Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   ctrlo.co Malware lässt sich nicht entfernen (https://www.trojaner-board.de/176335-ctrlo-co-malware-laesst-entfernen.html)

bennile 24.02.2016 15:52
ctrlo.co Malware lässt sich nicht entfernen
 
Hallo, seit ca. einem Monat taucht bei mir ständig ctrlo.co auf. Das passiert meistens wenn ich auf einen Link klicke oder weitergeleitet werde. Ich habe es bereits mit Adw-Cleaner und Malwarebytes versucht, was mich aber nicht zu einem Ergebnis gebracht hat. Ich habe auch schon alle nicht notwendigen Programme deinstalliert und die Registry durchsucht. Bis jetzt ist das ganze nur in Chrome aufgetreten, wobei ich mir nicht sicher bin ob andere Browser betroffen sind, weil ich sonst nur Tor verwende. :dankeschoen:

M-K-D-B 24.02.2016 17:02
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!



Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!




Alle Logdateien von AdwCleaner und MBAM mit Funden posten!


Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:


Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)






Schritt 2
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.







Bitte poste mit deiner nächsten Antwort
  • alle Logdateien von AdwCleaner und MBAM,
  • die Logdatei von TDSS-Killer,
  • die beiden neuen Logdateien von FRST.

bennile 27.02.2016 14:46
Es könnte sein dass ich noch etwas länger brauche um die Logs zu schicken, da bei meinem PC das Netzteil kaputt gegangen ist. Sobald er wieder geht schicke ich alles.

M-K-D-B 27.02.2016 17:06
Zitat:
Zitat von bennile (Beitrag 1565672)
Es könnte sein dass ich noch etwas länger brauche um die Logs zu schicken, da bei meinem PC das Netzteil kaputt gegangen ist. Sobald er wieder geht schicke ich alles.
Alles klar, ich warte ein paar Tage.

bennile 02.03.2016 17:02
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:24-02-2016
durchgeführt von User (Administrator) auf PC-02 (24-02-2016 17:14:04)
Gestartet von C:\Users\User\Documents\EGDownloads
Geladene Profile: User & Benni (Verfügbare Profile: User & Benni)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\49.0.2623.40\remoting_host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\49.0.2623.40\remoting_host.exe
() C:\Program Files (x86)\DiskBoss\bin\diskbsa.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
() C:\Program Files (x86)\EagleGet\EGMonitor.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Softomotive) C:\Program Files\WinAutomation\WinAutomation.ServiceAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
() C:\Program Files (x86)\EagleGet\EGMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Softomotive) C:\Program Files\WinAutomation\WinAutomation.DIAgent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe
(Sand Studio) C:\Program Files (x86)\AirDroid\AirDroid.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(CMedia) C:\Program Files\ASUS Xonar DGX Audio\Customapp\AsusAudioCenter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(EagleGet.com) C:\Program Files (x86)\EagleGet\EagleGet.exe
(Flux Software LLC) C:\Users\User\AppData\Local\FluxSoftware\Flux\flux.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\audiosrv.exe
(Mega Limited) C:\Users\User\AppData\Local\MEGAsync\MEGAsync.exe
(Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Razer Inc.) C:\Users\User\AppData\Local\Temp\Razer\RzUpdater\RzUpdateManager.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
( ) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM\...\Run: [hola] => C:\Program Files\Hola\app\hola.exe --silent
HKLM\...\Run: [WinAutomation Agent] => C:\Program Files\WinAutomation\WinAutomation.DIAgent.exe [358496 2015-10-01] (Softomotive)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] => C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM-x32\...\Run: [ADSK DLMSession] => C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1627032 2014-02-05] (Autodesk, Inc.)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-09-17] ()
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [804168 2016-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [594240 2016-01-13] (Razer Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-02-23] (Spotify Ltd)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 12\AudialsNotifier.exe
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [Spotify] => C:\Users\User\AppData\Roaming\Spotify\Spotify.exe [6743664 2016-02-23] (Spotify Ltd)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [746648 2016-02-18] (Google Inc.)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [AirDroid 3] => C:\Program Files (x86)\AirDroid\AirDroid.exe [8207360 2016-02-03] (Sand Studio)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50605696 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [EagleGet] => C:\Program Files (x86)\EagleGet\Eagleget.exe [1907712 2016-01-07] (EagleGet.com)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Run: [f.lux] => C:\Users\User\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\MountPoints2: {2ddbcffd-3faa-11e4-82f3-806e6f6e6963} - D:\LaunchBFII.exe
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [746648 2016-02-18] (Google Inc.)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50605696 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-02-23] (Spotify Ltd)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [EPSON BX320FW Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGIE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 12\AudialsNotifier.exe
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [Voobly] => "C:\Program Files (x86)\Voobly\voobly.exe" --startup
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Run: [Spotify] => C:\Users\User\AppData\Roaming\Spotify\Spotify.exe [6743664 2016-02-23] (Spotify Ltd)
HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\MountPoints2: {2ddbcffd-3faa-11e4-82f3-806e6f6e6963} - D:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-11-06]
ShortcutTarget: MEGAsync.lnk -> C:\Users\User\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyServer: [S-1-5-21-462456141-278214493-2578891151-1004] => localhost:4001
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{0679EA79-2881-4C95-A693-129A0E9E20F1}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{0679EA79-2881-4C95-A693-129A0E9E20F1}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-462456141-278214493-2578891151-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-02-24] (Microsoft Corporation)
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2016-02-24] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-24] (Microsoft Corporation)
BHO-x32: EGet Class -> {1E871FF8-029C-4732-8AA7-39E3D3872057} -> C:\Program Files (x86)\EagleGet\eagleSniffer.dll [2016-01-07] (EagleGet.com)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-02-24] (Microsoft Corporation)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2014-09-17] (Wondershare)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-21] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-02-24] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-21] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-12-13] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-12-13] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-12-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\.DEFAULT: @hola.org/FlashPlayer -> C:\Users\User\AppData\Local\Hola\firefox_hola\app\flash\NPSWF32_18_0_0_232.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @hola.org/vlc -> C:\Users\User\AppData\Local\Hola\firefox_hola\app\vlc\npvlc.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-462456141-278214493-2578891151-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-11-18] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-462456141-278214493-2578891151-1000: eagleget.com/EagleGet32 -> C:\Program Files (x86)\EagleGet\npEagleget.dll [2016-01-07] (EagleGet)
FF Plugin HKU\S-1-5-21-462456141-278214493-2578891151-1000: eagleget.com/EagleGet64 -> C:\Program Files (x86)\EagleGet\npEagleget64.dll [2016-01-07] (EagleGet)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\blekko-ssl.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml [2015-02-26]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml [2015-02-26]
FF Extension: Wondershare Video Converter Ultimate - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-02-09] [ist nicht signiert]
FF Extension: AutoProxy - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\extensions\autoproxy@autoproxy.org.xpi [2015-12-15]
FF Extension: Avira Browser Safety - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\Extensions\abs@avira.com [2016-01-07]
FF Extension: EagleGet - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\Extensions\eagleget_ffext@eagleget.com.xpi [2015-09-21]
FF Extension: CanvasBlocker - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\CanvasBlocker@kkapsner.de.xpi [2015-02-26] [ist nicht signiert]
FF Extension: HTTPS-Everywhere - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org [2015-03-02] [ist nicht signiert]
FF Extension: JonDoFox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi [2015-02-26] [ist nicht signiert]
FF Extension: NoScript - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-11-24] [ist nicht signiert]
FF Extension: Cookie Controller - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{ac2cfa60-bc96-11e0-962b-0800200c9a66}.xpi [2015-02-26] [ist nicht signiert]
FF Extension: DownloadHelper - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2015-03-02] [ist nicht signiert]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-26] [ist nicht signiert]
FF Extension: ProfileSwitcher - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi [2015-02-26] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi => nicht gefunden

Chrome:
=======
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3325584&octid=EB_ORIGINAL_CTID&ISID=MDB25D7E2-C3D2-4FC7-A136-2646E3C94238&SearchSource=55&CUI=&UM=2&UP=SP52951949-1B2B-4BBD-A8AD-F94E68307CCA&SSPV=
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3325584&octid=EB_ORIGINAL_CTID&ISID=MDB25D7E2-C3D2-4FC7-A136-2646E3C94238&SearchSource=55&CUI=&UM=2&UP=SP52951949-1B2B-4BBD-A8AD-F94E68307CCA&SSPV=","hxxp://www.search.ask.com/?o=APN10646A&gct=hp&d=102-113&v=n12521-350&t=4","hxxp://istart.webssearches.com/?type=hp&ts=1417358863&from=irs&uid=HGSTXHTS541010A9E680_JA1000101G64EP1G64EPX","hxxp://www.istartsurf.com/?type=hp&ts=1432674341&z=7d7bf131147ba1f7c5727e4g8zfcbofqamfzac7c8t&from=face&uid=ST1000DX001-1CM162_Z1DD4HXWXXXXZ1DD4HXW","hxxp://www.istartsurf.com/?type=hp&ts=1438016575&z=b912a4fc586c7c0bdb9f49egdz8c9b3edg0q3wbo1b&from=obw&uid=HGSTXHTS541010A9E680_JA1000101G64EP1G64EPX"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-11-17]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-28]
CHR Extension: (IDM Integration Module Extension) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlojoclkbpmfhakhaagjpjfifbaoadf [2015-11-13]
CHR Extension: (Tampermonkey) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-12-23]
CHR Extension: (Avira Browser Safety) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-23]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-28]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2016-02-23]
CHR Extension: (Stealthy) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2015-11-03]
CHR Extension: (Tom's Hardware DE - Meine Beiträge) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhmefakpghjinjdaegmogeclalmfeke [2015-07-20]
CHR Extension: (EagleGet Free Downloader) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaebhgioafceeldhgjmendlfhbfjefmo [2016-01-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-02]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <nicht gefunden>
CHR HKU\S-1-5-21-462456141-278214493-2578891151-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files (x86)\EagleGet\addon\eagleget_cext@eagleget.com.crx [2016-01-07]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files (x86)\EagleGet\addon\eagleget_cext@eagleget.com.crx [2016-01-07]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-03] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2016-02-22] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1417592 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [249120 2016-01-05] (Avira Operations GmbH & Co. KG)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\49.0.2623.40\remoting_host.exe [69016 2016-02-05] (Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2809072 2016-01-20] (Microsoft Corporation)
R2 DiskBoss Service; C:\Program Files (x86)\DiskBoss\bin\diskbsa.exe [122880 2015-11-03] () [Datei ist nicht signiert]
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-12-08] (EasyAntiCheat Ltd)
R2 egGetSvc; C:\Program Files (x86)\EagleGet\EGMonitor.exe [238080 2016-01-07] () [Datei ist nicht signiert]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [647680 2015-12-19] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1028096 2015-12-19] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-06] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1009904 2016-02-11] (Overwolf LTD)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-10-14] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-11-05] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
R2 WinAutomation Service; C:\Program Files\WinAutomation\WinAutomation.ServiceAgent.exe [272992 2015-10-01] (Softomotive)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 AODDriver4.3.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2015-12-13] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [75472 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-08-19] (BlueStack Systems)
S3 CEDRIVER60; C:\Program Files (x86)\Cheat Engine 6.4\dbk64.sys [64064 2014-06-20] ()
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2727936 2011-12-20] (C-Media Inc)
R3 eagleGet; C:\Windows\System32\Drivers\eagleGet.sys [77624 2016-01-06] (eagleGet)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GPUZ; C:\Windows\TEMP\GPUZ.sys [27008 2015-04-27] ()
S3 jakstaVA; C:\Windows\System32\DRIVERS\jaksta_va.sys [103816 2014-12-09] (e2eSoft)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2015-11-20] (hxxp://libusb-win32.sourceforge.net)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2015-12-13] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13536 2015-05-27] ()
S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-09-22] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [Datei ist nicht signiert]
S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [54200 2012-09-26] (Thesycon GmbH, Germany)
R3 USBPcap; C:\Windows\System32\DRIVERS\USBPcap.sys [48344 2015-12-10] (USBPcap)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-11-10] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [194976 2015-11-10] (Oracle Corporation)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2015-02-02] (Wondershare)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 cpuz135; \??\C:\Users\User\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 pmem; \??\C:\Users\User\AppData\Local\Temp\_MEI38522\drivers\winpmem64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-24 16:11 - 2016-02-24 16:11 - 00000000 ____D C:\Windows\LastGood
2016-02-23 19:16 - 2016-02-23 19:16 - 84408544 _____ C:\Users\User\Documents\lol.html
2016-02-23 17:10 - 2016-02-23 17:10 - 00000000 ____D C:\Users\User\Documents\Klei
2016-02-23 17:08 - 2016-02-23 17:08 - 00000000 ____D C:\Program Files\7-Zip
2016-02-11 16:42 - 2016-02-11 16:42 - 00182168 _____ (Microsoft Corporation) C:\Users\User\Downloads\trilogyii.exe
2016-02-10 21:43 - 2016-02-10 21:43 - 00000000 ____D C:\Users\User\Documents\My Cheat Tables
2016-02-10 17:12 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 17:12 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 17:12 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 17:12 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 17:12 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 17:12 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-10 17:12 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-10 17:12 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-10 17:12 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-02-10 17:12 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-02-10 17:12 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 17:12 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-10 17:12 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 17:12 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-10 17:12 - 2016-01-16 20:06 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-10 17:12 - 2016-01-16 19:54 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-10 17:12 - 2016-01-11 15:08 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-10 17:12 - 2016-01-11 15:08 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-10 17:12 - 2016-01-11 15:08 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-10 17:12 - 2016-01-11 15:08 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-10 17:12 - 2016-01-11 15:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-10 17:12 - 2016-01-06 20:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-10 17:12 - 2016-01-06 20:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-10 17:12 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-02-10 17:11 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 17:11 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-10 17:11 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 17:11 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 17:11 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 17:11 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 17:11 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 17:11 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 17:11 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 17:11 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 17:11 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 17:11 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 17:11 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 17:11 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 17:11 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 17:11 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 17:11 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 17:11 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 17:11 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 17:11 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 17:11 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-10 17:11 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 17:11 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-10 17:11 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-10 17:11 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-02-10 17:11 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 17:11 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-02-10 17:11 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-10 17:11 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-10 17:11 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-10 17:11 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-02-10 17:11 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 17:11 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 17:11 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 17:11 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 17:11 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 17:11 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-10 17:11 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-10 17:11 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-02-10 17:11 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-10 17:11 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-10 17:11 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-10 17:11 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-10 17:11 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-02-10 17:11 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 17:11 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-10 17:11 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-10 17:11 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-10 17:11 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-02-10 17:11 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 17:11 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-10 17:11 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-10 17:07 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 17:07 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 17:07 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 17:07 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 17:07 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-02-10 17:07 - 2016-01-22 07:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-10 17:07 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 17:07 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 17:07 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 17:07 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 17:07 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 17:07 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-02-10 17:07 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 17:07 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 17:07 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 17:07 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 17:07 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 17:07 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 17:07 - 2016-01-22 07:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-10 17:07 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 17:07 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 17:07 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 17:07 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-10 17:07 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-10 17:07 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 17:07 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 17:07 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-02-10 17:07 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-02-10 17:07 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-10 17:07 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-10 17:07 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-02-10 17:07 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-10 17:07 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-10 17:07 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-02-10 17:07 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 06:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-10 17:07 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 17:07 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-02-10 17:07 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 17:07 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-02-10 17:07 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 17:07 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 17:07 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 17:07 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 17:07 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 17:07 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 17:07 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-02-10 17:07 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-02-10 17:07 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-02-10 17:07 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-02-10 17:07 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-02-10 17:07 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 17:07 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 17:07 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 17:07 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-10 17:07 - 2016-01-11 20:05 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-10 17:07 - 2016-01-11 20:05 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-10 17:07 - 2016-01-11 20:05 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-10 17:07 - 2016-01-11 19:52 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-10 17:07 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-10 17:07 - 2016-01-11 19:26 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 17:07 - 2016-01-11 19:24 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 17:07 - 2016-01-11 19:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-10 17:07 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 17:07 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-10 17:07 - 2016-01-11 19:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 17:07 - 2016-01-11 19:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 17:07 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-10 17:07 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-10 17:07 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-10 17:07 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-10 17:07 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 17:07 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-04 22:05 - 2016-02-12 15:32 - 00000000 ____D C:\Users\User\Documents\Euro Truck Simulator 2
2016-02-04 20:46 - 2016-02-04 20:46 - 00022200 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2016-02-04 20:46 - 2016-02-04 20:46 - 00000000 ____D C:\Users\User\AppData\Local\eSupport.com
2016-02-04 20:37 - 2016-02-24 17:15 - 00000000 ____D C:\Users\User\Documents\EGDownloads
2016-02-04 00:10 - 2016-02-04 00:17 - 00000000 ____D C:\Users\User\Documents\Usb
2016-02-04 00:09 - 2016-02-04 00:09 - 00004912 _____ C:\Windows\System32\Tasks\usb backup
2016-02-04 00:03 - 2016-02-04 00:18 - 00000050 _____ C:\Users\User\Documents\usb auto backup.bat
2016-02-03 23:24 - 2016-02-04 00:39 - 00000000 ____D C:\Users\User\Documents\Usb_backup
2016-02-03 23:22 - 2016-02-03 23:22 - 00000000 ____D C:\Users\User\Documents\stronghold crusader
2016-02-03 23:09 - 2016-02-03 23:09 - 00000000 ____D C:\Users\Public\Documents\AirDroid
2016-02-03 23:05 - 2016-02-04 22:07 - 00000000 ____D C:\Users\User\Documents\Programme
2016-02-03 22:27 - 2016-02-03 22:27 - 02626439 _____ C:\Users\User\Downloads\SuperSU_v2_46_apkarchive_com (1).zip
2016-02-03 22:26 - 2016-02-03 22:26 - 02626439 _____ C:\Users\User\Downloads\SuperSU_v2_46_apkarchive_com.zip
2016-02-02 21:44 - 2016-02-02 21:44 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2016-02-02 21:44 - 2016-02-02 21:44 - 00000000 ____D C:\Users\User\AppData\Local\FluxSoftware
2016-02-02 21:43 - 2016-02-02 21:44 - 00597304 _____ C:\Users\User\Downloads\flux-setup.exe
2016-02-01 18:10 - 2016-02-23 18:48 - 00000000 ____D C:\Users\User\Desktop\nice
2016-02-01 13:36 - 2016-02-01 13:36 - 00000000 ____D C:\Users\User\Downloads\CF-Auto-Root-kminilte-kminiltexx-smg800f
2016-02-01 13:35 - 2016-02-01 13:36 - 19367632 _____ C:\Users\User\Downloads\CF-Auto-Root-kminilte-kminiltexx-smg800f.zip
2016-02-01 13:09 - 2016-01-08 09:51 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2016-02-01 13:09 - 2016-01-08 09:51 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2016-02-01 13:09 - 2016-01-08 09:51 - 00213088 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2016-02-01 13:09 - 2016-01-08 09:51 - 00120416 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2016-01-31 14:45 - 2016-01-31 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Action Replay DSi Code Manager
2016-01-31 14:45 - 2016-01-31 14:45 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2016-01-31 14:17 - 2016-01-31 14:17 - 00000000 ____D C:\Program Files\DIFX
2016-01-31 14:16 - 2016-01-31 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Action Replay Firmware Update
2016-01-31 14:16 - 2016-01-31 14:45 - 00000000 ____D C:\Program Files (x86)\Datel
2016-01-31 14:16 - 2012-09-26 15:55 - 00054200 _____ (Thesycon GmbH, Germany) C:\Windows\system32\Drivers\dsiarhwprog_x64.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-24 17:13 - 2015-12-28 22:13 - 00000000 ____D C:\FRST
2016-02-24 17:10 - 2014-09-21 14:57 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2016-02-24 16:42 - 2014-10-26 18:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-24 16:16 - 2015-06-01 16:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-24 16:11 - 2015-08-25 13:42 - 00000000 ____D C:\Program Files (x86)\Razer
2016-02-24 16:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-02-24 15:27 - 2015-12-13 21:15 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-24 15:26 - 2015-12-13 21:12 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-02-24 15:21 - 2009-07-14 05:45 - 00020880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-24 15:21 - 2009-07-14 05:45 - 00020880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-24 15:16 - 2014-09-18 23:29 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-24 15:11 - 2015-11-19 13:30 - 00000000 ____D C:\Users\User\Documents\AirDroid
2016-02-24 15:09 - 2014-10-30 18:09 - 00000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2016-02-24 15:09 - 2014-09-20 22:47 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2016-02-24 15:09 - 2014-09-20 22:46 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2016-02-24 15:08 - 2015-06-01 16:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-24 15:07 - 2015-12-19 15:14 - 00119296 _____ C:\Windows\SysWOW64\zlib.dll
2016-02-24 15:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-23 20:26 - 2014-09-26 17:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-02-23 16:06 - 2016-01-06 16:06 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-02-23 16:03 - 2015-11-30 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
2016-02-22 18:21 - 2015-04-23 19:19 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-22 18:20 - 2014-09-18 23:28 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-22 18:19 - 2015-06-01 16:37 - 00002237 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-22 18:13 - 2015-02-09 22:29 - 00140448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-02-22 18:13 - 2015-02-09 22:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-02-22 18:12 - 2015-11-06 21:11 - 00000000 ____D C:\Users\User\AppData\Local\MEGAsync
2016-02-12 21:39 - 2009-07-14 05:45 - 00478216 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-12 21:37 - 2014-12-21 12:48 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-12 21:37 - 2014-09-18 22:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-02-12 21:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-02-12 12:08 - 2009-07-14 18:58 - 00746614 _____ C:\Windows\system32\perfh007.dat
2016-02-12 12:08 - 2009-07-14 18:58 - 00165784 _____ C:\Windows\system32\perfc007.dat
2016-02-12 12:08 - 2009-07-14 06:13 - 01724054 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-11 22:29 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 19:13 - 2015-05-26 19:58 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2016-02-11 16:40 - 2015-12-29 18:06 - 00000000 ____D C:\Users\User\Desktop\flac songs
2016-02-11 16:03 - 2014-09-19 04:25 - 00000000 ____D C:\Windows\system32\MRT
2016-02-11 15:54 - 2014-09-19 04:25 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-10 21:42 - 2014-10-26 18:26 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-10 21:42 - 2014-10-07 14:41 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 21:42 - 2014-10-07 14:41 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-10 20:43 - 2014-09-20 22:02 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2016-02-10 20:42 - 2016-01-18 19:51 - 00001130 _____ C:\Users\User\Desktop\nativelog.txt
2016-02-05 14:22 - 2014-09-19 04:16 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-04 20:38 - 2014-09-21 16:45 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-02-04 20:37 - 2015-06-22 15:13 - 00000902 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-02-04 14:59 - 2014-09-21 14:57 - 00000000 ____D C:\ProgramData\Skype
2016-02-03 23:17 - 2015-10-30 13:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-02-03 23:11 - 2015-06-01 16:37 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 23:11 - 2015-06-01 16:37 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-03 22:31 - 2015-12-15 20:12 - 00000000 ____D C:\Users\User\.android
2016-02-03 22:16 - 2015-11-19 13:30 - 00000000 ____D C:\Program Files (x86)\AirDroid
2016-02-01 20:03 - 2014-11-02 22:13 - 00007608 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2016-02-01 17:22 - 2015-06-03 16:11 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-02-01 13:09 - 2015-12-03 14:06 - 00000000 ____D C:\Program Files\Samsung
2016-02-01 13:09 - 2014-10-10 18:45 - 00001969 _____ C:\Users\Public\Desktop\Samsung Kies 3.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-03 18:12 - 2015-03-03 21:41 - 0009358 _____ () C:\Users\User\AppData\Roaming\.freeciv-client-rc-2.4
2015-10-14 22:23 - 2015-10-14 22:23 - 0000092 _____ () C:\Users\User\AppData\Local\fusioncache.dat
2015-07-01 15:13 - 2015-07-01 15:13 - 0000000 ___SH () C:\Users\User\AppData\Local\LumaEmu
2015-12-19 15:06 - 2016-01-14 00:29 - 0008018 _____ () C:\Users\User\AppData\Local\mbt-actwiz.log
2016-01-20 20:25 - 2016-01-20 20:25 - 0011379 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-11-02 22:13 - 2016-02-01 20:03 - 0007608 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2015-12-14 16:43 - 2015-12-14 16:44 - 0000000 _____ () C:\Users\User\AppData\Local\{73E0B326-6CD4-45A9-BC65-546E8ED0A514}
2015-11-14 16:35 - 2015-11-21 12:15 - 0000125 ___SH () C:\ProgramData\.zreglib
2014-09-19 04:10 - 2014-09-19 04:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Benni\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\130741199635758329.exe
C:\Users\User\AppData\Local\Temp\13074119965492942685.exe
C:\Users\User\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\bassmod.dll
C:\Users\User\AppData\Local\Temp\Cleanup.dll
C:\Users\User\AppData\Local\Temp\comver.dll
C:\Users\User\AppData\Local\Temp\cpuz165.exe
C:\Users\User\AppData\Local\Temp\ddu.exe
C:\Users\User\AppData\Local\Temp\difxapi.dll
C:\Users\User\AppData\Local\Temp\DLMGuardian.exe
C:\Users\User\AppData\Local\Temp\drm_dyndata_7340014.dll
C:\Users\User\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\User\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\User\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\User\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\User\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\User\AppData\Local\Temp\eauninstall.exe
C:\Users\User\AppData\Local\Temp\Execute2App.exe
C:\Users\User\AppData\Local\Temp\gkey.exe
C:\Users\User\AppData\Local\Temp\handle.exe
C:\Users\User\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\User\AppData\Local\Temp\installer_x64.exe
C:\Users\User\AppData\Local\Temp\installer_x86.exe
C:\Users\User\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\User\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\User\AppData\Local\Temp\LZMA.DLL
C:\Users\User\AppData\Local\Temp\msvcm80.dll
C:\Users\User\AppData\Local\Temp\msvcp80.dll
C:\Users\User\AppData\Local\Temp\msvcp90.dll
C:\Users\User\AppData\Local\Temp\msvcr80.dll
C:\Users\User\AppData\Local\Temp\msvcr90.dll
C:\Users\User\AppData\Local\Temp\pkeyui.exe
C:\Users\User\AppData\Local\Temp\proxy_vole1560057504169529622.dll
C:\Users\User\AppData\Local\Temp\proxy_vole657708609138677282.dll
C:\Users\User\AppData\Local\Temp\proxy_vole7280495562953483501.dll
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\raptrpatch.exe
C:\Users\User\AppData\Local\Temp\raptr_stub.exe
C:\Users\User\AppData\Local\Temp\sdan.exe
C:\Users\User\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\User\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\User\AppData\Local\Temp\sfamcc00001.dll
C:\Users\User\AppData\Local\Temp\sfamcc00002.dll
C:\Users\User\AppData\Local\Temp\sfamcc00003.dll
C:\Users\User\AppData\Local\Temp\sfamcc00004.dll
C:\Users\User\AppData\Local\Temp\sfareca00001.dll
C:\Users\User\AppData\Local\Temp\sfareca00004.dll
C:\Users\User\AppData\Local\Temp\sfextra.dll
C:\Users\User\AppData\Local\Temp\SIntf16.dll
C:\Users\User\AppData\Local\Temp\SIntf32.dll
C:\Users\User\AppData\Local\Temp\SIntfNT.dll
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
C:\Users\User\AppData\Local\Temp\streaming-audio-recorder_full1306.exe
C:\Users\User\AppData\Local\Temp\tmp2329.exe
C:\Users\User\AppData\Local\Temp\tmp360D.exe
C:\Users\User\AppData\Local\Temp\tmpB71F.exe
C:\Users\User\AppData\Local\Temp\TUUUninstallHelper.exe
C:\Users\User\AppData\Local\Temp\USkinDLL.dll
C:\Users\User\AppData\Local\Temp\utils.dll
C:\Users\User\AppData\Local\Temp\wabk.exe
C:\Users\User\AppData\Local\Temp\YgoUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-23 19:46

==================== Ende von FRST.txt ============================

bennile 02.03.2016 17:12
Addition.txt
 
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:24-02-2016
durchgeführt von User (2016-02-24 17:15:12)
Gestartet von C:\Users\User\Documents\EGDownloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-09-19 02:53:49)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-462456141-278214493-2578891151-500 - Administrator - Disabled)
ASPNET (S-1-5-21-462456141-278214493-2578891151-1011 - Limited - Enabled)
Benni (S-1-5-21-462456141-278214493-2578891151-1004 - Administrator - Enabled) => C:\Users\Benni
Gast (S-1-5-21-462456141-278214493-2578891151-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-462456141-278214493-2578891151-1007 - Limited - Enabled)
User (S-1-5-21-462456141-278214493-2578891151-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\uTorrent) (Version: 3.4.2.35141 - BitTorrent Inc.)
3DMark (HKLM-x32\...\{4198fd8f-98bd-4240-9b3a-ab2643e532f6}) (Version: 1.3.708.0 - Futuremark)
3DMark (Version: 1.3.708.0 - Futuremark) Hidden
7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
7-Zip 9.38 beta (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)
AirDroid 3.2.0.0 (HKLM-x32\...\AirDroid) (Version: 3.2.0.0 - Sand Studio)
Akamai NetSession Interface (HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD OverDrive (HKLM-x32\...\{34D5220A-58D0-473C-90E4-15136C3FB0E3}) (Version: 4.3.1.0690 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.000 - Asmedia Technology)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.7.6 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.5.7.6 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
ASUS Xonar DG Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
Autodesk Download Manager (HKLM-x32\...\{C897D9EC-13C6-4A22-ABF7-33F2126A7DB6}) (Version: 3.0.8.0 - Autodesk, Inc.)
AutoIt v3.3.14.2 (HKLM-x32\...\AutoItv3) (Version: 3.3.14.2 - AutoIt Team)
AVG PC TuneUp 2015 (de-DE) (x32 Version: 15.0.1001.403 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (x32 Version: 15.0.1001.403 - AVG Technologies) Hidden
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.10.150607 - )
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.141 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{ccdc9cfe-8ba7-4c6c-ac5f-b2d6cfa49efc}) (Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG) Hidden
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.6 - GPL Public release.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version:  - DICE)
Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
Bloons TD5 (HKLM-x32\...\Steam App 306020) (Version:  - Ninja Kiwi)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{473E82D7-79E2-43DF-8FA0-025407C93191}) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version:  - Torn Banner Studios)
Chrome Remote Desktop Host (HKLM-x32\...\{EBFF2EA1-3944-4CA2-89FA-8B70C0058DD3}) (Version: 49.0.2623.40 - Google Inc.)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crysis (HKLM-x32\...\Steam App 17300) (Version:  - Crytek)
Crysis Warhead (HKLM-x32\...\Steam App 17330) (Version:  - Crytek)
Crysis Wars (HKLM-x32\...\Steam App 17340) (Version:  - Crytek)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
DIE SIEDLER - Aufstieg eines Königreichs (HKLM-x32\...\{D3F80A98-05AB-4D8C-9272-766CCFA6A48D}) (Version: 1.00.0000 - Ubisoft)
DiskBoss 6.2.14 (HKLM-x32\...\DiskBoss) (Version: 6.2.14 - Flexense Computing Systems Ltd.)
Druckerdeinstallation für EPSON BX320FW Series (HKLM\...\EPSON BX320FW Series) (Version:  - SEIKO EPSON Corporation)
Eisenbahn.exe Professional 5.0 DEMO (HKLM-x32\...\{4E65796E-62E4-4EF7-9E1E-AADB7E0371CB}) (Version: 5.00.0000 - Trend)
EPSON BX305 Plus Series Printer Uninstall (HKLM\...\EPSON BX305 Plus Series) (Version:  - SEIKO EPSON Corporation)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
f.lux (HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Flux) (Version:  - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Futuremark SystemInfo (HKLM-x32\...\{E114E635-F06E-43B4-A800-74A22536B1B0}) (Version: 4.30.472.0 - Futuremark)
GameRanger (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\GameRanger) (Version:  - GameRanger Technologies)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GameWiz32 (HKLM-x32\...\GameWiz32) (Version: 1.43 - Nico Ebert)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Drive (HKLM-x32\...\{EF61675D-9BBC-4EC7-B906-F13BE8D3BD20}) (Version: 1.27.1227.2094 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hacknet (HKLM-x32\...\Steam App 365450) (Version:  - Team Fractal Alligator)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4797.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\OneDriveSetup.exe) (Version: 17.3.6281.1202 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 36.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0 (x86 de)) (Version: 36.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0 - Mozilla)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4797.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4797.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4797.1003 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Oracle VM VirtualBox 5.0.10 (HKLM\...\{F6E922CF-068D-4AFC-8DBF-4636B84AF0A5}) (Version: 5.0.10 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.92.21.0 - Overwolf Ltd.)
Patch testing for Chivalry (HKLM-x32\...\Steam App 232210) (Version:  - )
Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.1.9 - PowerUp Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Python 2.7 pycurl-7.19.0.2 (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\pycurl-py2.7) (Version:  - )
Python 2.7.8 (HKLM-x32\...\{61121B12-88BD-4261-A6EE-AB32610A56DD}) (Version: 2.7.8150 - Python Software Foundation)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.28549 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7023 - Realtek Semiconductor Corp.)
Robocraft (HKLM-x32\...\Steam App 301520) (Version:  - Freejam)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
Rome - Total War - Gold Edition (HKLM-x32\...\{2E97F7E8-ABDE-4E0D-B0AD-B6B4BAD89E24}) (Version: 1.6 - The Creative Assembly)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.15075.2 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.15075.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Setup - DiRT Rally Early Access ... (HKLM-x32\...\Setup - DiRT Rally Early Access ...) (Version: ... - Codemasters)
SketchUp 2015 (HKLM\...\{C630FC42-E196-4B6D-B12B-4CB8D5F399D7}) (Version: 15.1.106 - Trimble Navigation Limited)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Splashtop Personal (HKLM-x32\...\{E7CF0F14-8C1D-41F3-85ED-579C108262C7}) (Version: 2.6.0.1 - Splashtop Inc.)
Splashtop Software Updater (HKLM-x32\...\Splashtop Software Updater) (Version: 1.5.6.15 - Splashtop Inc.)
Spotify (HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\Spotify) (Version: 1.0.23.90.g42187855 - Spotify AB)
Spotify (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\Spotify) (Version: 1.0.3.101.gbfa97dfe - Spotify AB)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Star Wars Republic Commando (HKLM-x32\...\{DFAE9340-E8BB-4433-9A08-C8334DAFE1B9}) (Version: 1.0 - )
Stronghold Crusader Extreme HD (HKLM-x32\...\Steam App 16700) (Version:  - Firefly Studios)
Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version:  - FireFly Studios)
T3A:Online for BFME2 (HKLM-x32\...\{A60D4C53-A632-40C8-A583-DC632EC9A926}) (Version: 1.5.0 - The3rdAge.net)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.2 - Electronic Arts)
Toy Soldiers (HKLM-x32\...\Steam App 98300) (Version:  - Signal Studios)
Train Fever (HKLM-x32\...\Steam App 304730) (Version:  - Urban Games)
Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version:  - Dovetail Games)
Unity Web Player (HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\UnityWebPlayer) (Version: 4.6.0f3 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-462456141-278214493-2578891151-1004\...\UnityWebPlayer) (Version: 4.6.0f3 - Unity Technologies ApS)
USBPcap 1.1.0.0-g794bf26 (HKLM\...\USBPcap) (Version:  - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.8.0 - Elaborate Bytes)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Wargame: Red Dragon (HKLM-x32\...\Steam App 251060) (Version:  - Eugen Systems)
WinAutomation (HKLM-x32\...\WinAutomation) (Version: 5.0.4.3995 - Softomotive Ltd)
WinAutomation (Version: 5.0.4.3995 - Softomotive Ltd) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - Datel Design & Development (usbio) USBIOControlledDevices  (04/21/2009 2.40.0.0) (HKLM\...\30853F7174C6EB267FDAABE50A369169D18DA611) (Version: 04/21/2009 2.40.0.0 - Datel Design & Development)
Windows-Treiberpaket - Datel Design & Development USBIOControlledDevices  (04/21/2009 2.40.0.0) (HKLM\...\8555DF8099612EF2F8333DC0EC454113D4537E7B) (Version: 04/21/2009 2.40.0.0 - Datel Design & Development)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
YGOPro DevPro Launcher (HKLM-x32\...\{8D09DD74-E630-4629-80DC-7FB13AE58F3F}) (Version: 2.0.10 - DevPro, LLC)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-462456141-278214493-2578891151-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-462456141-278214493-2578891151-1000_Classes\CLSID\{6d4c2238-c1b9-5d67-81d8-2cf6949997db}\InprocServer32 -> C:\Program Files (x86)\EagleGet\npEagleget64.dll (EagleGet)
CustomCLSID: HKU\S-1-5-21-462456141-278214493-2578891151-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0B67FBBC-9F63-4192-B662-A3F7063E70C2} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-02-11] (Overwolf LTD)
Task: {0EF70F63-4055-469B-8AEE-61D2785C4689} - System32\Tasks\{1DBEE3A1-7E19-452B-A42D-146B4D29F6BC} => C:\Program Files (x86)\Steam\SteamApps\common\Crysis\runme.exe [2015-10-14] ()
Task: {152D275B-FB3E-4BD3-AA83-04BC1AB4BAF5} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-04-15] ()
Task: {1EA866F9-F382-4B76-9B40-B0C3096605E6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-01-12] (Microsoft Corporation)
Task: {24BC36FC-1E1C-493A-A69A-FD647AB329F1} - System32\Tasks\{2E1CEE81-098C-4095-8B9F-A5E5F0811276} => pcalua.exe -a C:\Users\User\AppData\Local\Temp\Temp1_ROCCAT_Kone_Pure_DRV1.14_FW1.21.zip\Setup.exe
Task: {25E1247F-61CF-4BDF-A4F1-2E581FF9A4CA} - System32\Tasks\{C9268C97-7BF8-4C7E-B2B8-B1E6C429007B} => C:\Program Files (x86)\Steam\SteamApps\common\Crysis\runme.exe [2015-10-14] ()
Task: {343DCF2C-883B-40F2-8228-6EC73DD1758B} - System32\Tasks\{1D279D59-BADF-4CE1-A7A5-CEF911C5ADFA} => pcalua.exe -a "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\CONRAIL HOPPER\AssetSetup.exe" -d "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\CONRAIL HOPPER"
Task: {34DED99C-1DA9-4973-AC44-3DBD32E64369} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {3CE45521-2C8D-416E-A069-03C8406AE95F} - System32\Tasks\{23F249FA-E3B9-4153-A53D-9CDE64E0F606} => pcalua.exe -a C:\Users\User\Downloads\0001-32bit_Win7_Win8_Win81_R275.exe -d C:\Users\User\Downloads
Task: {3DF782BA-D465-4BA7-82CF-23BFE43DAF70} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated)
Task: {4163DD35-6F11-4D98-8246-65DFF03A752D} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {41BED90E-7F06-4D05-BB17-07ADBD5FFA87} - System32\Tasks\{45982C68-1C62-408B-ADFA-81C0C267F4C8} => C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\lotrbfme2.exe [2014-04-23] (The3rdAge.net)
Task: {474386D2-C5E3-44B7-9E04-954C27694EE7} - System32\Tasks\{7B6074DE-C62F-41EC-9D87-6CDA2FEF396C} => C:\Users\User\Downloads\TFGameManager.exe [2015-06-16] (MK Development)
Task: {4A862C3E-DBFE-4C5F-91CE-903B71D92DC3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-01-12] (Microsoft Corporation)
Task: {5DDB66E6-267E-4D5C-A4A3-7A687BD9113C} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe
Task: {60854B5A-F9B8-4EC9-92A3-3DF921C9CC82} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-02-24] (Microsoft Corporation)
Task: {6C3228E6-3FA3-4E4A-BECA-D7EC919D1112} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-01] (Google Inc.)
Task: {6EEBD5AD-6C37-4208-8155-EFBA05D4EDAD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-12-13] (Microsoft Corporation)
Task: {78DCBBB4-FB69-43F9-BE8B-79947AD576CB} - System32\Tasks\{EF63B703-C27C-40C8-BF0F-CD9E3025623C} => pcalua.exe -a "C:\Users\User\Downloads\AutodeskDownloadManagerSetup (1).exe" -d C:\Users\User\Downloads
Task: {815F3CDF-AE73-488D-A42E-A5A236A63061} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
Task: {840ADBE3-4667-4CC5-955B-38A34B17A0C3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-01] (Google Inc.)
Task: {8A34C6D6-0D4A-42AF-8576-4AA0C97654CE} - System32\Tasks\{D489785E-1951-40D0-B91D-BF1F838E188E} => C:\Program Files (x86)\Steam\SteamApps\common\Crysis\runme.exe [2015-10-14] ()
Task: {8A6F44FD-04BD-40BF-89FB-18F0A58F95F2} - System32\Tasks\{51FB7227-6444-4853-9A7A-25865D88D161} => pcalua.exe -a C:\Users\User\Downloads\Domination_install_1.1.1.5.exe -d C:\Users\User\Downloads
Task: {9564B4F6-FB13-4029-AC1E-6452DD02090F} - System32\Tasks\usb backup => C:\Users\User\Documents\usb auto backup.bat [2016-02-04] ()
Task: {9658FD3D-3D8B-4290-8436-79E6CDAF61D3} - System32\Tasks\{FC7FDCA7-7A71-4C4E-B63F-0A891EC33018} => C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\lotrbfme2.exe [2014-04-23] (The3rdAge.net)
Task: {B011589F-C232-41C1-BDD4-AC60DF7A456A} - System32\Tasks\{61C81071-C642-49D1-98E0-03123AC174D7} => C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\lotrbfme2.exe [2014-04-23] (The3rdAge.net)
Task: {B4B269F6-B584-4CBE-ACA7-CF27FC91A3D1} - System32\Tasks\{C9195E0D-9388-4F8C-9F53-FB63A92728BA} => C:\Users\User\Downloads\TFGameManager.exe [2015-06-16] (MK Development)
Task: {BFB60E85-1486-460F-9474-EAB063AC3151} - System32\Tasks\{8ABCA3CA-ECCF-4A2D-9273-736B03AD090A} => C:\Program Files (x86)\Steam\SteamApps\common\Crysis\runme.exe [2015-10-14] ()
Task: {C0689B74-8BC6-4341-9269-F44827D18345} - System32\Tasks\{A0518A67-74B3-4983-9A7F-1C0F9F685F0D} => pcalua.exe -a "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\RIO Grande HOPPER\AssetSetup.exe" -d "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\RIO Grande HOPPER"
Task: {CF88C5D2-550E-4BFB-8EED-A2A816CF702B} - System32\Tasks\{19C08763-48F9-4961-A468-47A52E2BCB1F} => pcalua.exe -a C:\Users\User\AppData\Local\Temp\jre-8u51-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {E57551EE-D452-4391-BD50-D92DAC72FD67} - System32\Tasks\{45671FBF-F1F9-450A-B0EE-85C86947BFFC} => C:\Program Files (x86)\Steam\SteamApps\common\Crysis\runme.exe [2015-10-14] ()
Task: {EAC922AC-10DB-4133-BDED-3AEC9B92ACBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {EB351FCE-9169-4A69-A261-ADAA876EEA7D} - System32\Tasks\{531F4413-7617-4F99-8C5A-D6E4D0FC6AC2} => pcalua.exe -a "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\NS HOPPER\AssetSetup.exe" -d "C:\Users\User\Desktop\ts 2015 waggon (1)\Hopset\NS HOPPER"
Task: {F7E9ED07-EEA0-456D-A627-13AC69B0FAF9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-12-13] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-03 23:25 - 2015-08-03 23:25 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2012-01-17 10:24 - 2012-01-17 10:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2015-11-03 12:39 - 2015-11-03 12:39 - 00122880 _____ () C:\Program Files (x86)\DiskBoss\bin\diskbsa.exe
2016-01-07 16:53 - 2016-01-07 11:04 - 00238080 _____ () C:\Program Files (x86)\EagleGet\EGMonitor.exe
2015-02-03 19:59 - 2015-10-14 22:18 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-04-10 15:04 - 2014-04-10 15:04 - 00927744 _____ () C:\Program Files\WinAutomation\System.Data.SQLite.dll
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll
2016-01-06 01:25 - 2008-07-11 08:04 - 00200704 ____N () C:\Windows\SysWOW64\HsMgr.exe
2016-01-06 01:26 - 2008-07-11 08:03 - 00282112 ____N () C:\Windows\system\HsMgr64.exe
2015-12-13 21:12 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-11-05 01:11 - 2015-11-05 01:12 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-11-03 12:29 - 2015-11-03 12:29 - 02981888 _____ () C:\Program Files (x86)\DiskBoss\bin\libdbs.dll
2015-11-03 12:26 - 2015-11-03 12:26 - 00733184 _____ () C:\Program Files (x86)\DiskBoss\bin\libpal.dll
2016-01-07 16:53 - 2016-01-07 11:03 - 01026048 _____ () C:\Program Files (x86)\EagleGet\util.dll
2016-01-07 16:53 - 2014-07-17 15:13 - 00397312 _____ () C:\Program Files (x86)\EagleGet\sqlite3.dll
2015-03-08 09:08 - 2016-02-23 15:47 - 47503472 _____ () C:\Users\User\AppData\Roaming\Spotify\libcef.dll
2015-09-22 07:01 - 2016-02-03 22:16 - 08772096 _____ () C:\Program Files (x86)\AirDroid\Android.dll
2014-03-19 14:18 - 2016-02-03 22:16 - 00630784 _____ () C:\Program Files (x86)\AirDroid\System.Data.SQLite.dll
2016-01-06 01:25 - 2011-06-02 11:12 - 00143360 ____N () C:\Program Files\ASUS Xonar DGX Audio\Customapp\VmixP8.dll
2014-05-01 15:15 - 2014-05-01 15:15 - 00463360 _____ () C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2016-01-07 16:53 - 2016-01-07 11:03 - 00220672 _____ () C:\Program Files (x86)\EagleGet\CrashRpt.dll
2016-01-07 16:53 - 2013-09-15 10:31 - 00053760 _____ () C:\Program Files (x86)\EagleGet\zlib.dll
2016-01-07 16:53 - 2016-01-07 11:03 - 00844288 _____ () C:\Program Files (x86)\EagleGet\ssl.dll
2016-01-20 16:04 - 2016-01-20 16:04 - 00143872 _____ () C:\Users\User\AppData\Local\MEGAsync\libuv.dll
2015-12-16 13:48 - 2015-12-16 13:48 - 00052224 _____ () C:\Users\User\AppData\Local\MEGAsync\cares.dll
2016-02-22 18:19 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-22 18:19 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2015-03-08 09:08 - 2016-02-23 15:47 - 01584240 _____ () C:\Users\User\AppData\Roaming\Spotify\libglesv2.dll
2015-03-08 09:08 - 2016-02-23 15:47 - 00082032 _____ () C:\Users\User\AppData\Roaming\Spotify\libegl.dll
2015-11-03 16:35 - 2015-12-15 06:54 - 00782336 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-11-03 16:35 - 2015-07-03 17:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-11-03 16:35 - 2015-07-03 17:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-11-03 16:35 - 2015-07-03 17:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-11-03 16:35 - 2016-02-04 22:02 - 02546768 _____ () C:\Program Files (x86)\Steam\video.dll
2015-11-03 16:35 - 2015-09-24 01:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-11-03 16:35 - 2015-09-24 01:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-11-03 16:35 - 2015-09-24 01:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-11-03 16:35 - 2015-09-24 01:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-11-03 16:35 - 2015-09-24 01:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-11-03 16:35 - 2016-02-04 22:01 - 00802896 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-11-03 16:35 - 2015-12-30 02:51 - 00208896 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-11-03 16:35 - 2016-01-06 02:52 - 48387872 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-11-03 16:35 - 2015-09-25 00:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-02-22 18:19 - 2016-02-18 05:15 - 16808600 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll
2014-10-25 19:19 - 2014-10-25 19:20 - 00310835 _____ () C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\binkw32.dll
2014-10-25 19:19 - 2014-10-25 19:23 - 00348160 _____ () C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\mss32.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll: DocumentSummaryInformation
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll: SummaryInformation
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\blank -> blank
IE trusted site: HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\security_WinAutomation.Console.exe -> security_WinAutomation.Console.exe
IE trusted site: HKU\S-1-5-21-462456141-278214493-2578891151-1000\...\security_WinAutomation.MacroRecorder.exe -> security_WinAutomation.MacroRecorder.exe

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-462456141-278214493-2578891151-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-462456141-278214493-2578891151-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EPSON BX320FW Series (Kopie 1) => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGIE.EXE /FU "C:\Windows\TEMP\E_S742.tmp" /EF "HKCU"
MSCONFIG\startupreg: KiesPDLR.exe => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{4AE88D11-DC81-4F17-ADE9-E5898B30ED47}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{429C4DBC-BB7E-433C-9CB4-2A0EC93D1FF8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{F12EE93E-DEAE-45FC-B49D-90C61D7F9FF8}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{73ED9E20-0CAE-4CE2-AC08-CCA25CF84FCB}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [{20231755-815A-437C-B5C6-1BF2C8446E30}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ACD416CF-E2CA-4E3A-8995-3A806DBA6D7D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{F80AFEC0-6C85-4EB0-85C7-C4C443D6EBA0}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1F686225-955C-4BA1-A0E4-DEF4F1E126CE}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [{AE175DFB-A587-40E3-8FB4-3AFFD695490D}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{FBAEBCAD-0724-4513-96FC-78958ABA4657}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{7C1A9151-DB25-417E-ADE3-652065336AA1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{20ED8C73-C1F7-404B-9C18-32B11D59F49B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{F2E9B69C-D950-4775-B9C0-F7B0D1505B53}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{14C3F5EA-D2E7-4BBB-9C45-5BAD5A85738E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [TCP Query User{6BEC441E-D5B4-453D-9A79-3A6C68B01B8A}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{05649EF5-2BCE-4BA0-8DF7-04409B26EDD7}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A57807FA-1C46-45A5-A8D8-DB96F4D4EF6E}] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [{B20016D1-A6F8-477F-9FCF-B9F77CE04623}] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [{4044EBBF-9AD5-4066-8DD6-C1978B5C8381}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{9D9E1D00-31C6-4351-BF2F-A25E2A1EACAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{DEA65385-622C-4389-858E-63294B49F489}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{5230F139-3899-4E40-89FE-E80B2F43A93A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{58621CC7-EF91-4A1F-9E42-6A39F4DA0E6C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{DB184392-6283-40B2-9804-81D7EF516F72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{D0EE9AC1-7B2B-4867-8F58-8C8AEE1AAD7A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{13757461-1868-4E3D-A425-FECBE1EE7892}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{3124A572-6DE6-4AAA-B9AA-D9A977487E68}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FED14785-A0AF-4897-AF68-EB37554AF322}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{6E25D59D-DA00-4EE2-A001-A8C3E18D818C}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe
FirewallRules: [{240B843C-5601-498F-83D8-EFB8B9D89F21}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe
FirewallRules: [{F2546EB6-00D0-487F-BDB1-D5E617B7F812}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe
FirewallRules: [{56F13EA8-9975-4C85-A81A-161E00D9E4EC}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe
FirewallRules: [{34B580C6-B36F-468D-933F-100802F55FF3}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe
FirewallRules: [{2D9FE788-0C13-451C-98E6-224635581A77}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe
FirewallRules: [{B40E026D-8F75-4B66-97E6-CDDDAF44C50D}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe
FirewallRules: [{4BC38925-CED8-4CAD-A255-F23CD86E2F7E}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe
FirewallRules: [TCP Query User{7FC2242A-2F74-43D6-83A0-146C789289CA}C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe] => (Allow) C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe
FirewallRules: [UDP Query User{1DF9DEC0-644C-4BD7-B67F-732F108F6D87}C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe] => (Allow) C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe
FirewallRules: [{1045C782-32F7-4E3E-B5E0-128395BA029A}] => (Block) C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe
FirewallRules: [{1F4421DC-1ED2-431F-B92F-3814B4CCC35C}] => (Block) C:\program files (x86)\wondershare\video converter ultimate\dscheck.exe
FirewallRules: [{3A47E161-BB9B-465F-A494-F6B71F285053}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C22904FB-B891-4056-85E3-E7D2BA723EC5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DF294F4D-058F-4265-BC91-4CDB8A7BB3AD}C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [UDP Query User{BC4475CB-4F81-4A96-B407-95EDFA2EB5A7}C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{ABE035EF-6B45-44F9-9184-0363C639E0BD}] => (Block) C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [{4CE892EB-ABE5-494D-8BB6-56025AE4D1C2}] => (Block) C:\users\user\desktop\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [TCP Query User{C2919DCB-A0C7-47B7-804C-285EC6DD1BAF}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{FE0AE178-3F97-435D-BA07-D573F282B432}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{E07617DF-AFA1-48E2-9672-63B11BB22410}] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{D3869713-20C2-47E8-B5A0-306491BF6292}] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{44012C97-45BF-495F-B469-7524C90096BA}C:\users\user\desktop\age of empires ii\empires2.exe] => (Allow) C:\users\user\desktop\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{6CCA402D-48AF-48D5-986A-31EEDE83E392}C:\users\user\desktop\age of empires ii\empires2.exe] => (Allow) C:\users\user\desktop\age of empires ii\empires2.exe
FirewallRules: [{2109625F-28DE-4A94-8465-A11692B6CBBE}] => (Block) C:\users\user\desktop\age of empires ii\empires2.exe
FirewallRules: [{EE935A4E-E86B-49AE-BAD6-E9048F36376A}] => (Block) C:\users\user\desktop\age of empires ii\empires2.exe
FirewallRules: [{AE871BBA-4A9B-483D-961C-DC15938D35FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold_Crusader_Extreme.exe
FirewallRules: [{B7356863-A5CF-49B5-BC4A-6C0E3DE21677}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold_Crusader_Extreme.exe
FirewallRules: [{A57C00FE-5D49-4CEC-9E1A-F3EA43DAA870}] => (Allow) LPort=49298
FirewallRules: [{A042A3B7-23C8-47A6-935E-8F86990D48C3}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{73259184-D612-4485-A368-10298DB819CB}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{D6F03973-BAF9-4C22-A180-BFF41DEDA137}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [{AEE95186-00CB-4278-AB15-5C35948211F0}] => (Block) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [{68C66A43-3543-42FD-9AF9-1AF6E865EFF5}] => (Block) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [{CF1CD744-6B43-4CF3-B1AA-0A4827E4B830}] => (Allow) C:\Program Files (x86)\Ubisoft\DIE SIEDLER - Aufstieg eines Königreichs\base\bin\Settlers6.exe
FirewallRules: [{3C6B8AED-3FA0-440C-9612-C9633BAC8859}] => (Allow) C:\Program Files (x86)\Ubisoft\DIE SIEDLER - Aufstieg eines Königreichs\base\bin\Settlers6.exe
FirewallRules: [{F8CEF30B-8EFA-470A-AB8C-7A0F4D4A8A8B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\toy soldiers\GameSW.exe
FirewallRules: [{37BD3DB2-62CA-48B2-8433-106998563973}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\toy soldiers\GameSW.exe
FirewallRules: [{6E4B3E1F-45EE-401D-B3A1-7869ECA61894}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\toy soldiers\Game.exe
FirewallRules: [{653ACC34-E8F5-47C5-837D-FE05EB48BCB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\toy soldiers\Game.exe
FirewallRules: [TCP Query User{CA4ADEA3-0ED1-4972-A342-E6DA81387A20}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{C0554719-BAFC-4B7F-AD7A-5EA0B9EB08D9}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{97C40BC7-BE8B-4FBA-903D-E67A8E5BDE26}] => (Block) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{1C056B9D-3185-4265-B30A-5420A61B118F}] => (Block) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [TCP Query User{5BD6E323-6AE8-4A3C-9D05-D744F4DBC2E4}C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe] => (Allow) C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [UDP Query User{DEE9AF8B-3020-40AB-B9C7-67216DAA7898}C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe] => (Allow) C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [{D634A2F2-294F-4137-B08F-CF6AF53F4DC2}] => (Block) C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [{D0CADCA5-377B-4FCA-AB98-2730F1CBB08E}] => (Block) C:\program files (x86)\blobby volley 2 version 1.0\blobby.exe
FirewallRules: [{9F2942F9-8A83-49F2-8238-1A88BFC3F571}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RailWorks\RailWorks.exe
FirewallRules: [{CFF0AE55-5DB6-4727-8CC6-3966EB38CC56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RailWorks\RailWorks.exe
FirewallRules: [{8BCD7B97-645E-4159-BAA3-2251D75BA9E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{209F4BC3-EC15-4B81-851B-64FA6710E242}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{082BCDDE-2C2E-4BC7-8ECB-A1408C3CD329}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\Binaries\Win64\CMW.exe
FirewallRules: [{3DE1AF2C-AB62-481B-977F-39F4E40EEC25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\Binaries\Win64\CMW.exe
FirewallRules: [{0FB7526D-815A-4D7F-A5A1-40ABABF743E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\Binaries\Win32\CMW.exe
FirewallRules: [{BD0247A2-20D0-4676-8FBB-DBE44279B614}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\Binaries\Win32\CMW.exe
FirewallRules: [{9D62DEA5-7FC8-4E1E-967C-C32349E4B0A9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\ChivLauncher.exe
FirewallRules: [{A92FAE14-9060-4B47-A26C-A15D760C4F19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfarebeta\ChivLauncher.exe
FirewallRules: [{62B4C307-B9C6-4DE3-8412-57F28B08D425}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{F065BE4E-B8A0-4293-87AA-CF297A9A361C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{3EA2AF17-5242-4832-A2E9-E9FD7FAC5711}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{B0BC1248-55D6-469C-B6B3-996E273A1DB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{B484D842-BF5F-49E2-9DFA-63A5C2597E67}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{C8CF409F-6D92-4E90-8FB7-1BCF10353B5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{9F0D3403-F0F5-4472-8EFE-E9BC5226176C}] => (Allow) LPort=49245
FirewallRules: [{1F449DFE-C6A3-4436-9D97-8ED58F7EBA18}] => (Allow) LPort=5000
FirewallRules: [{E7061E80-F42A-4A68-8E29-BD9F87D78EC7}] => (Allow) C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{3622FDEB-A4FE-4F87-A4B7-2C0B82467E49}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CD1A57E5-FAF2-4592-BD2A-26773598091E}] => (Allow) LPort=2869
FirewallRules: [{0202F7AC-F235-49AD-85DC-3D4F2036A1D8}] => (Allow) LPort=1900
FirewallRules: [{2E1BAA17-E6CE-43A6-914F-3E6D5D05972A}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9A40D79E-DB59-41FE-9EAD-A860D97938AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{E0E4D5F1-835A-462B-A267-F549F42FE7A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{839ED0A8-1FE9-428F-ACF6-D0825F2F9DD0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FAEA267A-8F6A-4D99-9F0F-5EC4FAE1EB0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Train Fever\TrainFever.exe
FirewallRules: [{CC2056B1-31D0-47BC-88CD-AE4134BFF897}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Train Fever\TrainFever.exe
FirewallRules: [{6951D2D3-4362-4F72-8B04-484AFA5C6331}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacknet\Hacknet.exe
FirewallRules: [{5F6241C9-EBD5-4F96-867D-77D44398C223}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacknet\Hacknet.exe
FirewallRules: [TCP Query User{12520676-1DC4-4F1E-A211-39EC35D80587}C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe] => (Allow) C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe
FirewallRules: [UDP Query User{EBF54613-37C1-4E24-9BCC-5A40FA56E557}C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe] => (Allow) C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe
FirewallRules: [{8DF1040D-9D60-4388-9480-18280D9D95DC}] => (Block) C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe
FirewallRules: [{D0F2EAC3-F5F5-4E49-890C-E17CBFF301EF}] => (Block) C:\users\user\documents\psxdownloadhelper\psxdownloadhelper.exe
FirewallRules: [TCP Query User{E84C58AD-C763-4C02-B191-02F28A9557C4}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{8809C202-7ECF-4887-901D-A12751041B7B}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [{9554D9FC-B37E-4163-98BC-BBAB3C29C832}] => (Block) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [{CEC18FB7-E868-4373-9D65-437C7E673911}] => (Block) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{BEE53720-D233-411A-BD0B-B008466ECDA9}C:\users\user\desktop\call of duty modern warfare 3\iw5mp.exe] => (Block) C:\users\user\desktop\call of duty modern warfare 3\iw5mp.exe
FirewallRules: [UDP Query User{1ADA4421-6F92-4E13-B3E1-A6896F3BE204}C:\users\user\desktop\call of duty modern warfare 3\iw5mp.exe] => (Block) C:\users\user\desktop\call of duty modern warfare 3\iw5mp.exe
FirewallRules: [{499EDE42-07C8-489A-80B6-5C7FC19CBD00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BloonsTD5\BTD5-Win.exe
FirewallRules: [{5EB3B39B-9A29-42CA-9230-B2C68E747243}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BloonsTD5\BTD5-Win.exe
FirewallRules: [TCP Query User{8D5DF909-10B5-44D1-B496-C935D512EFEB}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [UDP Query User{8F9AC69E-9A4B-463D-A0B9-1D2EBB004E17}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{3FB246A1-D7AA-4C22-93A9-3D88EB6A59DC}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\fgfs.exe
FirewallRules: [{FCE99093-30B8-4162-A5D4-8F96B93FAB47}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\fgfs.exe
FirewallRules: [{E5365292-1AF1-4B89-9C11-98B1BD0BD721}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\metar.exe
FirewallRules: [{E93BDB1B-94EF-4846-A640-B0CAE626570A}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\terrasync.exe
FirewallRules: [{642105CE-B2C8-4743-BABC-7A7598D88C88}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\terrasync.exe
FirewallRules: [{72E4F49B-F980-4D92-9644-2A81142D575E}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\fgcom.exe
FirewallRules: [{A8D34037-04FD-4F0C-9424-BE5CDF8CB2DB}] => (Allow) C:\Program Files\FlightGear 3.4.0\bin\fgcom.exe
FirewallRules: [{8230B593-D844-4E52-99DF-C20F4A4C6396}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis\Bin32\Crysis.exe
FirewallRules: [{E471572F-17A7-4EBF-8687-B0DF347A59DE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis\Bin32\Crysis.exe
FirewallRules: [{6449C142-DA3B-445F-AC83-93C50D926C15}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis Wars\Bin32\Crysis.exe
FirewallRules: [{36B6A9D4-40DD-4D53-9050-B22D16704E78}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis Wars\Bin32\Crysis.exe
FirewallRules: [{9CB9FBE1-66F7-41F4-BBDC-F4B23F74EE61}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F3FB327A-FC04-4E8B-AF72-FD84319DD296}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EC016D69-D55C-4BFB-8E15-23216D02A6B8}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{66E0CC01-2FDE-4B10-AF44-033433F00864}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{33CAB803-5CB4-41D7-878E-71E48ADE6AE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis Warhead\Bin32\Crysis.exe
FirewallRules: [{242A94F9-168E-4658-A8FD-6CDBAECBDA0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crysis Warhead\Bin32\Crysis.exe
FirewallRules: [{CF6F4320-B041-444C-BDB6-124A99D6CE8E}] => (Allow) C:\Program Files (x86)\Train Simulator 2016\Launcher.exe
FirewallRules: [{EC4E2F53-3918-4113-B118-660254A06C27}] => (Allow) C:\Program Files (x86)\Train Simulator 2016\Launcher.exe
FirewallRules: [TCP Query User{53495675-D5DE-4244-BEED-1FEE4558813A}C:\program files (x86)\train simulator 2016\railworks.exe] => (Block) C:\program files (x86)\train simulator 2016\railworks.exe
FirewallRules: [UDP Query User{9A3933A4-5F07-4548-AA80-4901A48F679C}C:\program files (x86)\train simulator 2016\railworks.exe] => (Block) C:\program files (x86)\train simulator 2016\railworks.exe
FirewallRules: [{E9794FF2-0A20-4A75-AD34-4498C0B0A336}] => (Allow) C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\game.dat
FirewallRules: [{756359F2-1CD3-4007-9938-4872476FCA0A}] => (Allow) C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\game.dat
FirewallRules: [TCP Query User{5428EC02-F21E-439A-AC91-2FACBE82D777}C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat] => (Allow) C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat
FirewallRules: [UDP Query User{1D9E5782-442E-4E5A-BE81-4D293C3EDDD9}C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat] => (Allow) C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat
FirewallRules: [{B234BF72-8745-41C9-878F-94E75396D689}] => (Block) C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat
FirewallRules: [{A93F660B-3273-4D02-A5DA-517C6AF5C2AC}] => (Block) C:\program files (x86)\electronic arts\die schlacht um mittelerde ii\patchget.dat
FirewallRules: [{89CB8312-A95E-4493-95BF-3E571ED9A5B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{8397F4E0-2F79-47A0-808D-D0C1D63637FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [TCP Query User{6475431A-5431-4369-ACFD-79BB4AB1AF4C}C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{680931DF-9103-4512-9252-6C213243714B}C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{29104450-D570-4498-85F5-8395083292BE}] => (Block) C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{D703DDC2-05B7-4134-94A4-38AA4F7AAB82}] => (Block) C:\users\user\downloads\programs\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{DA9BEBEB-F5A8-4D52-9939-8B19A4BF2CEA}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{DBECDCF7-40FC-4889-BF16-2F77DA7B3677}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{0C5DBE5B-E330-43AD-B8AC-5B8A68FDFDFA}] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{7297FE3C-7C1F-4F29-B9FF-4412240CAADC}] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{5568032F-2748-4193-8D67-99B250DAB44A}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{DB0B7D57-456F-42B3-96A7-7A53BDBC09E6}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{EE5A8DFE-F44F-43EB-87AD-B4AE5E027931}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [UDP Query User{4B10F87E-A202-4D04-8B34-F36FBAF877B1}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [{F33C5D93-4D28-4CBD-8030-98574A15059E}] => (Block) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [{A99F28F3-B952-464F-8B2C-972FBC860EE0}] => (Block) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [TCP Query User{FECE18C8-E683-4C06-B781-784B919B93AB}C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe] => (Allow) C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe
FirewallRules: [UDP Query User{A33722FA-552E-4451-8DB0-D405D6971610}C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe] => (Allow) C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe
FirewallRules: [{38314A0D-CDAA-45DE-9757-732CF3A59991}] => (Block) C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe
FirewallRules: [{3C01A866-C050-4E54-A5DD-84E6575A95C5}] => (Block) C:\users\user\appdata\local\temp\temp1_tl-wpa4220kit_v1_utility.zip\tl-wpa2220_v1_utility\powerline scan.exe
FirewallRules: [TCP Query User{FB454423-F8BB-4459-B973-01D894222E67}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{493B13B5-07FD-454B-BC9E-26091C866CA2}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{FC0B30A0-02F4-4FDE-B00B-5ECB03E07AF3}] => (Block) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{637A5ABB-1231-4456-88C0-79D9CA39D6DD}] => (Block) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [TCP Query User{4226B945-DF0A-4DBB-B90D-0FF26724D306}C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe
FirewallRules: [UDP Query User{B6FF0AFE-15D5-457E-8860-3480D6A46350}C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe
FirewallRules: [{24162580-C803-40B5-8285-4C3E4154E5C0}] => (Block) C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe
FirewallRules: [{B5E85CD1-E143-43E3-B719-09D09DDFDB84}] => (Block) C:\program files (x86)\portforward.com\portforward network utilities\pfportchecker.exe
FirewallRules: [{394A8318-07E5-45CA-A7C5-EFAE2D3D5C75}] => (Allow) LPort=16000
FirewallRules: [{B68354BF-5249-4E1F-B35A-713A50995945}] => (Allow) C:\Program Files (x86)\Origin Games\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{F31BE71C-FDD9-49C2-B54D-140F7C89C137}] => (Allow) C:\Program Files (x86)\Origin Games\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [TCP Query User{DF3E5A77-E635-4D0E-B3A9-760B91FB9B34}C:\program files\ziftrcoin\ziftrcoin-qt.exe] => (Allow) C:\program files\ziftrcoin\ziftrcoin-qt.exe
FirewallRules: [UDP Query User{F0C27FAD-EE5D-4A18-A8B3-2833A507F9EE}C:\program files\ziftrcoin\ziftrcoin-qt.exe] => (Allow) C:\program files\ziftrcoin\ziftrcoin-qt.exe
FirewallRules: [{A296A7DB-13C6-4D8C-B21D-2CCA21BAA8E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{D7C0847D-B259-4C50-BF4F-5996304BD1F1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{B9E5014E-7D89-4A00-8FC0-2C1E7CA08EE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{76757AC2-6954-4660-A805-ACEE2CBF1CB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{76974432-3577-477D-8158-CA0EB9088ABA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{2F5C593C-57B8-45C3-B240-832612B42A57}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{4428FAA4-FC3F-479A-B399-062E73B62458}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{541F7492-0834-4918-B4F7-228CF748CB43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C74CA72A-5557-4654-B74B-A3F4D06F5415}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{4C3BD66D-39CF-4B1B-B156-B396E0D35C95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{50007279-2CE6-401A-A57E-68F2CE9F3CA5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{B959643A-D272-42EB-BFFF-A7E2A42D29A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{37CA1557-ADA8-4EA0-897C-8C7CC40FFCEC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D85534D8-A89D-40CA-8A79-2A8E5C7839E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{9F358FD9-0F4C-466D-9516-CDAB248A8333}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{C2689018-D2A5-4F75-A8DF-1BE4853B5AEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{7F73A2DB-EB10-49B0-BC71-D01B76D2B931}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{84023F18-0ACA-44DC-BDB4-50B654D1B539}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{1DA19264-0AA1-4387-80D9-8AC61DD16B4C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{A46FC387-CA0C-4480-96BB-7362F4028358}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4CAA987D-1501-4F91-990C-61945158B68B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A971B10A-A336-4B32-9503-F11DA97C7E9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{3DADF6E7-942F-4AE4-B1CF-1A4754409D5B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{7BE9038B-C11C-4D05-AE92-E4027496816A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe
FirewallRules: [{6A4F6527-E48C-4EEC-818C-255A011E3BC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{3C616E1B-4392-47AB-A1E9-A179B4EA96F2}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{990D2FE3-A306-4B75-ADC9-13B56A55C366}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{20907E02-27BE-4975-9199-4E45F002F47E}] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{E6457D8A-3542-4BBD-A3CF-DE7A7AC9780E}] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{36F8B52E-51B4-4F93-97B4-564C5B6BBF7A}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{1BC2F959-ED20-43A9-BAF9-8B25EDBB123B}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{C319DD90-7C28-48C1-8AF3-B31B980882F5}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{CEA028CF-E8B4-4BE8-9BC2-9F21AB95AC8A}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{A024B9B6-5E56-431F-991B-F873E7BD8424}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3B5E78E2-DF68-466B-86C4-B58CF80168BD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{3C607165-773B-4FF6-AA0B-5B69F1C7F9A7}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => (Allow) C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [UDP Query User{7EADFA49-A8E5-463D-A20E-4C4CD87B94A8}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => (Allow) C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [{D900B5B7-7425-4FB0-BE19-3CCDC5BF5ABC}] => (Block) C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [{26A90252-54C0-4115-AC77-2A802CA2759A}] => (Block) C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [{713A3E2B-7820-4D91-966E-48429F636D2F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E0E3F285-ED15-4576-B09C-4DABC1BCA49C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A624ED60-35BF-41DC-BA02-E38661E77456}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DFE68998-14AD-4550-A94A-08892AA931FA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4CCBE49D-C307-487A-8958-75ABA4983A3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{F80C21B5-F468-4B14-82A3-A942602326FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{BD8CB61B-6340-4A2C-BC25-FD35151A6B0E}] => (Allow) C:\Program Files (x86)\wows\WoWSLauncher.exe
FirewallRules: [{72CCF1F6-7310-46A9-AF35-BA0762F78FDB}] => (Allow) C:\Program Files (x86)\wows\WoWSLauncher.exe
FirewallRules: [{7D8DFA22-14DC-4895-BE80-3B8FD5891ABA}] => (Allow) C:\Program Files (x86)\wows\worldofwarships.exe
FirewallRules: [{A0EA90BE-D10A-4050-907C-0B4FEE95704D}] => (Allow) C:\Program Files (x86)\wows\worldofwarships.exe
FirewallRules: [TCP Query User{984DA224-CFA4-4FD5-9EA0-8117C7218F00}F:\daten\eclipsemitws\eclipse\eclipse.exe] => (Block) F:\daten\eclipsemitws\eclipse\eclipse.exe
FirewallRules: [UDP Query User{F1F01343-C7CD-4A21-8CD7-28BD09CB2FB0}F:\daten\eclipsemitws\eclipse\eclipse.exe] => (Block) F:\daten\eclipsemitws\eclipse\eclipse.exe
FirewallRules: [{E0759C7A-932D-4679-97AF-64D703C3F952}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\atomzombiesmasherdemo\data\atomzombiesmasher.exe
FirewallRules: [{D32184EA-CC02-4379-BB68-E1D050D28B2B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\atomzombiesmasherdemo\data\atomzombiesmasher.exe
FirewallRules: [{15FDF1F8-DBD3-48AF-ADE3-B561A001B0B9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3038FB75-8836-4DEE-B7C0-C17573A1DAE1}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\49.0.2623.40\remoting_host.exe
FirewallRules: [{AF51982A-1D98-4E13-93F1-DDACEDC61FA8}] => (Allow) LPort=49188

==================== Wiederherstellungspunkte =========================

24-02-2016 00:10:09 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Razer Taipan
Description: Razer Taipan
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Razer Inc
Service: HidUsb
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/24/2016 03:07:55 PM) (Source: ESENT) (EventID: 454) (User: )
Description: avguard (1876) GaviDB_1: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -1216 auf.

Error: (02/24/2016 03:07:55 PM) (Source: ESENT) (EventID: 494) (User: )
Description: avguard (1876) GaviDB_1: Bei der Datenbankwiederherstellung ist ein Fehler aufgetreten (Fehler -1216), da Verweise auf Datenbank "C:\ProgramData\Avira\Antivirus\EVENTDB\gavi3.db" festgestellt wurden, die nicht mehr vorhanden ist. Die Datenbank wurde nicht sauber heruntergefahren, bevor sie entfernt (oder möglicherweise verschoben oder umbenannt) wurde. Das Datenbankmodul lässt den Abschluss der Wiederherstellung für diese Instanz erst dann zu, wenn die fehlende Datenbank wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar oder nicht mehr erforderlich ist, finden Sie Informationen zum Beheben dieses Fehlers in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (02/24/2016 03:07:51 PM) (Source: ESENT) (EventID: 454) (User: )
Description: avguard (1876) GaviDB_0: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -1216 auf.

Error: (02/24/2016 03:07:51 PM) (Source: ESENT) (EventID: 494) (User: )
Description: avguard (1876) GaviDB_0: Bei der Datenbankwiederherstellung ist ein Fehler aufgetreten (Fehler -1216), da Verweise auf Datenbank "C:\ProgramData\Avira\Antivirus\EVENTDB\gavi3.db" festgestellt wurden, die nicht mehr vorhanden ist. Die Datenbank wurde nicht sauber heruntergefahren, bevor sie entfernt (oder möglicherweise verschoben oder umbenannt) wurde. Das Datenbankmodul lässt den Abschluss der Wiederherstellung für diese Instanz erst dann zu, wenn die fehlende Datenbank wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar oder nicht mehr erforderlich ist, finden Sie Informationen zum Beheben dieses Fehlers in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (02/23/2016 05:36:35 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.

Error: (02/23/2016 05:36:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Der angegebene Server kann den angeforderten Vorgang nicht ausführen.
.

Error: (02/23/2016 05:36:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.

Error: (02/23/2016 05:12:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Name des fehlerhaften Moduls: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Ausnahmecode: 0x80000003
Fehleroffset: 0x0018fc82
ID des fehlerhaften Prozesses: 0x940
Startzeit der fehlerhaften Anwendung: 0xdontstarve_steam.exe0
Pfad der fehlerhaften Anwendung: dontstarve_steam.exe1
Pfad des fehlerhaften Moduls: dontstarve_steam.exe2
Berichtskennung: dontstarve_steam.exe3

Error: (02/23/2016 05:12:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Name des fehlerhaften Moduls: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Ausnahmecode: 0x80000003
Fehleroffset: 0x0018fc82
ID des fehlerhaften Prozesses: 0xbd8
Startzeit der fehlerhaften Anwendung: 0xdontstarve_steam.exe0
Pfad der fehlerhaften Anwendung: dontstarve_steam.exe1
Pfad des fehlerhaften Moduls: dontstarve_steam.exe2
Berichtskennung: dontstarve_steam.exe3

Error: (02/23/2016 05:12:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Name des fehlerhaften Moduls: dontstarve_steam.exe, Version: 0.0.0.0, Zeitstempel: 0x545bfddf
Ausnahmecode: 0x80000003
Fehleroffset: 0x0018fc82
ID des fehlerhaften Prozesses: 0x2694
Startzeit der fehlerhaften Anwendung: 0xdontstarve_steam.exe0
Pfad der fehlerhaften Anwendung: dontstarve_steam.exe1
Pfad des fehlerhaften Moduls: dontstarve_steam.exe2
Berichtskennung: dontstarve_steam.exe3


Systemfehler:
=============
Error: (02/24/2016 03:11:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht.

Error: (02/24/2016 03:08:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PinnacleUpdate Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/24/2016 03:07:53 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (02/24/2016 03:07:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3

Error: (02/23/2016 09:13:48 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/23/2016 03:47:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PinnacleUpdate Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/23/2016 03:47:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WinAutomation Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/23/2016 03:47:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WinAutomation Service erreicht.

Error: (02/23/2016 03:47:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst egGetSvc erreicht.

Error: (02/23/2016 03:46:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058


CodeIntegrity:
===================================
  Date: 2016-01-24 14:28:36.383
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-01-06 01:28:19.389
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-01-06 01:26:04.728
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-01-05 23:04:20.267
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-01-05 12:36:00.703
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-01-05 00:18:35.635
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-29 14:16:45.443
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-29 12:59:24.910
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-28 22:36:36.120
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-28 22:05:54.113
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-8350 Eight-Core Processor
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 12187.5 MB
Verfügbarer physikalischer RAM: 6389.32 MB
Summe virtueller Speicher: 12986.7 MB
Verfügbarer virtueller Speicher: 6059.45 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:130.48 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2A5DC8E1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
Code:
# AdwCleaner v5.036 - Bericht erstellt am 24/02/2016 um 17:19:52
# Aktualisiert am 22/02/2016 von Xplode
# Datenbank : 2016-02-22.2 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x64)
# Benutzername : User - PC-02
# Gestartet von : C:\Users\User\Documents\EGDownloads\adwcleaner_5.036(1).exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

Ordner Gefunden : C:\Program Files (x86)\Applian Technologies
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Technologies
Ordner Gefunden : C:\Users\User\AppData\Local\eSupport.com

***** [ Dateien ] *****

Datei Gefunden : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\apfkeogliibfminiiihgdkkcaenchhia
Datei Gefunden : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_fijhlnmmmgflacagjecncpmpnhjieggk_0
Datei Gefunden : C:\Users\User\AppData\Local\Temp\Utils.dll

***** [ DLL ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****

Geplante Aufgabe Gefunden : {EF63B703-C27C-40C8-BF0F-CD9E3025623C}

***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7BC34A3-BA86-11CF-84B1-CBC2DA68BF6C}
Schlüssel Gefunden : HKCU\Software\eSupport.com
Schlüssel Gefunden : HKCU\Software\OCS
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [hola]

***** [ Internetbrowser ] *****

[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\prefs.js] [Preference] Gefunden : user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\prefs.js] [Preference] Gefunden : user_pref("browser.search.searchengine.ptid", "face");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\iLXTXxBN.default\prefs.js] [Preference] Gefunden : user_pref("browser.search.searchengine.uid", "ST1000DX001-1CM162_Z1DD4HXWXXXXZ1DD4HXW");
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gefunden : hxxp://www.trovi.com/?gd=&ctid=CT3325584&octid=EB_ORIGINAL_CTID&ISID=MDB25D7E2-C3D2-4FC7-A136-2646E3C94238&SearchSource=55&CUI=&UM=2&UP=SP52951949-1B2B-4BBD-A8AD-F94E68307CCA&SSPV=
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gefunden : hxxp://www.search.ask.com/?o=APN10646A&gct=hp&d=102-113&v=n12521-350&t=4
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gefunden : hxxp://istart.webssearches.com/?type=hp&ts=1417358863&from=irs&uid=HGSTXHTS541010A9E680_JA1000101G64EP1G64EPX
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gefunden : hxxp://www.istartsurf.com/?type=hp&ts=1432674341&z=7d7bf131147ba1f7c5727e4g8zfcbofqamfzac7c8t&from=face&uid=ST1000DX001-1CM162_Z1DD4HXWXXXXZ1DD4HXW
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gefunden : hxxp://www.istartsurf.com/?type=hp&ts=1438016575&z=b912a4fc586c7c0bdb9f49egdz8c9b3edg0q3wbo1b&from=obw&uid=HGSTXHTS541010A9E680_JA1000101G64EP1G64EPX
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gefunden : hxxp://www.trovi.com/?gd=&ctid=CT3325584&octid=EB_ORIGINAL_CTID&ISID=MDB25D7E2-C3D2-4FC7-A136-2646E3C94238&SearchSource=55&CUI=&UM=2&UP=SP52951949-1B2B-4BBD-A8AD-F94E68307CCA&SSPV=

*************************

C:\AdwCleaner\AdwCleaner[C7].txt - [7857 Bytes] - [06/10/2015 15:24:13]
C:\AdwCleaner\AdwCleaner[C8].txt - [4146 Bytes] - [28/12/2015 22:19:27]
C:\AdwCleaner\AdwCleaner[R2].txt - [11236 Bytes] - [27/05/2015 14:39:26]
C:\AdwCleaner\AdwCleaner[R3].txt - [24500 Bytes] - [27/05/2015 16:13:06]
C:\AdwCleaner\AdwCleaner[R4].txt - [17033 Bytes] - [27/05/2015 16:57:45]
C:\AdwCleaner\AdwCleaner[R5].txt - [16253 Bytes] - [30/05/2015 11:03:52]
C:\AdwCleaner\AdwCleaner[R6].txt - [14998 Bytes] - [01/06/2015 16:20:58]
C:\AdwCleaner\AdwCleaner[R7].txt - [15616 Bytes] - [01/06/2015 16:22:13]
C:\AdwCleaner\AdwCleaner[R8].txt - [14954 Bytes] - [12/06/2015 20:04:33]
C:\AdwCleaner\AdwCleaner[S1].txt - [4264 Bytes] - [24/02/2016 17:19:52]
C:\AdwCleaner\AdwCleaner[S10].txt - [8218 Bytes] - [06/10/2015 15:23:20]
C:\AdwCleaner\AdwCleaner[S11].txt - [3934 Bytes] - [28/12/2015 22:15:22]
C:\AdwCleaner\AdwCleaner[S2].txt - [20086 Bytes] - [27/05/2015 16:13:51]
C:\AdwCleaner\AdwCleaner[S3].txt - [13029 Bytes] - [30/05/2015 11:04:45]
C:\AdwCleaner\AdwCleaner[S4].txt - [12811 Bytes] - [01/06/2015 16:23:02]
C:\AdwCleaner\AdwCleaner[S5].txt - [12213 Bytes] - [12/06/2015 20:19:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4781 Bytes] ##########
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 24.02.2016
Suchlaufzeit: 17:58
Protokolldatei:
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.02.24.05
Rootkit-Datenbank: v2016.02.17.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: User

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 490676
Abgelaufene Zeit: 31 Min., 21 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 1
HackTool.Agent, C:\Program Files (x86)\TransOcean - The Shipping Company\steam_api.dll, In Quarantäne, [3d48055fbadf5cdab2503e3d22dfce32],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Bei TransOcean hat wohl ein no disk crack das Problem verursacht. Den zu deinstallieren hat nichts gebracht.

M-K-D-B 02.03.2016 17:36
Servus,


wir brauchen aktuelle Logdateien.




Zukünftig bitte beachten:
Zitat:
Gestartet von C:\Users\User\Documents\EGDownloads
Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.








bei Schritt 1 beachten:
Chrome Richtlinien zurücksetzen NICHT auswählen

Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.

M-K-D-B 07.03.2016 17:54
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:07 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131