Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-10-2016
durchgeführt von Dodo (Administrator) auf ANONYMOUS (06-11-2016 13:45:13)
Gestartet von C:\Users\Dodo\Desktop
Geladene Profile: Dodo (Verfügbare Profile: Dodo & Administrator)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: "G:\Programme\Firefox\firefox.exe" -osint -url "%1")
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [6963744 2009-01-20] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-01-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2016-01-29] (NVIDIA Corporation)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-27] (AVAST Software)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [MWS Reader 5] => C:\Program Files (x86)\MWS Reader 5\mwsr5.exe [13272064 2015-05-11] (directINNOVATION UG (haftungsbeschränkt))
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2438656 2009-04-11] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2438656 2009-04-11] (Microsoft Corporation)
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\Run: [GAINWARD] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2181672 2009-05-12] (Gainward Co.)
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\MountPoints2: {15e1e7c6-0317-11e6-a629-00241d8b6ae7} - K:\AutoRun.exe
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\MountPoints2: {15e1e7cb-0317-11e6-a629-00241d8b6ae7} - K:\AutoRun.exe
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\MountPoints2: {2d7223c2-db87-11e4-878e-00241d8b6ae7} - K:\AutoRun.exe
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\MountPoints2: {dc4b95d1-5b65-11e3-8a94-00241d8b6ae7} - F:\auvisio.exe
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) <==== ACHTUNG
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Program Files (x86)\vghd\\VGHD.SCR
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-11-27] (AVAST Software)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2015-08-07]
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{52529908-1B7A-4824-B72C-C96AEFA12052}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{F77FACE0-805A-4608-B792-CCC2E5C32A90}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.qip.ru
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.qip.ru
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
SearchScopes: HKLM-x32 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
SearchScopes: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000 -> DefaultScope {0AF5279C-C66B-46F6-A95E-B81EB16A0686} URL =
SearchScopes: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2009-11-08] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-27] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25] (CANON INC.)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2009-11-08] (Microsoft Corporation)
BHO-x32: Kein Name -> {6B5863A0-C43F-4C0A-982B-CC0E9125783F} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-31] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-27] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-31] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25] (CANON INC.)
Toolbar: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Keine Datei
DPF: HKLM-x32 {15BE8BEE-4105-4A79-B385-25068AA967DB} hxxp://dizun95pzobbc.cloudfront.net/VBIMDPlayer.CAB
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} hxxp://dizun95pzobbc.cloudfront.net/INDBrowser.CAB
FireFox:
========
FF ProfilePath: C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default [2016-11-06]
FF user.js: detected! => C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\user.js [2010-03-31]
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\mnxo088k.default -> hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=
FF Homepage: Mozilla\Firefox\Profiles\mnxo088k.default -> about:home
FF Keyword.URL: Mozilla\Firefox\Profiles\mnxo088k.default -> hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p=
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> ftp", "94.23.205.32"
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> ftp_port", 3128
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> http", "94.23.205.32"
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> http_port", 3128
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> socks", "94.23.205.32"
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> socks_port", 3128
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> ssl", "94.23.205.32"
FF NetworkProxy: Mozilla\Firefox\Profiles\mnxo088k.default -> ssl_port", 3128
FF Extension: (stealthy) - C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\Extensions\stealthyextension@gmail.com.xpi [2016-08-04]
FF Extension: (Flagfox) - C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}(74) [2013-03-22] [ist nicht signiert]
FF Extension: (Free YouTube Download (Free Studio) Menu) - C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011-10-28] [ist nicht signiert]
FF Extension: (Video DownloadHelper) - C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-10-11]
FF Extension: (Adblock Plus) - C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-31]
FF SearchPlugin: C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\searchplugins\disconnectsearch.xml [2015-11-20]
FF SearchPlugin: C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\searchplugins\google-images.xml [2015-02-11]
FF SearchPlugin: C:\Users\Dodo\AppData\Roaming\Mozilla\Firefox\Profiles\mnxo088k.default\searchplugins\google-maps.xml [2015-02-11]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-04] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-27]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2014-06-02] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2016-10-26] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\npPDFXCviewNPPlugin.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-26] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2009-09-07] (CANON INC.)
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll [Keine Datei]
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\Win32\npPDFXCviewNPPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-31] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2904693490-1559453303-1626246330-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\Win32\npPDFXCviewNPPlugin.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2904693490-1559453303-1626246330-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Dodo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-27]
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5554152 2015-11-27] (Avast Software)
S4 DAUpdaterSvc; G:\Spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [25832 2009-12-15] (BioWare)
S3 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] ()
S4 GEST Service; C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe [68136 2009-02-06] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2016-01-29] (NVIDIA Corporation)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert]
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2016-01-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2099720 2016-07-23] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2009-10-17] ()
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [45056 2010-01-21] (Realtek) [Datei ist nicht signiert]
S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [633856 2011-06-08] (Nokia) [Datei ist nicht signiert]
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [117400 2016-06-08] ()
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-11-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-11-27] (AVAST Software)
R1 AswRdr; C:\Windows\system32\drivers\aswRdr.sys [64712 2015-11-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-11-27] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-27] (AVAST Software)
R3 aswStmXP; C:\Windows\system32\drivers\aswStmXP.sys [214008 2015-11-27] (AVAST Software)
S3 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65224 2015-11-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-11-27] (AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2011-06-07] ()
S3 Cardex; C:\Windows\SysWOW64\drivers\TBPANELX64.SYS [15648 2007-03-16] (Windows (R) Server 2003 DDK provider)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-06-07] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MicNgBas; C:\Windows\System32\DRIVERS\MicNgBas.sys [89896 2012-10-31] (Micronas GmbH)
R3 MicNgCap; C:\Windows\System32\DRIVERS\MicNgCap.sys [99624 2012-10-31] (Micronas GmbH)
R3 MicNgTun; C:\Windows\System32\DRIVERS\MicNgTun.sys [339240 2012-10-31] (Micronas GmbH)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [147088 2015-11-27] (AVAST Software)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-16] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-16] (RapidSolution Software AG)
S4 SecDrv; C:\Windows\SysWOW64\drivers\SECDRV.SYS [163644 2010-07-20] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Datei ist nicht signiert]
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
R0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce))
R0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [77952 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-12-21] () [Datei ist nicht signiert]
S2 TBPanel; kein ImagePath
R3 USBSTOR; C:\Windows\SysWOW64\DRIVERS\USBSTOR.SYS [0 2012-08-28] () <==== ACHTUNG (Null Byte Datei/Ordner)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [310904 2015-11-27] (Avast Software)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-05 21:14 - 2016-11-05 21:17 - 00001944 _____ C:\Users\Dodo\Desktop\Fixlog.txt
2016-11-05 18:24 - 2016-11-05 18:24 - 00005724 _____ C:\Users\Dodo\Desktop\mbam.txt
2016-11-04 18:34 - 2016-11-04 18:37 - 00194958 _____ C:\TDSSKiller.3.1.0.11_04.11.2016_18.34.50_log.txt
2016-11-03 19:33 - 2016-11-03 19:35 - 00194958 _____ C:\TDSSKiller.3.1.0.11_03.11.2016_19.33.22_log.txt
2016-11-03 19:32 - 2016-11-03 19:33 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Dodo\Desktop\tdsskiller.exe
2016-11-01 19:09 - 2016-11-06 13:45 - 00023660 _____ C:\Users\Dodo\Desktop\FRST.txt
2016-11-01 19:09 - 2016-11-05 18:28 - 00079810 _____ C:\Users\Dodo\Desktop\Addition.txt
2016-11-01 19:08 - 2016-11-06 13:45 - 00000000 ____D C:\FRST
2016-11-01 19:07 - 2016-11-01 19:07 - 02408960 _____ (Farbar) C:\Users\Dodo\Desktop\FRST64.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-06 13:24 - 2008-01-21 12:10 - 01692202 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-06 13:24 - 2008-01-21 12:09 - 00719864 _____ C:\Windows\system32\perfh007.dat
2016-11-06 13:24 - 2008-01-21 12:09 - 00165892 _____ C:\Windows\system32\perfc007.dat
2016-11-06 13:24 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\inf
2016-11-06 13:23 - 2010-08-25 21:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-06 12:59 - 2010-08-25 21:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-06 12:56 - 2006-11-02 16:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-06 12:56 - 2006-11-02 16:22 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-06 12:56 - 2006-11-02 16:22 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-06 09:28 - 2015-10-07 10:49 - 00000012 _____ C:\Windows\bthservsdp.dat
2016-11-06 09:28 - 2006-11-02 16:42 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-11-06 08:49 - 2013-01-13 11:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-05 22:08 - 2011-09-13 08:56 - 00000000 ____D C:\Users\Dodo\AppData\Roaming\vlc
2016-11-05 21:39 - 2016-08-17 14:51 - 00000000 ____D C:\Users\Dodo\Desktop\BNE-Projekt-Computer
2016-11-05 18:23 - 2014-08-09 18:11 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-05 18:08 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\PLA
2016-11-05 17:04 - 2014-02-19 16:59 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000UA.job
2016-11-05 17:04 - 2014-02-19 16:59 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000Core.job
2016-11-04 07:58 - 2013-07-29 17:34 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-01 20:37 - 2013-10-31 21:14 - 00000000 ____D C:\Program Files (x86)\Steam
2016-10-31 19:56 - 2015-10-13 17:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-31 19:56 - 2013-10-01 16:12 - 00000000 ____D C:\Program Files (x86)\Java
2016-10-31 19:55 - 2015-10-13 17:06 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-10-31 14:00 - 2014-08-09 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-31 14:00 - 2014-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-10-31 14:00 - 2012-12-12 22:32 - 00000908 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-10-26 18:50 - 2013-01-13 11:53 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-26 18:50 - 2012-04-03 11:35 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-26 18:50 - 2011-11-11 12:53 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-26 18:50 - 2011-05-19 19:59 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-26 18:50 - 2009-08-29 10:18 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-24 19:36 - 2011-09-28 13:14 - 00000000 ____D C:\Users\Dodo\AppData\Roaming\dvdcss
2016-10-22 17:06 - 2012-05-05 11:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-17 15:05 - 2015-08-19 19:34 - 00000000 ____D C:\Users\Dodo\Desktop\Tor Browser
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-01-19 12:30 - 2011-01-19 12:30 - 142700671 _____ () C:\Program Files\openofficeorg1.cab
2011-01-19 12:34 - 2011-01-19 12:34 - 3003392 _____ () C:\Program Files\openofficeorg33.msi
2011-01-19 12:33 - 2011-01-19 12:33 - 0475016 _____ () C:\Program Files\setup.exe
2011-01-19 11:15 - 2011-01-19 11:15 - 0000290 _____ () C:\Program Files\setup.ini
2014-06-30 10:45 - 2014-07-24 18:35 - 0002181 _____ () C:\Users\Dodo\AppData\Roaming\FoxitReaderUpdateInfo.txt
2015-03-31 19:43 - 2015-03-31 19:44 - 0019408 _____ () C:\Users\Dodo\AppData\Roaming\UserTile.png
2010-09-08 22:44 - 2015-02-11 19:38 - 0001356 _____ () C:\Users\Dodo\AppData\Local\d3d9caps.dat
2009-08-28 21:31 - 2012-06-04 17:18 - 0001460 _____ () C:\Users\Dodo\AppData\Local\d3d9caps64.dat
2009-08-30 01:25 - 2016-08-02 07:44 - 0204800 _____ () C:\Users\Dodo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-02-15 19:31 - 2010-02-15 19:31 - 0028150 _____ () C:\Users\Dodo\AppData\Local\dd_depcheckdotnetfx30.txt
2009-09-05 09:37 - 2015-07-03 18:19 - 0466942 _____ () C:\Users\Dodo\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
2015-07-03 13:54 - 2015-07-03 13:54 - 0000002 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx35error.txt
2009-09-05 09:36 - 2009-09-05 09:36 - 0000002 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx35error_lp.txt
2015-07-03 13:54 - 2015-07-03 18:31 - 0739230 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx35install.txt
2009-09-05 09:36 - 2015-07-03 14:04 - 0161434 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx35install_lp.txt
2010-02-15 19:31 - 2010-02-15 19:31 - 0000718 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx3error.txt
2010-02-15 19:31 - 2010-02-15 19:31 - 0032020 _____ () C:\Users\Dodo\AppData\Local\dd_dotnetfx3install.txt
2015-07-03 14:04 - 2015-07-03 14:04 - 0976830 _____ () C:\Users\Dodo\AppData\Local\dd_NET_Framework35_LangPack_MSI14EA.txt
2009-09-05 09:37 - 2009-09-05 09:37 - 0811580 _____ () C:\Users\Dodo\AppData\Local\dd_NET_Framework35_LangPack_MSI1B84.txt
2015-07-03 14:03 - 2015-07-03 14:04 - 2824480 _____ () C:\Users\Dodo\AppData\Local\dd_NET_Framework35_x64_MSI1436.txt
2015-07-03 18:31 - 2015-07-03 18:31 - 2824524 _____ () C:\Users\Dodo\AppData\Local\dd_NET_Framework35_x64_MSI60B5.txt
2012-02-15 17:17 - 2012-02-15 17:17 - 0436462 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI0841.txt
2011-12-04 13:21 - 2011-12-04 13:21 - 0361158 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI0BB0.txt
2015-07-03 13:53 - 2015-07-03 13:53 - 0368912 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI0C5E.txt
2011-04-08 23:11 - 2011-04-08 23:11 - 0374186 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI0F99.txt
2011-11-11 19:08 - 2011-11-11 19:08 - 0365012 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI1037.txt
2013-03-22 20:53 - 2013-03-22 20:53 - 0377928 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI110B.txt
2013-03-22 20:53 - 2013-03-22 20:53 - 0386394 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI1142.txt
2010-04-20 16:42 - 2010-04-20 16:43 - 0445814 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI291D.txt
2013-12-29 21:05 - 2013-12-29 21:05 - 0417886 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI2BB1.txt
2012-02-02 15:15 - 2012-02-02 15:15 - 0359074 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI3337.txt
2011-11-09 15:03 - 2011-11-09 15:03 - 0365304 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI386F.txt
2010-12-05 14:52 - 2010-12-05 14:52 - 0359244 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI3974.txt
2009-10-31 18:10 - 2009-10-31 18:11 - 0420394 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI3BD7.txt
2012-11-26 18:38 - 2012-11-26 18:38 - 0367402 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI4261.txt
2011-11-09 12:37 - 2011-11-09 12:37 - 0359238 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI48D1.txt
2011-11-11 12:06 - 2011-11-11 12:06 - 0365780 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI4D51.txt
2009-11-04 23:04 - 2009-11-04 23:04 - 0330262 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI54E1.txt
2013-03-25 22:52 - 2013-03-25 22:53 - 0375386 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI56C3.txt
2013-03-25 22:53 - 2013-03-25 22:53 - 0387932 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI56FB.txt
2013-07-29 17:34 - 2013-07-29 17:34 - 0389020 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI57A2.txt
2015-07-03 18:19 - 2015-07-03 18:19 - 0368912 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI57A3.txt
2011-09-08 15:26 - 2011-09-08 15:27 - 0381366 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI5E05.txt
2011-09-08 15:27 - 2011-09-08 15:27 - 0365718 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI5E92.txt
2011-09-10 14:53 - 2011-09-10 14:54 - 0464442 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI616D.txt
2009-12-06 13:34 - 2009-12-06 13:34 - 0335136 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI652B.txt
2011-04-29 22:46 - 2011-04-29 22:47 - 0463016 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI6572.txt
2013-10-27 18:03 - 2013-10-27 18:03 - 0375088 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI65F1.txt
2013-10-27 18:03 - 2013-10-27 18:03 - 0386866 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI6607.txt
2011-06-16 19:17 - 2011-06-16 19:18 - 0474996 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistMSI6B7F.txt
2012-02-15 17:17 - 2012-02-15 17:17 - 0011360 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI0841.txt
2011-12-04 13:21 - 2011-12-04 13:21 - 0011218 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI0BB0.txt
2015-07-03 13:53 - 2015-07-03 13:53 - 0011234 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI0C5E.txt
2011-04-08 23:11 - 2011-04-08 23:11 - 0013674 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI0F99.txt
2011-11-11 19:08 - 2011-11-11 19:08 - 0011370 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI1037.txt
2013-03-22 20:53 - 2013-03-22 20:53 - 0086532 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI110B.txt
2013-03-22 20:53 - 2013-03-22 20:53 - 0086436 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI1142.txt
2010-04-20 16:42 - 2010-04-20 16:43 - 0011642 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI291D.txt
2013-12-29 21:05 - 2013-12-29 21:05 - 0011152 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI2BB1.txt
2012-02-02 15:15 - 2012-02-02 15:15 - 0011474 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI3337.txt
2011-11-09 15:03 - 2011-11-09 15:03 - 0017426 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI386F.txt
2010-12-05 14:52 - 2010-12-05 14:52 - 0011138 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI3974.txt
2009-10-31 18:10 - 2009-10-31 18:11 - 0011442 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI3BD7.txt
2012-11-26 18:38 - 2012-11-26 18:38 - 0011202 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI4261.txt
2011-11-09 12:37 - 2011-11-09 12:37 - 0011138 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI48D1.txt
2011-11-11 12:06 - 2011-11-11 12:06 - 0011402 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI4D51.txt
2009-11-04 23:04 - 2009-11-04 23:04 - 0011218 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI54E1.txt
2013-03-25 22:52 - 2013-03-25 22:53 - 0012336 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI56C3.txt
2013-03-25 22:53 - 2013-03-25 22:53 - 0012416 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI56FB.txt
2013-07-29 17:34 - 2013-07-29 17:34 - 0015074 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI57A2.txt
2015-07-03 18:19 - 2015-07-03 18:19 - 0011234 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI57A3.txt
2011-09-08 15:26 - 2011-09-08 15:27 - 0011616 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI5E05.txt
2011-09-08 15:27 - 2011-09-08 15:27 - 0011424 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI5E92.txt
2011-09-10 14:53 - 2011-09-10 14:54 - 0019922 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI616D.txt
2009-12-06 13:34 - 2009-12-06 13:34 - 0433234 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI652B.txt
2011-04-29 22:46 - 2011-04-29 22:47 - 0014818 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI6572.txt
2013-10-27 18:03 - 2013-10-27 18:03 - 0011360 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI65F1.txt
2013-10-27 18:03 - 2013-10-27 18:03 - 0011408 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI6607.txt
2011-06-16 19:17 - 2011-06-16 19:18 - 0216228 _____ () C:\Users\Dodo\AppData\Local\dd_vcredistUI6B7F.txt
2009-10-19 17:11 - 2009-10-19 17:11 - 0000092 _____ () C:\Users\Dodo\AppData\Local\fusioncache.dat
2015-12-14 18:14 - 2015-12-14 18:14 - 0012282 _____ () C:\Users\Dodo\AppData\Local\recently-used.xbel
2009-09-05 09:36 - 2015-07-03 18:31 - 0009286 _____ () C:\Users\Dodo\AppData\Local\uxeventlog.txt
2009-08-30 12:56 - 2010-05-13 10:46 - 0000126 ___SH () C:\ProgramData\.zreglib
Einige mit null Byte Größe Dateien/Ordner:
==========================
C:\Windows\SysWOW64\Drivers\ntmap.sys
C:\Windows\SysWOW64\Drivers\UMP3.sys
C:\Windows\SysWOW64\Drivers\usbstor.sys
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-11-06 13:11
==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-10-2016
durchgeführt von Dodo (06-11-2016 13:45:52)
Gestartet von C:\Users\Dodo\Desktop
Windows Vista (TM) Home Premium Service Pack 2 (X64) (2009-08-28 20:26:27)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2904693490-1559453303-1626246330-500 - Administrator - Enabled) => C:\Users\Administrator
ASPNET (S-1-5-21-2904693490-1559453303-1626246330-1002 - Limited - Enabled)
Dodo (S-1-5-21-2904693490-1559453303-1626246330-1000 - Administrator - Enabled) => C:\Users\Dodo
Gast (S-1-5-21-2904693490-1559453303-1626246330-501 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
@BIOS Ver.2.05 (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.05 - GIGABYTE)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Alice Madness Returns (HKLM-x32\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
ANNO 1503 (HKLM-x32\...\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}) (Version: - )
Anno 1602 (HKLM-x32\...\ANNO1602) (Version: - )
Atom Zombie Smasher (HKLM-x32\...\Atom Zombie Smasher_is1) (Version: - Blendo Games)
Audials TV (HKLM-x32\...\{24EE4523-711A-4BD1-95EA-F73A8A6950D3}) (Version: 1.3.10803.300 - RapidSolution Software AG)
AudialsOne (HKLM-x32\...\{64E7AA85-CCA8-48CE-8F46-98649E908DF0}) (Version: 4.2.13200.0 - RapidSolution Software AG)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber Deutschland)
Audiograbber Lame-MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 11.1.2241 - AVAST Software)
Batman: Arkham City™ (HKLM-x32\...\GFWL_{57520FA0-AC56-469B-9983-FF1000008300}) (Version: 1.0.0000.131 - WB Games)
Batman: Arkham City™ (x32 Version: 1.0.0000.131 - WB Games) Hidden
BioShock (HKLM-x32\...\{E280923D-C5D9-4728-8C79-AC9A0DC75875}) (Version: 2.62.0000 - 2K Games)
Borderlands (HKLM-x32\...\{52B65911-1559-4ED5-9461-46957FDD48CD}) (Version: 1.0.295 - 2K Games)
Braid (Version 1.015) (HKLM-x32\...\Braid_is1) (Version: - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - )
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - )
Canon MP550 series Benutzerregistrierung (HKLM-x32\...\Canon MP550 series Benutzerregistrierung) (Version: - )
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version: - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software)
Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version: - )
Cogs (HKLM-x32\...\Cogs) (Version: - )
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Crayon Physics Deluxe version 55 (HKLM-x32\...\{4CA1E8E2-B2A9-40C1-8EC4-BBCB23BAAA19}_is1) (Version: 55 - Kloonigames, Ltd)
Darkspore™ (HKLM-x32\...\{B1AAE4BF-C98E-467E-94C7-4E1F51DD86E0}) (Version: 1.00.0000 - Electronic Arts)
Die Siedler (HKLM-x32\...\Die Siedler_is1) (Version: - )
Die Siedler II Gold Edition (HKLM-x32\...\Die Siedler II Gold Edition_is1) (Version: - )
DivX Player (HKLM-x32\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM-x32\...\DivX Plus DirectShow Filters) (Version: - DivX, Inc.)
DivX Version Checker (HKLM-x32\...\{3FC7CBBC4C1E11DCA1A752EA55D89593}) (Version: 7.1.0.9 - DivX, Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
DOOM 3: BFG Edition (HKLM-x32\...\Steam App 208200) (Version: - id Software)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.04 - Electronic Arts, Inc.)
Dropbox (HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
DVBViewer TERRATEC Edition (HKLM-x32\...\DVBViewer TERRATEC Edition_is1) (Version: - CM&V)
Energy Saver Advance B9.0316.1 (HKLM-x32\...\{7ED169D4-5053-4166-93DF-53B12AE6C539}) (Version: 1.10.0000 - GIGABYTE)
Eufloria (HKLM-x32\...\Steam App 41210) (Version: - Rudolf Kremers & Alex May)
EXPERTool 7.5 (HKLM-x32\...\EXPERTool_is1) (Version: - Gainward Co., Ltd)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Far Cry (HKLM-x32\...\InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ihr Firmenname)
Far Cry (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Foxit PDF Editor (HKLM-x32\...\Foxit PDF Editor) (Version: - )
Foxit PDF IFilter (HKLM\...\{03D3BAD4-28ED-4EF2-A369-D148A240D0B3}) (Version: 1.0.1729 - Foxit Software)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.6.321 - Foxit Software Inc.)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Free YouTube to MP3 Converter version 3.10.15.1228 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Ltd.)
FreeCAD 0.12 (HKLM-x32\...\{81ABC4A0-DE63-11DE-8A39-0800200C9A66}) (Version: 0.12.5284 - Juergen Riegel (FreeCAD@juergen-riegel.net))
GameRanger (HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\GameRanger) (Version: - GameRanger Technologies)
GameSpy Comrade (HKLM-x32\...\{894084B6-BC69-43B7-BF06-B93AECFEA520}) (Version: 2.1.1.214 - GameSpy)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
Inkscape 0.48.2 (HKLM-x32\...\Inkscape) (Version: 0.48.2 - )
Intel(R) Driver Update Utility 2.6 (x32 Version: 2.6.0.32 - Intel) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{3e714701-b89c-4cf2-bf3b-41b2c105ffdc}) (Version: 2.6.0.32 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
James Cameron's AVATAR(tm): DAS SPIEL (HKLM-x32\...\{7E19B002-4CA3-4C9F-BA92-91D101B97219}) (Version: 1.02.00 - Ubisoft)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\1489-3350-5074-6281) (Version: 0.9 - AppWork GmbH)
K-Lite Codec Pack 6.5.0 (Standard) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.5.0 - )
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version: - )
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Lexware Info Service (HKLM-x32\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG)
Logitech Gaming Software 8.55 (HKLM\...\Logitech Gaming Software) (Version: 8.55.137 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
Machinarium (HKLM-x32\...\Machinarium) (Version: 23.10.09 - Amanita Design, s.r.o.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect (HKLM-x32\...\{1B0FBB9A-995D-47CD-87CD-13E68B676E4F}) (Version: 1.2.20608.0 - Electronic Arts)
MAXQDA 11 (Release 11.0.10) (HKLM-x32\...\MAXQDA11) (Version: (Release 11.0.10) - VERBI Software.Consult.Sozialforschung GmbH)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Server Speech Platform Runtime (x86) (HKLM-x32\...\{22CB8ED7-DF57-4864-BD04-F63B9CE4B494}) (Version: 11.0.7400.345 - Microsoft Corporation)
Microsoft Server Speech Text to Speech Voice (de-DE, Hedda) (HKLM-x32\...\{ACFCC7B5-C028-40AE-A5F5-9778B41F22A2}) (Version: 11.0.7400.335 - Microsoft Corporation)
Microsoft Server Speech Text to Speech Voice (en-US, ZiraPro) (HKLM-x32\...\{C7CDC27F-0952-4DF1-9E41-B75140933BC6}) (Version: 11.0.7400.335 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 de)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MWS Reader 5 (HKLM-x32\...\MWS Reader 5_is1) (Version: 5.2.621 - directINNOVATION UG (haftungsbeschränkt))
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 341.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.95 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4550 - Electronic Arts, Inc.)
PC Connectivity Solution (HKLM-x32\...\{C373F7C4-05D2-4047-96D1-6AF30661C6AA}) (Version: 11.4.21.0 - Nokia)
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{8D273DE5-ABFA-4BD0-A9D7-EE9C971438C4}_is1) (Version: 2.0.54.0 - Tracker Software Products Ltd)
PixiePack Codec Pack (HKLM-x32\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
RAGE (HKLM-x32\...\Steam App 9200) (Version: - id Software)
Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5780 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0149 - REALTEK Semiconductor Corp.)
Risen 2 - Dark Waters (HKLM-x32\...\{CC4473E6-AB7D-406B-ADAE-BF9C61CEC5FE}) (Version: 1.00 - Deep Silver)
Risen 2 - ModStarter 2.0.0.0 (Online Mods DB version) (HKLM-x32\...\Risen 2 - ModStarter_is1) (Version: - LordOfWAR)
Sam and Max - Season One - Episode 104 - Abe Lincoln Must Die! (HKLM-x32\...\Episode 104 - Abe Lincoln Must Die!) (Version: 1.1.0.0-free - Telltale Games)
SecuROM Diagnostic Tool (HKLM-x32\...\SecuROM Diagnostic Tool) (Version: - Sony DADC Austria)
Servicepack Datumsaktualisierung (x32 Version: 1.00.00.0005 - Haufe-Lexware) Hidden
Shadowgrounds 1.05b (HKLM-x32\...\Shadowgrounds_is1) (Version: - Frozenbyte, Inc.)
Shadowgrounds Survivor 1.09 (HKLM-x32\...\Shadowgrounds Survivor_is1) (Version: - Frozenbyte, Inc.)
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 4 (HKLM-x32\...\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}) (Version: 1.74 - Firaxis Games)
Sid Meier's Civilization 4 (x32 Version: 1.61 - Firaxis Games) Hidden
Siedler3 (HKLM-x32\...\Siedler3Deinstall) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2009 (HKLM-x32\...\{410AB9BC-B057-4D39-9260-660EE1B4BED2}) (Version: 16.12.00.0001 - Haufe-Lexware GmbH & Co. KG)
Super Crossfire version 1.0 (HKLM-x32\...\{AE71B0D5-8873-4110-BD84-F5D5174EC342}_is1) (Version: 1.0 - Radiangames)
TERRATEC Cinergy 2400i DT (64 Bit) (HKLM-x32\...\{1C778F3E-3E83-4029-AC79-9D8D9D9A9F7F}) (Version: 1.1.0.284 - TERRATEC)
The Darkness II (HKLM-x32\...\Steam App 67370) (Version: - Digital Extremes)
The Evil Within (HKLM-x32\...\Steam App 268050) (Version: - Tango Gameworks)
The Path (HKLM-x32\...\Steam App 27000) (Version: - Tale of Tales)
The Void (HKLM-x32\...\The Void_is1) (Version: - )
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.4.5.1280 - CD Projekt Red)
Tomahawk (HKLM-x32\...\Tomahawk) (Version: 0.7.0 - Tomahawk-player.org)
Tomb Raider: Legend 1.0 (HKLM-x32\...\Tomb Raider: Legend) (Version: - )
TSL Alpha Demo - Public Demo RC1 (HKLM-x32\...\The Silver Lining_is1) (Version: - Phoenix Online Studios)
Update Manager B08.1027.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.7.3.0 - Azureus Software, Inc.)
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - TerraTec (MicNgBas) Media (04/21/2009 1.1.0.0284) (HKLM\...\7F9086B0202998E0E80985C36F977C0EE8003CC8) (Version: 04/21/2009 1.1.0.0284 - TerraTec )
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
X-Chat 2.8.6-2 (HKLM-x32\...\X-Chat 2_is1) (Version: 2.8.6-2 - SilvereX)
Xrodon (HKLM-x32\...\{74A80415-EBB2-447A-8A99-00F5E0009F42}) (Version: 1.00.0000 - Xrodon)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Dodo\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Dodo\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dodo\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00196EAE-E245-41CF-B6ED-8BEBD5F01D1E} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {007F3B2A-9C8B-44C9-9A83-2FBE9ECC66A2} - System32\Tasks\{13A6A191-3663-41E3-9576-41A3A866C14D} => pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe" -d G:\Download -c "G:\Download\THX-magnusk.pdf"
Task: {35681ACE-8384-44E5-83EF-4543D760B244} - System32\Tasks\{A400AD13-F3CA-4375-8487-6548FC80F354} => pcalua.exe -a "D:\EADM\EAD 4.0.0.462 release prod Installer.exe" -d D:\EADM
Task: {3863B40E-DD9B-459A-BDD3-BC1942913111} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000UA => C:\Users\Dodo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-19] (Facebook Inc.)
Task: {53B3B3C0-75E0-4105-A1C4-E63E21351CE3} - System32\Tasks\Microsoft\Windows\RestartManager\{069F86EF-0613-46ab-89FE-9FFFEA19D058} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {5E8F5383-E25E-42DF-9F73-41D2CCA677BB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-26] (Adobe Systems Incorporated)
Task: {625C803B-8AAE-4588-9BFA-D3D75104F973} - System32\Tasks\{6BEE6734-2B5E-49EA-AD31-4ECBD3B5EA75} => pcalua.exe -a G:\Download\Stronghold_v1_1.exe -d G:\Programme\Firefox
Task: {63E7BF33-DBCF-4CBE-A904-A5A778A6BF2D} - System32\Tasks\{C887397C-BEFB-4952-8948-C10E48E2F8F1} => pcalua.exe -a "H:\Half-Life 2\Uninstall Half-Life 2 Deutsche Sprachergänzung.exe"
Task: {6ACC99D0-8FAD-4F21-B90C-C7E98E1EA4E6} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {822DF6DC-1E5F-4D3C-B30E-F3FD75E99A86} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {93F3766D-D5C5-43D2-A678-0FADD259F429} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D78DD80C-76E7-4FC2-B131-F85CD97C3E72} - System32\Tasks\{083BE5DF-3794-43C8-8EC9-993D93C7972D} => pcalua.exe -a "C:\Program Files (x86)\Common Files\EAInstaller\Peggle\Cleanup.exe" -c uninstall_game -autologging
Task: {F24A3454-F638-4394-BA61-8E25075477C1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000Core => C:\Users\Dodo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-19] (Facebook Inc.)
Task: {F2FA68DA-056A-4A1A-AA8B-9E9197119310} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-27] (AVAST Software)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000Core.job => C:\Users\Dodo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2904693490-1559453303-1626246330-1000UA.job => C:\Users\Dodo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-10-20 09:45 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2009-10-02 19:53 - 2009-10-17 16:09 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-06-08 17:04 - 2016-06-08 17:04 - 00117400 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-06-08 17:04 - 2016-06-08 17:04 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2015-03-17 22:27 - 2015-11-27 12:37 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-03-17 22:27 - 2015-11-27 12:37 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-11-05 17:20 - 2016-11-05 17:20 - 03130832 _____ () C:\Program Files\AVAST Software\Avast\defs\16110500\algo.dll
2016-08-02 15:56 - 2016-08-02 15:56 - 00507808 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-11-06 12:57 - 2016-11-06 12:57 - 03130832 _____ () C:\Program Files\AVAST Software\Avast\defs\16110600\algo.dll
2014-02-12 14:04 - 2015-11-27 12:37 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-11-16 10:35 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Windows:DB1803DC62E828FE [98]
AlternateDataStreams: C:\ProgramData\TEMP:24721E3C [1950]
AlternateDataStreams: C:\ProgramData\TEMP:B606BA34 [112]
AlternateDataStreams: C:\ProgramData\TEMP:F84B8DB5 [120]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKLM\...\cmdfile\DefaultIcon: %SystemRoot%\System32\shell32.dll,-153 <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2006-11-02 13:34 - 2006-09-18 22:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2904693490-1559453303-1626246330-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dodo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: AeLookupSvc => 2
MSCONFIG\Services: DAUpdaterSvc => 2
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: ehstart => 2
MSCONFIG\Services: EMDMgmt => 2
MSCONFIG\Services: FoxitCloudUpdateService => 2
MSCONFIG\Services: GEST Service => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: MpsSvc => 2
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Wlansvc => 2
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\Services: WPDBusEnum => 2
MSCONFIG\Services: WPFFontCache_v0400 => 3
MSCONFIG\startupfolder: C:^Users^Dodo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DesktopVideoPlayer.lnk => C:\Windows\pss\DesktopVideoPlayer.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dodo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.3.lnk => C:\Windows\pss\OpenOffice.org 2.3.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dodo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonSolutionMenu => "C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" /logon
MSCONFIG\startupreg: Comrade.exe => C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe
MSCONFIG\startupreg: DivXMediaServer => "C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: EA Core => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ6.5\ICQ.exe" silent
MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
MSCONFIG\startupreg: Launch LCore => C:\Program Files\Logitech Gaming Software\LCore.exe /minimized
MSCONFIG\startupreg: LexwareInfoService => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NokiaMServer => C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
MSCONFIG\startupreg: NokiaOviSuite2 => C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
MSCONFIG\startupreg: NSU_agent => "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
MSCONFIG\startupreg: PDFPrint => "C:\Program Files (x86)\PDF24\pdf24.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe"
MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [TCP Query User{BD8AE32A-5F95-4215-B1A0-951EF03C769F}C:\program files (x86)\gigabyte\gbtupd\runupd.exe] => (Allow) C:\program files (x86)\gigabyte\gbtupd\runupd.exe
FirewallRules: [UDP Query User{FEF84EF3-A695-42D3-8C4D-DD871F348E23}C:\program files (x86)\gigabyte\gbtupd\runupd.exe] => (Allow) C:\program files (x86)\gigabyte\gbtupd\runupd.exe
FirewallRules: [{E9F3A9B7-AC9C-4CEE-9F1F-85454768615C}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Dx9.exe
FirewallRules: [{4B921A4F-07A7-4178-A329-3408A42FBA63}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Dx9.exe
FirewallRules: [{6613C863-2E63-43E8-AADA-8F7634AC2049}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Dx10.exe
FirewallRules: [{60D687C5-D6E4-42CB-B049-CCEA7C5D3B4A}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Dx10.exe
FirewallRules: [{F6C3BAD7-A911-4E06-968D-1584B5349BD1}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Launcher.exe
FirewallRules: [{3FCD362C-2BCB-472F-96AA-B3BF84F945B7}] => (Allow) G:\Spiele\Assasins Creed\Game\AssassinsCreed_Launcher.exe
FirewallRules: [{DFB0C412-B53F-49F9-9D4B-6AAF64EFC566}] => (Allow) G:\Spiele\Crysis\Bin32\Crysis.exe
FirewallRules: [{CEB8FE34-14B7-403A-BD39-7DE1514DFEE6}] => (Allow) G:\Spiele\Crysis\Bin32\Crysis.exe
FirewallRules: [{941ADF80-EC9F-4511-9235-D79B71CCF13F}] => (Allow) G:\Spiele\Crysis\Bin32\CrysisDedicatedServer.exe
FirewallRules: [{3369D2E1-C304-4E51-BC68-7366E2C51995}] => (Allow) G:\Spiele\Crysis\Bin32\CrysisDedicatedServer.exe
FirewallRules: [{D47FF97B-BFB0-4D8E-86DC-4CBC90DF177B}] => (Allow) G:\Spiele\Crysis\Bin64\Crysis.exe
FirewallRules: [{F4E00767-D0D6-406F-B695-78F3B8CBC3AE}] => (Allow) G:\Spiele\Crysis\Bin64\Crysis.exe
FirewallRules: [{71C596B9-69CA-4AFC-8681-3B60DAD28DE8}] => (Allow) G:\Spiele\Crysis\Bin64\CrysisDedicatedServer.exe
FirewallRules: [{2CAFB032-F219-456A-AB81-E95E403C5075}] => (Allow) G:\Spiele\Crysis\Bin64\CrysisDedicatedServer.exe
FirewallRules: [{F4DB1775-3D3A-4FA9-8064-2994D7366BA3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{41FEF90B-7F87-41CC-A2EA-5B5CAB2F8D7B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DBA3E4E4-8413-489B-A382-BCC878D7AEA3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CB6FF849-FE89-4E94-A2D2-9C9E80DF9A6A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D03F3D9-B469-49BC-B765-348F00F88807}] => (Allow) H:\Sacred\system\s2gs.exe
FirewallRules: [{6361E0B3-54D5-467F-AAEA-4FF0DC01B33E}] => (Allow) H:\Sacred\system\s2gs.exe
FirewallRules: [{0714E996-AD87-475D-AEA7-2AD85B4D8058}] => (Allow) H:\Sacred\system\sacred2.exe
FirewallRules: [{5A9A6E5D-5F62-4C7C-BD73-CDA8151DAEAC}] => (Allow) H:\Sacred\system\sacred2.exe
FirewallRules: [TCP Query User{51922FDC-E5DB-43BF-A1A1-8873013000C8}C:\program files (x86)\gigabyte\gbtupd\runupd.exe] => (Allow) C:\program files (x86)\gigabyte\gbtupd\runupd.exe
FirewallRules: [UDP Query User{2D1B9619-7039-4BAE-9760-85330E4464F7}C:\program files (x86)\gigabyte\gbtupd\runupd.exe] => (Allow) C:\program files (x86)\gigabyte\gbtupd\runupd.exe
FirewallRules: [TCP Query User{34368187-06BE-4791-8396-92D29EDEE86C}G:\spiele\borderlands\gearbox software\borderlands\binaries\borderlands.exe] => (Allow) G:\spiele\borderlands\gearbox software\borderlands\binaries\borderlands.exe
FirewallRules: [UDP Query User{9F586A91-DF71-4D54-A494-E4B3FCB7194C}G:\spiele\borderlands\gearbox software\borderlands\binaries\borderlands.exe] => (Allow) G:\spiele\borderlands\gearbox software\borderlands\binaries\borderlands.exe
FirewallRules: [TCP Query User{5BF5D91E-FDBD-4070-B3AE-D24CD0C00A0B}G:\programme\audialsone4\audialsone.exe] => (Allow) G:\programme\audialsone4\audialsone.exe
FirewallRules: [UDP Query User{BBB3F4A8-D899-4C59-B800-E8D2ADA5B658}G:\programme\audialsone4\audialsone.exe] => (Allow) G:\programme\audialsone4\audialsone.exe
FirewallRules: [{1F540F62-7137-472D-97A1-82833F26EA40}] => (Allow) G:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{DE95CCA7-1E91-4F66-B1C4-90CACB78C3C8}] => (Allow) G:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{25697D15-E2A8-460A-B277-4B14D1ECDA88}] => (Allow) G:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{18D1B51A-F366-4E17-9DAA-5C6E1DC4361A}] => (Allow) G:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{1B4B7DF0-F13A-4B21-8C5A-5AABD4ED9D1E}] => (Allow) H:\Spiele\Avatar\bin\Avatar.exe
FirewallRules: [{9E50C082-195C-4814-B726-7DA353ABCF43}] => (Allow) H:\Spiele\Avatar\bin\Avatar.exe
FirewallRules: [{D4DF43D4-0C66-4FDC-9DDA-1EA64AB6C6D9}] => (Allow) H:\Spiele\Avatar\bin\AvatarLauncher.exe
FirewallRules: [{90BE629C-8FC7-4477-A8B8-4625A34F41C7}] => (Allow) H:\Spiele\Avatar\bin\AvatarLauncher.exe
FirewallRules: [TCP Query User{0214F3A7-95B1-4772-A02C-0F6C4BA8897A}G:\programme\qip\qip.exe] => (Allow) G:\programme\qip\qip.exe
FirewallRules: [UDP Query User{22C6C730-EE54-4CF2-968D-D8E2A36705D3}G:\programme\qip\qip.exe] => (Allow) G:\programme\qip\qip.exe
FirewallRules: [TCP Query User{0EF7921E-5BCD-4CC2-B9B0-2B4CEEF9DD92}G:\programme\qip\qip.exe] => (Block) G:\programme\qip\qip.exe
FirewallRules: [UDP Query User{22A86623-2E00-4BE5-B62E-8AF2B721DB3E}G:\programme\qip\qip.exe] => (Block) G:\programme\qip\qip.exe
FirewallRules: [TCP Query User{B3EEFF8F-A685-4EE3-865B-7A0698842837}C:\program files (x86)\nokia\nokia software updater\nsu_ui_client.exe] => (Allow) C:\program files (x86)\nokia\nokia software updater\nsu_ui_client.exe
FirewallRules: [UDP Query User{9972FA76-0545-4720-B804-F950C66BAD44}C:\program files (x86)\nokia\nokia software updater\nsu_ui_client.exe] => (Allow) C:\program files (x86)\nokia\nokia software updater\nsu_ui_client.exe
FirewallRules: [TCP Query User{57C37BE3-B0EB-4D55-A4B4-F84B4C5588DD}C:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe] => (Allow) C:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe
FirewallRules: [UDP Query User{B456813D-E6D5-4AB7-9F33-095C5A10EC87}C:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe] => (Allow) C:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe
FirewallRules: [TCP Query User{4D80F5E1-5FB1-4533-AB03-B265781FAC2F}G:\programme\firefox\firefox.exe] => (Allow) G:\programme\firefox\firefox.exe
FirewallRules: [UDP Query User{C301A87E-3E15-4D7E-BF9F-21F64C54AED7}G:\programme\firefox\firefox.exe] => (Allow) G:\programme\firefox\firefox.exe
FirewallRules: [{AFE8C676-94B6-47DE-B7DD-245CCFB6A34B}] => (Allow) G:\Spiele\Civ4\Civilization4.exe
FirewallRules: [{FD8185CB-BB5B-466D-A713-4007CE7BFA7A}] => (Allow) G:\Spiele\Civ4\Civilization4.exe
FirewallRules: [TCP Query User{979F57F6-BFB7-455B-B092-0C2079C23338}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{F7621FB3-8A4E-437C-B2F4-A154AEF7889E}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [TCP Query User{51A96407-BE60-450E-9C9B-9AE1692AABAE}G:\spiele\return to castle wolfenstein\et.exe] => (Block) G:\spiele\return to castle wolfenstein\et.exe
FirewallRules: [UDP Query User{ECB1A91D-8E1D-4FA6-8434-195ECDA54EF4}G:\spiele\return to castle wolfenstein\et.exe] => (Block) G:\spiele\return to castle wolfenstein\et.exe
FirewallRules: [TCP Query User{2B7B8B6B-02ED-46E2-B1E2-A3EC67CD9711}C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{5C3CBD2E-38DA-436A-9631-1A094FF843CF}C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{0C5843E5-2184-4636-BE5A-0198B1EE144D}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{D00F4137-9BDB-4644-A84B-41B3D2FBD99F}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{10192BEE-0D17-40AF-9C85-1B8CC56679D1}] => (Allow) LPort=1542
FirewallRules: [{CF8A2690-7633-493D-B237-755992909B21}] => (Allow) LPort=1542
FirewallRules: [{17E3763F-5EA8-4E36-8E92-B12BB74925AF}] => (Allow) LPort=53
FirewallRules: [{F45FF53D-2156-4C0C-933F-0B403EC5A167}] => (Allow) LPort=80
FirewallRules: [{8CE03B20-23BE-4579-82DF-C1DE5D3ADCB1}] => (Allow) LPort=80
FirewallRules: [{E5DFA1E1-25DC-4320-923B-9667745BD060}] => (Allow) LPort=80
FirewallRules: [{0DCC0D3D-92F7-42C1-A5D3-759490FB5D0D}] => (Allow) G:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{C305DE5C-EA8B-4D84-8358-6B6E7C1BE004}] => (Allow) G:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [TCP Query User{2B7FBBD1-B376-48EE-A0CC-35B6FB1EF2F9}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{4305BF48-D73E-4164-9096-55B8094065D9}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{33511513-13E0-421D-9A8B-8EBF878F9EAE}G:\spiele\wc3ft\war3.exe] => (Allow) G:\spiele\wc3ft\war3.exe
FirewallRules: [UDP Query User{5801BF73-F567-4658-AF26-81126149E477}G:\spiele\wc3ft\war3.exe] => (Allow) G:\spiele\wc3ft\war3.exe
FirewallRules: [{79CEA734-18C3-4539-8668-FAC948DC6FE3}] => (Allow) G:\Spiele\wc3ft\Frozen Throne.exe
FirewallRules: [{19E101DC-DAEE-4C01-968F-C62F6C635C59}] => (Allow) G:\Spiele\wc3ft\Frozen Throne.exe
FirewallRules: [TCP Query User{0E36FF4E-998A-4EFF-AEA1-E369A2648EE9}G:\spiele\wc3ft\war3.exe] => (Allow) G:\spiele\wc3ft\war3.exe
FirewallRules: [UDP Query User{055EA4FF-6497-4D22-A6B8-EEE9F62B1442}G:\spiele\wc3ft\war3.exe] => (Allow) G:\spiele\wc3ft\war3.exe
FirewallRules: [TCP Query User{6861D84F-279D-4E3D-BB97-603BBF565B7C}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{DF287267-7BEB-404C-863C-9BEB7F59F3AC}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [{EAA2E3A4-3290-40E2-9030-C2D8A5A3CD4B}] => (Allow) G:\Spiele\ANNO1602\1602.exe
FirewallRules: [{257D3558-E6DF-492A-914C-3141E8923C9E}] => (Allow) G:\Spiele\ANNO1602\1602.exe
FirewallRules: [TCP Query User{59AF9E7C-C430-43DB-B28F-5C3EA19632F7}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{A4CCC909-5A07-4E95-9C6B-0A94879FE1EE}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{47C36DBC-4902-436D-9F6F-EC29B5CA4DCF}G:\spiele\age of empires\empires2.exe] => (Block) G:\spiele\age of empires\empires2.exe
FirewallRules: [UDP Query User{CC1B33F2-E6A3-422E-9E83-437D73C63106}G:\spiele\age of empires\empires2.exe] => (Block) G:\spiele\age of empires\empires2.exe
FirewallRules: [{008AC44C-0E7C-46DA-8BC9-A8F575CAABCD}] => (Allow) G:\Spiele\Civ4 - Complete\Civilization4.exe
FirewallRules: [{9F0C3483-D46D-4F45-A047-707F38A5E834}] => (Allow) G:\Spiele\Civ4 - Complete\Civilization4.exe
FirewallRules: [{8D4441B5-E153-43EA-BB02-D9C385DBDC14}] => (Allow) G:\Spiele\Civ4 - Complete\Warlords\Civ4Warlords.exe
FirewallRules: [{6AE4B54C-E6F3-4030-9707-A81D0ED3A593}] => (Allow) G:\Spiele\Civ4 - Complete\Warlords\Civ4Warlords.exe
FirewallRules: [{2E8D0071-B48B-4A90-B95A-7C64199F0E3C}] => (Allow) G:\Spiele\Civ4 - Complete\Beyond the Sword\Civ4BeyondSword.exe
FirewallRules: [{9B0CAAB0-7F12-4D61-8F5B-4CEF89B8038E}] => (Allow) G:\Spiele\Civ4 - Complete\Beyond the Sword\Civ4BeyondSword.exe
FirewallRules: [TCP Query User{D6EB5AF5-8ED8-4539-A3AD-14F544C6298A}G:\spiele\civ4 - complete\civilization4.exe] => (Block) G:\spiele\civ4 - complete\civilization4.exe
FirewallRules: [UDP Query User{60EB019F-6174-48C2-B994-5BBF177D9F00}G:\spiele\civ4 - complete\civilization4.exe] => (Block) G:\spiele\civ4 - complete\civilization4.exe
FirewallRules: [TCP Query User{91D5CD34-966A-40CC-85FD-0CE2D7A8C9C2}C:\program files (x86)\slysoft\winamp\winamp.exe] => (Allow) C:\program files (x86)\slysoft\winamp\winamp.exe
FirewallRules: [UDP Query User{95FD8E5A-ECC4-4307-B965-52F216EF7286}C:\program files (x86)\slysoft\winamp\winamp.exe] => (Allow) C:\program files (x86)\slysoft\winamp\winamp.exe
FirewallRules: [TCP Query User{106033D7-0B9E-4FB0-9EA4-09C5BA02F372}G:\spiele\civ4\civilization4.exe] => (Block) G:\spiele\civ4\civilization4.exe
FirewallRules: [UDP Query User{61963017-EE5B-4CDC-A749-1535CE105379}G:\spiele\civ4\civilization4.exe] => (Block) G:\spiele\civ4\civilization4.exe
FirewallRules: [TCP Query User{A06E0C9A-C7BE-448E-8ECD-ACE19B33ABDF}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{645D38B9-00FD-4A83-8666-06238BA80E47}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{C547955E-2C85-424D-BC00-3BB38DEFD201}C:\program files (x86)\qip 2010\qip.exe] => (Block) C:\program files (x86)\qip 2010\qip.exe
FirewallRules: [UDP Query User{9538098C-F967-4103-A971-8A8FECD45E25}C:\program files (x86)\qip 2010\qip.exe] => (Block) C:\program files (x86)\qip 2010\qip.exe
FirewallRules: [TCP Query User{0011D549-4ED7-4DA1-8D7A-9AFF8228FB78}C:\program files (x86)\qip 2010\qip.exe] => (Allow) C:\program files (x86)\qip 2010\qip.exe
FirewallRules: [UDP Query User{10F9C05E-D083-4FB1-917C-5AE51448ED0B}C:\program files (x86)\qip 2010\qip.exe] => (Allow) C:\program files (x86)\qip 2010\qip.exe
FirewallRules: [TCP Query User{1D639947-3EF6-439D-8081-F5F6483C37D3}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{FD2D6B95-4586-4218-969D-6B248B94A61F}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{8BA6552F-AB3E-4B51-BFBC-399C6335EEB4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{C28BC18A-7B7B-4DB3-8591-65682E785376}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{B1D7BDD0-E167-47B3-996E-C50853992FE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\monkey2\Monkey2.exe
FirewallRules: [{FB62B986-6C83-4B11-8059-861220F2B884}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\monkey2\Monkey2.exe
FirewallRules: [TCP Query User{4584F86E-B3BD-4FFE-8D11-41267273EDDE}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{839D915B-9ED3-4936-B041-EC17DF91A283}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{81147C50-22EB-47B8-BC42-86090D95CE3C}G:\programme\x-chat 2\xchat.exe] => (Allow) G:\programme\x-chat 2\xchat.exe
FirewallRules: [UDP Query User{1D249207-A7B6-4353-95A5-6E06B8C20E32}G:\programme\x-chat 2\xchat.exe] => (Allow) G:\programme\x-chat 2\xchat.exe
FirewallRules: [{CC5FAC6E-492B-497F-BC15-4F0956E96EC7}] => (Allow) G:\Spiele\Darkspore\DarksporeBin\Darkspore.exe
FirewallRules: [{C5DDDB51-6693-41E9-B009-FE79BD6FDC27}] => (Allow) G:\Spiele\Darkspore\DarksporeBin\Darkspore.exe
FirewallRules: [TCP Query User{51CD10E3-3AD5-45D5-88CA-A558065A7EB7}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Block) C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [UDP Query User{E1CD9B5D-7912-4CDB-9037-9DF0D486D6D1}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Block) C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [TCP Query User{91EC461E-A1F5-45B2-B9FF-08DA441CC1C4}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [UDP Query User{03A21F6A-721A-400C-9179-478DD8E4C57F}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [TCP Query User{7D6A124A-C65F-4F79-B782-6F6016D8852A}H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [UDP Query User{97F217D5-50BE-4F01-8571-CE5EF17656B5}H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [TCP Query User{E69E12F9-4236-407A-A984-7584CBB4A634}H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [UDP Query User{5F6F26F1-0864-42B5-A61A-71C6D97712A2}H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) H:\spiele\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [{6D534BC7-5220-46EE-BFFE-A4500A9176E6}] => (Allow) H:\Spiele\Mass Effect\MassEffectLauncher.exe
FirewallRules: [{E24BC96A-A0DA-4953-9701-0F1FFB9141A5}] => (Allow) H:\Spiele\Mass Effect\MassEffectLauncher.exe
FirewallRules: [{4CFAFD75-1AC7-4421-9F18-30D91305C949}] => (Allow) H:\Spiele\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{AAC6C58B-27D4-4E7B-A2FD-79215BBD955B}] => (Allow) H:\Spiele\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{E8643DF7-83FA-45F4-831C-5ED0BE7D6C77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell legacy\blackwell1.exe
FirewallRules: [{B75F3118-4598-4E72-BDB6-2829E0391876}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell legacy\blackwell1.exe
FirewallRules: [{BBC9605A-36EF-4D85-8732-D4D0CDFC69C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell unbound\Unbound.exe
FirewallRules: [{1F74DD4C-22B6-4793-A98F-5FA5F5A2B25D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell unbound\Unbound.exe
FirewallRules: [{692B3D70-09FE-4677-881B-494D90F76751}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell convergence\Convergence.exe
FirewallRules: [{2E83F4F3-5965-42CF-AADB-A5A4BBDF0BDE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\blackwell convergence\Convergence.exe
FirewallRules: [{74B1B4CA-074B-4EE7-8F53-13D2B5A1B58D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\ndsrv.exe
FirewallRules: [{820883AF-EDFA-47D7-B4D2-73B4754BACC0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\ndsrv.exe
FirewallRules: [{D64E0BB9-CCB1-4723-84C7-0026FEEA7D83}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\bin\SDKLauncher.exe
FirewallRules: [{19248A0C-D1E6-4D8B-99F7-1B9F835C1035}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\bin\SDKLauncher.exe
FirewallRules: [{EF2BD3A3-39D8-4CB1-8C17-10645D130A6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rbs\Really Big Sky.exe
FirewallRules: [{E95B6D9C-6B9B-4FF4-A444-147E920E3F78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rbs\Really Big Sky.exe
FirewallRules: [{8443F0B7-E8DD-4F5D-9D3F-722F0E845D9C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\aquaria\Aquaria.exe
FirewallRules: [{A18FA233-FFF8-41DA-AE6C-218F594A8967}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\aquaria\Aquaria.exe
FirewallRules: [TCP Query User{9839678D-1AA5-4A75-9210-C6F51D27B1C3}G:\spiele\farcry\bin32\farcry.exe] => (Block) G:\spiele\farcry\bin32\farcry.exe
FirewallRules: [UDP Query User{419B84F5-25E5-4451-BDC0-04B757B607F9}G:\spiele\farcry\bin32\farcry.exe] => (Block) G:\spiele\farcry\bin32\farcry.exe
FirewallRules: [{52E30F4F-1705-445E-B248-A8B6EA949311}] => (Allow) C:\Users\Dodo\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{B7AADC19-49D7-41E8-8003-F68208F41941}] => (Allow) C:\Users\Dodo\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D1329306-140B-4D2F-84E7-2B9A101ACB65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Puzzle Agent 2\Grickle102.exe
FirewallRules: [{76702735-32A9-4185-B81D-C6097B05C663}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Puzzle Agent 2\Grickle102.exe
FirewallRules: [{55C7E51C-4E4A-4EDE-99AD-092562A86BFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exe
FirewallRules: [{42AA2EDB-DAA1-4ACC-8AA6-40D76FDCD466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exe
FirewallRules: [{4C80B975-4F9A-4911-8A62-BDF4207D53F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Children of the Nile\CoTN.exe
FirewallRules: [{A320BF7C-1F37-42F2-800B-C933894FCDDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Children of the Nile\CoTN.exe
FirewallRules: [{3A625B2F-68EE-4BB5-A0D1-B90740DFF1EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
FirewallRules: [{3409CF9E-1D62-4F11-8034-2D1A72C8301B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
FirewallRules: [{7C269F47-6FE7-4F33-B0A5-95EFE8F2EE6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Krater\run_game.exe
FirewallRules: [{8FD7900F-9F74-44AB-BA7A-3ED744863EF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Krater\run_game.exe
FirewallRules: [{C6B53DF2-9D36-4AAD-8D75-8DD5F3CA90BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Dream Machine\the_dream_machine.exe
FirewallRules: [{898DFB1A-343E-4899-9A02-350F4820EFE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Dream Machine\the_dream_machine.exe
FirewallRules: [TCP Query User{7046F82D-4763-47B1-A71E-D8B175EEA9BE}C:\program files (x86)\steam\steamapps\common\unmechanical\binaries\win32\udk.exe] => (Block) C:\program files (x86)\steam\steamapps\common\unmechanical\binaries\win32\udk.exe
FirewallRules: [UDP Query User{5C6CDBB0-4C48-4CAB-875F-EC8FE93A52D8}C:\program files (x86)\steam\steamapps\common\unmechanical\binaries\win32\udk.exe] => (Block) C:\program files (x86)\steam\steamapps\common\unmechanical\binaries\win32\udk.exe
FirewallRules: [{19D8FCCD-FB9E-4173-90C6-666A653C36EF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{BBCE5C2D-9934-4E0C-B053-A00B654337EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{EB92C349-3CEC-4D0B-8045-69423EA15D71}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{B246163B-E0C3-4A30-B7D9-C1F78D199850}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{DA149523-62FC-4F87-BE0D-2D55A32EC730}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{2B36C248-4C13-42A9-B00C-1A07FD0E2458}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{68CBA541-39B9-4A52-B31A-DEE84CF0DF56}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{692854D9-4952-4D20-8778-10CC99B7C5AE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [TCP Query User{5712E80B-63D1-4381-93DA-041B9118B949}C:\program files (x86)\tomahawk\tomahawk.exe] => (Allow) C:\program files (x86)\tomahawk\tomahawk.exe
FirewallRules: [UDP Query User{9FA226DC-9B7F-42F5-A198-622B9E0920B1}C:\program files (x86)\tomahawk\tomahawk.exe] => (Allow) C:\program files (x86)\tomahawk\tomahawk.exe
FirewallRules: [TCP Query User{B4D9386F-A3F1-42AC-868D-F8A34C442122}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{AF6F1952-EA27-4997-9A50-B3091AC02439}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{572160F8-D9BF-481B-BEEC-963FB5944C42}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{112C5841-DFBE-4918-9AA3-4623753F9927}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{98FD4D3E-9F1B-45FD-8565-14DD1695F659}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe
FirewallRules: [UDP Query User{BA6C23F3-02E8-46AA-8EC5-08DB90E76ED8}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe
FirewallRules: [{96DC8AE7-D131-43FC-AEC9-059A404431E6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Eufloria\Eufloria.exe
FirewallRules: [{16B6223D-F4F2-4009-BDE5-97361F69786D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Eufloria\Eufloria.exe
FirewallRules: [TCP Query User{A12FF843-122D-41B7-88F8-847A24AFCDCF}C:\program files (x86)\steam\steam.exe] => (Block) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{CF1327EE-6988-48B6-A9BD-A2983AFDB1D1}C:\program files (x86)\steam\steam.exe] => (Block) C:\program files (x86)\steam\steam.exe
FirewallRules: [{9C5BF215-DB4F-4C37-86CD-F8B9B04B7BF7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B2542680-7704-4171-A418-EB3FB115F890}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6C9C33FD-F653-4368-8896-27F40C654BB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darkness II\DarknessII.exe
FirewallRules: [{7FE9725A-2E2B-451A-AB71-F37922F31474}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darkness II\DarknessII.exe
FirewallRules: [{7F5AEC49-3D62-4C04-A994-A6008174868B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fractal\fractal.exe
FirewallRules: [{7D63FB58-4E02-4EEC-8E9B-27D9B082B6A7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fractal\fractal.exe
FirewallRules: [{A857C3B1-C26C-4B85-BF32-C74EE4A8ACDB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Path\PathViewer.exe
FirewallRules: [{024314D0-8C4A-4A03-B072-850C46F66F5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Path\PathViewer.exe
FirewallRules: [{37D862E0-073E-446A-9211-0500A5C1FE84}] => (Allow) C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{6F6CD146-0BEF-4ADF-BFA7-C49711C4B194}] => (Allow) C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{4299BEC9-AB85-48EB-947D-205804FC55F7}] => (Allow) C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [{796E5F06-0E0E-4D73-877E-6A867DCD6631}] => (Allow) C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [{7A1A59D7-A5B6-41BB-8883-98DC6DD56A2B}] => (Allow) C:\Users\Dodo\AppData\Local\vghd\bin\Virtuagirl_Downloader.exe
FirewallRules: [{B5F18611-4BC3-4630-8D2B-7A04D32259CC}] => (Allow) C:\Users\Dodo\AppData\Local\vghd\bin\Virtuagirl_Downloader.exe
FirewallRules: [TCP Query User{2FE753AC-5569-4401-BA6C-E537AF5E4F77}G:\spiele\dragon age\bin_ship\daorigins.exe] => (Block) G:\spiele\dragon age\bin_ship\daorigins.exe
FirewallRules: [UDP Query User{89D60E64-0C6F-424A-A80D-ECC66138AB60}G:\spiele\dragon age\bin_ship\daorigins.exe] => (Block) G:\spiele\dragon age\bin_ship\daorigins.exe
FirewallRules: [{F133E6F8-0579-46BA-9A82-236FB2DAFECD}] => (Allow) C:\Users\Dodo\AppData\Local\vghd\bin\Virtuagirl_Downloader.exe
FirewallRules: [{C442AC3E-2B86-481A-BA7A-4F9402828439}] => (Allow) C:\Users\Dodo\AppData\Local\vghd\bin\Virtuagirl_Downloader.exe
FirewallRules: [{58D04961-E240-4CFB-A53A-7C6AB341B265}] => (Allow) H:\Spiele\Peggle Deluxe\Peggle.exe
FirewallRules: [{E4938D0A-8EDE-4C0D-84D7-1FDFD6F8D96C}] => (Allow) H:\Spiele\Peggle Deluxe\Peggle.exe
FirewallRules: [{BC3945F0-0C9C-4401-9258-0910CFD2E8EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DOOM 3 BFG Edition\Doom3BFG.exe
FirewallRules: [{823DBA16-C311-4074-81FA-98900BFB5652}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DOOM 3 BFG Edition\Doom3BFG.exe
FirewallRules: [{46981D27-5B9F-4A26-B472-C707AAC5F8EC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E536A8DD-7CBD-4DCF-87FD-BB95BB1403B9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E5033104-B807-465B-923E-8D18AF12FAD4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RAGE\Rage.exe
FirewallRules: [{5FA6B2C8-EDBC-415B-A3A6-543FEF3D5421}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RAGE\Rage.exe
FirewallRules: [{CFF478BF-2D97-4333-A1BA-32F3EBC2F753}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RAGE\Rage64.exe
FirewallRules: [{6179D8CC-8475-4192-AA35-663436648C84}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RAGE\Rage64.exe
FirewallRules: [TCP Query User{971206DB-22ED-4C6C-9A3D-0EC5147535AB}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{38259DE5-A5C9-4992-8FA2-F9B2C1FC0C3A}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{8FADC12F-AB22-49D9-B2E1-F67B425E6876}] => (Allow) C:\Users\Dodo\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{AEAC4E7A-B3B2-4F84-8A5F-19586BD0AB97}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3C4544C2-C354-42A5-A680-C7EA69B58C02}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{3A1AA0E9-5AA1-47AA-8279-0983A2D04102}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{B2791C9F-114B-4374-9381-DC5C31020127}] => (Allow) C:\Users\Dodo\AppData\Local\Apps\2.0\MBJK7BLZ.BKV\DC17LPBR.VHM\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b6290e21932c\CurseClient.exe
FirewallRules: [{5E46F96F-9D0F-4F56-BB4C-9881843C2DA5}] => (Allow) C:\Users\Dodo\AppData\Local\Apps\2.0\MBJK7BLZ.BKV\DC17LPBR.VHM\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b6290e21932c\CurseClient.exe
FirewallRules: [{9E71FD1C-770C-41A1-A34F-049DBE0B9D74}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{17C19D37-574B-4DE6-A6E5-8AA71B71C741}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{55764CB9-03C6-4A52-B68F-DE8B1A99C221}] => (Allow) G:\Programme\Firefox\firefox.exe
FirewallRules: [{9C20345D-1F41-49DE-AC80-D99A8375ADF9}] => (Allow) G:\Programme\Firefox\firefox.exe
FirewallRules: [{1A2CEDEC-AE4A-427D-9DE8-EA07C916902E}] => (Allow) H:\Spiele\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{9F5F4334-B405-4500-BB3E-C9DAD97073D9}] => (Allow) H:\Spiele\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{B3BD9A7F-BCD1-45D2-A876-FF1DAD999DEB}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{2FF291CB-8C43-4249-BC61-D66698E8D7F6}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{A365A11A-1749-4877-AAAF-CB3685E30777}] => (Allow) LPort=26675
FirewallRules: [{85A3DF43-2958-4928-994F-F7464C0AE4BE}] => (Allow) G:\Programme\Firefox\firefox.exe
FirewallRules: [{69B8B30C-3B59-4F9E-8F45-708177EE2447}] => (Allow) G:\Programme\Firefox\firefox.exe
FirewallRules: [{ADC8690D-77A0-4FA6-8BAE-441341D79222}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{8FFD3624-5BE2-47AC-975E-28CFB00A9441}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{C2A4D8C4-2024-4235-9660-24C702100459}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{8AA8022F-6DE5-4340-B2C5-54B281CC94DD}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{6C51C4E8-6B20-41D4-A834-EF8214896C68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{78CA2536-2D3B-4EBC-9274-07F0C8D91A28}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheEvilWithin\EvilWithin.exe
==================== Wiederherstellungspunkte =========================
24-08-2016 16:24:08 Windows Update
24-08-2016 18:00:36 Windows Update
02-10-2016 11:37:38 Installed Microsoft Server Speech Platform Runtime (x86)
02-10-2016 11:38:15 Installed Microsoft Server Speech Text to Speech Voice (de-DE, Hedda)
02-10-2016 11:38:43 Installed Microsoft Server Speech Text to Speech Voice (en-US, ZiraPro)
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/05/2016 09:56:48 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\DODO\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\MNXO088K.DEFAULT\SAFEBROWSING-TO_DELETE> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (11/05/2016 09:56:48 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\DODO\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\MNXO088K.DEFAULT\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (10/31/2016 03:31:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung versabus-5.exe, Version 1.99.9.9, Zeitstempel 0x5315892f, fehlerhaftes Modul versabus-5.exe, Version 1.99.9.9, Zeitstempel 0x5315892f, Ausnahmecode 0xc0000005, Fehleroffset 0x0000113e,
Prozess-ID 0x17a0, Anwendungsstartzeit 01d233838643d350.
Error: (10/17/2016 03:06:27 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\DODO\DESKTOP\TOR BROWSER\BROWSER\TORBROWSER\DATA\BROWSER\PROFILE.DEFAULT\PREFS-1.JS> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (09/28/2016 06:01:59 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\DODO\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\MNXO088K.DEFAULT\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (09/21/2016 02:13:29 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={EC095443-4F74-4960-82CA-C41D36085170}: Der Benutzer "ANONYMOUS\Dodo" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 815.
Error: (09/11/2016 12:34:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung plugin-container.exe, Version 48.0.2.6079, Zeitstempel 0x57bd3628, fehlerhaftes Modul mozglue.dll, Version 48.0.2.6079, Zeitstempel 0x57bd2857, Ausnahmecode 0x80000003, Fehleroffset 0x0000efe5,
Prozess-ID 0x738, Anwendungsstartzeit 01d20bbb9c60d9e1.
Error: (09/05/2016 05:51:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\AVAST Software\Avast\Setup\4815a8ed-a18f-4ec2-a6b8-9f54c0e558ee.dll".
Die abhängige Assemblierung "Avast.VC140.CRT,processorArchitecture="x86",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.23918.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/29/2016 05:23:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung Ini2TABDelim.exe, Version 0.0.0.1, Zeitstempel 0x4faefdca, fehlerhaftes Modul kernel32.dll, Version 6.0.6002.19594, Zeitstempel 0x56ac2a1d, Ausnahmecode 0x0eedfade, Fehleroffset 0x0002012f,
Prozess-ID 0x1228, Anwendungsstartzeit 01d20211a6ad6459.
Error: (08/24/2016 08:09:22 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: System.Windows.Presentation, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070020
Systemfehler:
=============
Error: (11/06/2016 12:56:21 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
i8042prt
Error: (11/06/2016 12:56:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TBPanel" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (11/06/2016 08:27:18 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
i8042prt
Error: (11/06/2016 08:27:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TBPanel" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (11/05/2016 09:20:49 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
i8042prt
Error: (11/05/2016 09:20:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TBPanel" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (11/05/2016 09:15:23 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (11/05/2016 09:14:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Softwarelizenzierung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/05/2016 09:14:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/05/2016 09:14:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-11-05 17:57:24.616
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:24.363
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:24.108
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:23.856
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:23.602
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:23.348
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:23.063
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:22.802
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:22.546
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2016-11-05 17:57:22.289
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM)2 Quad CPU Q9550 @ 2.83GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 6141.58 MB
Verfügbarer physikalischer RAM: 3243.46 MB
Summe virtueller Speicher: 12480.13 MB
Verfügbarer virtueller Speicher: 9433.34 MB
==================== Laufwerke ================================
Drive c: (Charles) (Fixed) (Total:519.45 GB) (Free:335.32 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive g: (Charleene) (Fixed) (Total:97.66 GB) (Free:9.91 GB) NTFS
Drive h: (Charly) (Fixed) (Total:314.41 GB) (Free:68.59 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 875289B3)
Partition 1: (Active) - (Size=519.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=314.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
