B25-A3FF-584A92342864}C:\program files (x86)\origin games\mass effect 2\binaries\me2game.exe] => (Allow) C:\program files (x86)\origin games\mass effect 2\binaries\me2game.exe
FirewallRules: [UDP Query User{F399064F-1EB5-4B60-873E-CB020B8961D3}C:\program files (x86)\origin games\mass effect 2\binaries\me2game.exe] => (Allow) C:\program files (x86)\origin games\mass effect 2\binaries\me2game.exe
FirewallRules: [TCP Query User{90B36C30-B20C-4E7D-BD25-6E67BDF89FB7}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{FB618669-7098-4678-99EC-B718896C5CD1}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{33D371D4-224B-4C58-8612-93C20A9F3BE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{92223634-E285-4502-8C1B-651423D79212}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{30460405-12AD-4E99-A034-7DC60C5D5357}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM.exe
FirewallRules: [{5FE591B8-2B24-4ECC-B53E-327C226598AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM.exe
FirewallRules: [{ED215E71-A933-4278-8F96-EE6EDCC23085}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM_dev.exe
FirewallRules: [{7230C642-CBFC-42C0-90DD-A25079CF5165}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM_dev.exe
FirewallRules: [{00579F60-B656-43F5-B183-609B1521E615}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM_loader.exe
FirewallRules: [{3D9F2671-BE06-4BA7-91CA-2024206D2202}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Take On Mars\TKOM_loader.exe
FirewallRules: [TCP Query User{00AC73F8-CA89-4E7B-BEE6-01E72E360426}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [UDP Query User{7C849319-65F2-457A-A9DF-B31823D0C6EE}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [{DA44C492-F775-48A1-9236-5B072E0EA909}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{D315B5AB-A3EF-44F4-B5EB-6C396F9D0714}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [TCP Query User{87991BC8-3F3A-4370-89EA-BC1C8019E85A}C:\program files (x86)\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [UDP Query User{FAADAD17-2301-4F30-A7FA-41857773A3E7}C:\program files (x86)\starcraft ii\versions\base38749\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38749\sc2_x64.exe
FirewallRules: [TCP Query User{7201C7E6-1B21-4360-A7FE-8C84871D8E8D}C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [UDP Query User{DA144CC8-8F33-499D-8912-4E78F5F2E3F4}C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base38996\sc2_x64.exe
FirewallRules: [{54415993-8005-4CC9-9B9F-D6B7B4F9715B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{797A360C-AEE6-429B-8F76-3DF9A56834D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6387D30A-B6BC-4040-984C-2EDB7747BE69}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{24DB472E-16AC-4F70-9AD9-7CC6B2114CE5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F4A667BD-1B81-4FC3-831F-4C1D64EF7C9F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{94D7A768-E771-4F80-B9BF-96A0375D0AEF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{05057D8E-4A70-474A-B445-5CED85901210}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A7A918D5-B1C0-4B4C-803F-839AEA492BBD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{2108C8F4-904C-43B0-8621-D4E7500C0DC2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2FA6661E-9B5B-43AD-97BA-4BEBD34EAA7B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E4F60936-56ED-488F-A08A-240697C0BD73}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{AF9F58B8-C7A4-480F-B31A-405480D47386}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{8BE08632-7468-442D-8306-26AAE5F34001}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [{972965ED-FA6F-4CD7-84E2-C02BC89372A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{1D4ACF1D-FB22-4AB5-A4B3-50AAB213497C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{5453546E-5604-4A12-BB70-18A92C4A0097}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{536D6926-3420-4137-AA88-838B0A9B2E56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{FE2680E6-1202-4FE3-823E-6D5FA4A807EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Supreme Commander\bin\SupremeCommander.exe
FirewallRules: [{A2C542D5-E7F7-4D03-A490-78480E2E6430}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Supreme Commander\bin\SupremeCommander.exe
FirewallRules: [{AE0EEBE5-096B-4BC3-8CD6-BACEB0773227}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{1FF34304-337F-4DE8-859F-37BE528FE27A}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{BEE80D89-18A8-47DF-87BC-DAC050E2275A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{DFCD4C2F-0E36-4B59-9D81-91ED3FB081C8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7E2549A6-063D-4F58-B99A-2DBD2EFDD73C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{A7E4AEA7-5565-4CD9-ACA7-CA5B59721A2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{432FBF59-4FFD-4AF7-A3C0-F522AA9E034B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D3C6461-7493-40E4-89F3-E847035ABDCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Audiosurf 2\Audiosurf2.exe
FirewallRules: [{B2D1C786-7BF7-4773-9AEF-AC4257C5DE3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Audiosurf 2\Audiosurf2.exe
FirewallRules: [{24099722-3327-48D7-AD16-0EEFE6444C76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SOMA\Soma.exe
FirewallRules: [{2EFC27D4-F4D1-4F1C-A62D-94B9BD21E047}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SOMA\Soma.exe
FirewallRules: [{094F151A-2CC1-4D51-88A7-9E33A489AF3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SOMA\ModLauncher.exe
FirewallRules: [{55D916CE-74DF-4EFC-A658-81B11884C8BD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SOMA\ModLauncher.exe

==================== Wiederherstellungspunkte =========================

02-01-2016 13:15:27 Windows Update
05-01-2016 22:42:45 Windows Update
09-01-2016 00:19:41 Windows Update
12-01-2016 19:05:14 Removed IPTInstaller

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Description: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros
Service: L1C
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/12/2016 08:32:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.6143, Zeitstempel: 0x5671716f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.19045, Zeitstempel: 0x56259271
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001b706
ID des fehlerhaften Prozesses: 0x16d8
Startzeit der fehlerhaften Anwendung: 0xnvtray.exe0
Pfad der fehlerhaften Anwendung: nvtray.exe1
Pfad des fehlerhaften Moduls: nvtray.exe2
Berichtskennung: nvtray.exe3

Error: (01/12/2016 04:55:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: pcdrcui.exe, Version: 6.0.6426.22, Zeitstempel: 0x52cfaf51
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.19045, Zeitstempel: 0x56259271
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x10a4
Startzeit der fehlerhaften Anwendung: 0xpcdrcui.exe0
Pfad der fehlerhaften Anwendung: pcdrcui.exe1
Pfad des fehlerhaften Moduls: pcdrcui.exe2
Berichtskennung: pcdrcui.exe3

Error: (01/12/2016 04:55:46 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: pcdrcui.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.Reflection.TargetInvocationException
Stapel:
  bei wpfview.Program.StartController_HandelAsapiAuthenticationErrors(System.String[])
  bei wpfview.Program.Main(System.String[])

Error: (01/12/2016 04:46:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/11/2016 05:30:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SBRcni.exe, Version: 1.2.10.0, Zeitstempel: 0x4ef1c0f9
Name des fehlerhaften Moduls: CTSUUtil.dll, Version: 1.0.2.0, Zeitstempel: 0x4dda02be
Ausnahmecode: 0xc000000d
Fehleroffset: 0x0001c066
ID des fehlerhaften Prozesses: 0x17a8
Startzeit der fehlerhaften Anwendung: 0xSBRcni.exe0
Pfad der fehlerhaften Anwendung: SBRcni.exe1
Pfad des fehlerhaften Moduls: SBRcni.exe2
Berichtskennung: SBRcni.exe3

Error: (01/11/2016 05:26:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2016 02:43:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: pcdrcui.exe, Version: 6.0.6426.22, Zeitstempel: 0x52cfaf51
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.19045, Zeitstempel: 0x56259271
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0xc4c
Startzeit der fehlerhaften Anwendung: 0xpcdrcui.exe0
Pfad der fehlerhaften Anwendung: pcdrcui.exe1
Pfad des fehlerhaften Moduls: pcdrcui.exe2
Berichtskennung: pcdrcui.exe3

Error: (01/10/2016 02:43:34 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: pcdrcui.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.Reflection.TargetInvocationException
Stapel:
  bei wpfview.Program.StartController_HandelAsapiAuthenticationErrors(System.String[])
  bei wpfview.Program.Main(System.String[])

Error: (01/10/2016 09:32:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2016 05:00:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: pcdrcui.exe, Version: 6.0.6426.22, Zeitstempel: 0x52cfaf51
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.19045, Zeitstempel: 0x56259271
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x258c
Startzeit der fehlerhaften Anwendung: 0xpcdrcui.exe0
Pfad der fehlerhaften Anwendung: pcdrcui.exe1
Pfad des fehlerhaften Moduls: pcdrcui.exe2
Berichtskennung: pcdrcui.exe3


Systemfehler:
=============
Error: (01/06/2016 07:49:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Alienware Fusion Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (01/06/2016 07:49:48 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Alienware Fusion Service erreicht.

Error: (12/29/2015 08:18:34 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (12/26/2015 11:38:45 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NvNetworkService erreicht.

Error: (12/20/2015 09:49:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Alienware Fusion Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (12/20/2015 09:49:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Alienware Fusion Service erreicht.

Error: (12/19/2015 10:20:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (12/19/2015 10:19:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Alienware Fusion Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (12/19/2015 10:19:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Alienware Fusion Service erreicht.

Error: (12/19/2015 10:19:32 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005


CodeIntegrity:
===================================
  Date: 2013-10-12 09:05:34.794
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-12 09:05:34.757
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-12 08:49:25.597
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-12 08:49:25.561
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-12 08:49:04.080
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-12 08:49:04.043
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-02 20:02:22.931
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ALIENW~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-02 20:02:22.916
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ALIENW~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-02 20:02:22.666
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-02 20:02:22.650
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 58%
Installierter physikalischer RAM: 6094.31 MB
Verfügbarer physikalischer RAM: 2500.16 MB
Summe virtueller Speicher: 12186.52 MB
Verfügbarer virtueller Speicher: 8180.64 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:689.86 GB) (Free:73.83 GB) NTFS
Drive d: (STARSHIP_TROOPERS) (CDROM) (Total:7.58 GB) (Free:0 GB) UDF

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: 82CA82E5)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=8.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=689.9 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 12.01.2016 21:05
Code:
127.0.0.1      update.ross-tech.com
127.0.0.1      update.ross-tech.de
Wozu soll das denn sein?

Mav 12.01.2016 21:11
Ross-Tech hat Diagnose Systeme für VW/Audi Group.

Programm heist VCDS

Mich wundert aber das es gerade läuft. Im Netstat wird der nicht angezeigt

cosinus 12.01.2016 21:18
Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Mav 12.01.2016 21:22
Mache ich.
Kann nur sein das ich dir erst morgen Antworte da ich morgen früh raus muss, da ich Kunden besuchen muss, der etwas weiter weg ist.

cosinus 12.01.2016 21:30
Denk auch an die Möglichkeit, dass es sich einfach nur um Mailspoofing (Adressfälschung) handelt, sprich ein Spammer einfach deine Adresse als Absender eingetragen hat. Dazu muss er nix hacken sondern nur (zufällig) deine Mailadresse kennen und benutzen (als Absender)

Sicherheitshalber auch einfach mal das Passwort zum Mailaccount ändern falls nicht schon geschehen.

Mav 14.01.2016 19:13
Stimmt an Spoofing hatte ich gar nicht gedacht. Mail passwort hatte ich gleich geändert nachdem es aufgetreten ist.

Habe den Quellcode der Mail mal analysiert und dabei die Absender IP ge tracet.
Ziel der Adresse ist smolensk.ttk-centre.ru.
Scheint also doch Spoofing gewesen zu sein, zumal Der Scan sauber war.

Oder noch eine andere Idee?

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.01.14.05
  rootkit: v2016.01.09.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18163
Alienware :: ALIEN [administrator]

14.01.2016 18:19:56
mbar-log-2016-01-14 (18-19-56).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 400953
Time elapsed: 36 minute(s), 2 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 14.01.2016 22:33
Dann betrachte ich die Sache als erledigt...

Mav 15.01.2016 16:53
Jap.

Danke für die Hilfe trotzdem


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:56 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27