Trojaner-Board - Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan] (https://www.trojaner-board.de/185707-win10-64-bit-avira-meldung-tr-dropper-gen-trojan.html)

Win10 64-Bit Avira Meldung TR/Dropper.Gen [trojan]

Hallo zusammen,

bei der Installation der VPN Software von Perfect Privacy hat Avira (Free Version) die folgende Fundmeldung ausgespuckt:

Code:

24.05.2017, 22:15:04 [Real-Time Protection] Malware found

        The pattern of 'TR/Dropper.Gen [trojan]'

        detected in file 'C:\Users\rocker2511\AppData\Local\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\cache2\entries\B9458A4FA6BB12A42317D79BB34E62FEC82C05BB.

        Action performed: Move file to quarantine

Ich habe daraufhin bei Avira das File gelöscht und die Software wieder deinstalliert.
Zwar vermute ich, dass es ein false positive war, und auch sollte Avira ja theoretisch schlimmeres verhindert haben. Sollte es tatsächlich echt gewesen sein, würde mich aber gerne absichern, bevor ich den PC wieder für Banking o.ä. nutze.

Gerne wollte ich mich an die Richtline halten, die unter http://www.trojaner-board.de/69886-a...-beachten.html angegeben ist, bei der Installation von FRST64 meldet sich allerdings der Windows Defender mit folgender Meldung:

Code:

Der Computer wurde durch Windows geschützt. 

Von Windows Defender Smartscreen wurde der Start einer unbekannten App verhindert. 

Die Ausführund dieser App stellt u.U. ein Risiko für den PC dar.

Da dies nicht in der Anleitung aufgeführt ist, wollte ich bevor ich auf "Trotzdem Ausführen" klicke, nachfragen, ob das so normal ist.

Schon einmal vielen Dank für eure Hilfe.

Beste Grüße
rocker2511

hi,

Bitte Avira deinstallieren. Am besten mit Revo, siehe weiter unten. Avira ost totaler Schrott und absolut unnötig, Windows bringt ein eingebautes AV mit (Windows Defender)

Das Teil empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

(alles von Avira)
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

Hallo cosinus,

vielen Dank für deine schnelle Rückmeldung.
Alle Avira Software habe ich entsprechend deiner Anleitung entfernt und den PC neu gestartet.

gut :party:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hierzu nochmal kurz die Frage, ob das in meinem Eingangspost beschriebene Verhalten bei der Installation von FRST unter Win10 normal ist?

achso, ja das ist normal. Über erweitert bitte FRST erlauben, sonst hast du keine Logs und Hilfe ist unmöglich :p

Zitat:

Zitat von cosinus (Beitrag 1654479)

achso, ja das ist normal. Über erweitert bitte FRST erlauben, sonst hast du keine Logs und Hilfe ist unmöglich :p

Hatte ich mir schon gedacht, danke aber für die Rückbestätigung.

Hier nun der Inhalt der Logdateien:

FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017

durchgeführt von Dennis (Administrator) auf DENNIS-ZOCK-PC (25-05-2017 00:01:57)

Gestartet von C:\Users\Dennis\Desktop

Geladene Profile: Dennis (Verfügbare Profile: Dennis & DefaultAppPool)

Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

() C:\Windows\SysWOW64\ASGT.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe

(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe

(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe

(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe

(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIKEE.EXE

(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe

(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe

(Hammer & Chisel, Inc.) C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

() C:\Program Files\OpenVPN\bin\openvpn-gui.exe

(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginThinSetupInternal.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\splwow64.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)

HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1223168 2016-12-09] (Cisco Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)

HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-04-30] (TomTom)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [GalaxyClient] => E:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [4954176 2017-05-22] (GOG.com)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dennis\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIKEE.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [10737184 2016-12-26] (RedFox)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Discord] => C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27774936 2017-04-02] (Skype Technologies S.A.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mediatek Wireless Utility.lnk [2017-03-26]

ShortcutTarget: Mediatek Wireless Utility.lnk -> C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe (Mediatek Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{195c279c-9b92-4a79-976a-3ac520f7026c}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{54deaf3b-03c8-41bd-ae4c-dbec6e7f4c6d}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{6daff1b1-d1c8-459b-adc5-05e0d6458d6e}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{b8aac3fa-f900-4e7f-834d-2f112cf7a49d}: [DhcpNameServer] 192.168.0.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

SearchScopes: HKU\S-1-5-21-2002795488-2026584554-4065357487-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-05-06] (Microsoft Corporation)

BHO: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-06] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-05-05] (Microsoft Corporation)

BHO-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-12] (Oracle Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-05] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-12] (Oracle Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default [2015-07-09]

FF Extension: (Emulator) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\Navcore.9.500.1161701@tomtom.com [2015-04-10] [ist nicht signiert]

FF Extension: (Tyre) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\tyre@tyre.tk [2015-04-10] [ist nicht signiert]

FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2015-07-09] [ist nicht signiert]

FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 [2017-05-24]

FF Homepage: Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 -> hxxps://www.google.de/?gws_rd=ssl

FF Extension: (Mailvelope) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2017-04-18]

FF Extension: (Adblock Plus) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]

FF Extension: (Greasemonkey) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-27]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()

FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-06] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()

FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-12] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-12] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-05] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-05] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-08-28] (Nexon)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default [2017-05-22]

CHR Extension: (Google Präsentationen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]

CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]

CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]

CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]

CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]

CHR Extension: (NicoNico Audio Extractor) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecoahjklhopckkiefihjloeidikepdh [2015-03-09]

CHR Extension: (Adobe Acrobat) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-13]

CHR Extension: (Google Tabellen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]

CHR Extension: (Avira Browserschutz) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-03-15]

CHR Extension: (Google Docs Offline) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]

CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-05-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-13]

CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-15]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

Opera: 

=======

StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2017-05-05] (Microsoft Corporation)

R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-02-08] (Digital Wave Ltd.)

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [236832 2015-10-21] (EasyAntiCheat Ltd)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)

R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Datei ist nicht signiert]

S3 GalaxyClientService; E:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [512576 2017-05-22] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-19] (GOG.com)

S3 HmaOpenVpnService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [38912 2017-02-02] (The OpenVPN Project)

S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2014-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)

R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.)

R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Datei ist nicht signiert]

R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)

S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2147216 2017-04-10] (Electronic Arts)

R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3116440 2017-04-10] (Electronic Arts)

R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2015-12-23] (Advanced Micro Devices)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)

R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)

R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)

R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)

R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2016-12-08] (Advanced Micro Devices)

S3 atillk64; C:\Program Files (x86)\ASUS\GPU Tweak\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.)

R3 cbfs3; C:\WINDOWS\System32\drivers\cbfs3.sys [341904 2011-09-19] (EldoS Corporation)

R3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [661760 2016-01-02] (C-MEDIA)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 EagleX64; C:\WINDOWS\system32\drivers\EagleX64.sys [174728 2015-08-28] (AhnLab, Inc.)

S3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)

R3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2016-11-23] (The OpenVPN Project)

S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-10-05] (Microsoft Corporation)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 USBMULCD; C:\WINDOWS\system32\drivers\CM10664.sys [4135424 2013-09-12] (C-Media Electronics Inc)

S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-11-19] (Cisco Systems, Inc.)

U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [41472 2017-03-18] (Microsoft Corporation)

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-05-25 00:01 - 2017-05-25 00:02 - 00025009 _____ C:\Users\Dennis\Desktop\FRST.txt

2017-05-25 00:01 - 2017-05-25 00:01 - 00000000 ____D C:\FRST

2017-05-25 00:01 - 2017-05-24 22:47 - 02429952 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe

2017-05-24 23:48 - 2017-05-24 23:48 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk

2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\Program Files\VS Revo Group

2017-05-24 22:19 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis\OpenVPN

2017-05-24 22:18 - 2017-05-24 22:18 - 00000953 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\TAP-Windows

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\OpenVPN

2017-05-24 22:05 - 2017-05-24 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HMA! Pro VPN

2017-05-23 17:56 - 2017-05-23 17:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER

2017-05-18 19:02 - 2017-05-18 19:02 - 00003160 _____ C:\WINDOWS\System32\Tasks\StartCN

2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings

2017-05-16 18:06 - 2017-05-16 18:06 - 10320248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00924544 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00864120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00514424 _____ C:\WINDOWS\system32\amdgfxinfo64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00121208 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00112512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00112000 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00091520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00029056 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00029048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00573800 _____ C:\WINDOWS\system32\amdmiracast.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00196176 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00139080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll

2017-05-13 10:58 - 2017-05-18 19:13 - 00000949 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job

2017-05-13 10:58 - 2017-05-18 19:13 - 00000763 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job

2017-05-13 10:58 - 2017-05-13 10:58 - 00004148 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}

2017-05-13 10:58 - 2017-05-13 10:58 - 00003970 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}

2017-05-10 22:29 - 2017-05-10 22:29 - 16627692 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.zip

2017-05-10 22:29 - 2017-05-10 22:29 - 16507878 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.7z

2017-05-10 22:24 - 2017-05-10 22:26 - 00000000 ____D C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen

2017-05-09 22:11 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-05-09 22:11 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-05-09 22:11 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2017-05-09 22:11 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-05-09 22:11 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll

2017-05-09 22:11 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-05-09 22:11 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2017-05-09 22:11 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2017-05-09 22:11 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-05-09 22:11 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2017-05-09 22:11 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-05-09 22:11 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2017-05-09 22:11 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-05-09 22:11 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll

2017-05-09 22:11 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-05-09 22:11 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-05-09 22:11 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2017-05-09 22:11 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-05-09 22:11 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2017-05-09 22:11 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe

2017-05-09 22:11 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll

2017-05-09 22:11 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-05-09 22:11 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2017-05-09 22:11 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-05-09 22:11 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-05-09 22:11 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2017-05-09 22:11 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-05-09 22:11 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-05-09 22:11 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2017-05-09 22:11 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-05-09 22:11 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-05-09 22:11 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2017-05-09 22:11 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2017-05-09 22:11 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2017-05-09 22:11 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-05-09 22:11 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2017-05-09 22:11 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-05-09 22:11 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2017-05-09 22:11 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-05-09 22:11 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-05-09 22:11 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-05-09 22:11 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-05-09 22:11 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-05-09 22:11 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe

2017-05-09 22:11 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-05-09 22:11 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-05-09 22:11 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-05-09 22:11 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2017-05-09 22:11 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-05-09 22:11 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2017-05-09 22:11 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys

2017-05-09 22:11 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-05-09 22:11 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2017-05-09 22:11 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2017-05-09 22:11 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2017-05-09 22:11 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2017-05-09 22:11 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-05-09 22:11 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2017-05-09 22:11 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-05-09 22:11 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-05-09 22:11 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-05-09 22:11 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-05-09 22:11 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-05-09 22:11 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2017-05-09 22:11 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-05-09 22:11 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-05-09 22:11 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2017-05-09 22:11 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe

2017-05-09 22:11 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2017-05-09 22:11 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys

2017-05-09 22:11 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll

2017-05-07 14:55 - 2017-05-07 14:55 - 19741458 _____ C:\Users\Dennis\Desktop\Dryzz_MT.zip

2017-05-07 14:55 - 2017-05-07 14:47 - 02050374 _____ C:\Users\Dennis\Desktop\Master_Thesis_Dryzz_Corrected.pdf

2017-05-06 22:20 - 2017-05-06 22:20 - 00000000 ____D C:\Users\Dennis\AppData\Local\DBG

2017-05-02 08:55 - 2017-05-02 08:55 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2017-05-02 08:55 - 2017-05-02 08:55 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2017-05-02 08:55 - 2017-05-02 08:55 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2017-05-02 08:54 - 2017-03-17 23:00 - 07702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll

2017-05-02 08:54 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll

2017-05-02 08:54 - 2017-03-17 23:00 - 02454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll

2017-05-02 08:54 - 2017-03-17 22:59 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll

2017-05-02 08:54 - 2017-03-17 22:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 07405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 01914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll

2017-05-02 08:54 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll

2017-05-02 08:54 - 2017-03-17 22:43 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll

2017-05-02 08:54 - 2017-03-17 22:40 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 07244800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 01868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll

2017-05-02 08:54 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll

2017-05-02 08:54 - 2017-02-10 12:22 - 00002060 _____ C:\WINDOWS\system32\noise.jpn

2017-05-02 08:53 - 2017-05-02 08:53 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\msmq

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\BestPractices

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\Reference Assemblies

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\MSBuild

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\MSBuild

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\inetpub

2017-05-02 08:53 - 2017-05-02 08:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2017-05-02 08:53 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles

2017-05-02 08:52 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2017-05-02 08:52 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2017-05-02 08:10 - 2017-05-02 08:10 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2017-05-02 08:09 - 2017-05-02 08:09 - 00000020 ___SH C:\Users\Dennis\ntuser.ini

2017-05-02 08:09 - 2017-05-02 08:09 - 00000000 ____D C:\ProgramData\USOShared

2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml

2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagerr.xml

2017-05-02 08:04 - 2017-05-24 23:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-05-02 08:04 - 2017-05-24 21:24 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{634CF361-F616-4788-8E86-4D331F2B736A}

2017-05-02 08:04 - 2017-05-20 10:31 - 00003978 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1491080137

2017-05-02 08:04 - 2017-05-09 21:44 - 00004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2017-05-02 08:04 - 2017-05-09 21:44 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2017-05-02 08:04 - 2017-05-06 12:36 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2017-05-02 08:04 - 2017-05-02 08:11 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2

2017-05-02 08:04 - 2017-05-02 08:04 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003248 _____ C:\WINDOWS\System32\Tasks\MATLAB R2015b Startup Accelerator

2017-05-02 08:04 - 2017-05-02 08:04 - 00002166 _____ C:\WINDOWS\System32\Tasks\arp_flush

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS

2017-05-02 08:01 - 2017-05-02 08:01 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2017-05-02 07:59 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate

2017-05-02 07:59 - 2017-05-02 07:59 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines

2017-05-02 07:59 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2017-05-02 07:58 - 2017-05-24 23:56 - 02256080 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-05-02 07:58 - 2017-05-24 23:51 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin

2017-05-02 07:58 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis

2017-05-02 07:58 - 2017-05-18 19:02 - 00000000 ____D C:\Program Files\AMD

2017-05-02 07:58 - 2017-05-02 08:03 - 00000000 ____D C:\Users\DefaultAppPool

2017-05-02 07:58 - 2017-05-02 07:58 - 02011386 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Vorlagen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Startmenü

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Netzwerkumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Lokale Einstellungen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Eigene Dateien

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Druckumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Verlauf

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2017-05-02 07:57 - 2017-05-24 21:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2017-05-02 07:57 - 2017-05-10 07:24 - 00703544 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\Program Files\Realtek

2017-05-01 16:55 - 2017-05-02 08:09 - 00000000 ___DC C:\WINDOWS\Panther

2017-04-27 23:40 - 2017-04-27 23:40 - 00001256 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk

2017-04-27 23:40 - 2017-04-27 23:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\UNP

2017-04-27 23:10 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\UNP

2017-04-27 23:10 - 2017-04-27 23:11 - 00000000 ____D C:\Program Files\UNP

2017-04-25 18:40 - 2017-04-25 18:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\GOG.com
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-05-24 23:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2017-05-24 23:56 - 2017-03-20 06:41 - 00976010 _____ C:\WINDOWS\system32\perfh007.dat

2017-05-24 23:56 - 2017-03-20 06:41 - 00223028 _____ C:\WINDOWS\system32\perfc007.dat

2017-05-24 23:55 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM

2017-05-24 23:55 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2017-05-24 23:52 - 2016-11-19 13:13 - 00000000 ____D C:\Users\Dennis\AppData\LocalLow\Mozilla

2017-05-24 23:52 - 2014-12-05 00:51 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Skype

2017-05-24 23:51 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI

2017-05-24 23:51 - 2016-11-19 02:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-05-24 23:51 - 2014-12-05 03:42 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys

2017-05-24 23:51 - 2014-12-05 00:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2017-05-24 23:50 - 2015-08-02 13:31 - 00000000 ____D C:\ProgramData\Package Cache

2017-05-24 23:50 - 2014-12-05 00:55 - 00000000 ____D C:\ProgramData\Avira

2017-05-24 22:18 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF

2017-05-24 22:05 - 2016-12-14 22:14 - 00001222 _____ C:\Users\Public\Desktop\HMA! Pro VPN.lnk

2017-05-24 22:05 - 2016-12-14 22:14 - 00000000 ____D C:\Program Files (x86)\HMA! Pro VPN

2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps

2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-05-24 19:13 - 2015-04-22 23:24 - 00000000 ____D C:\Users\Dennis\AppData\Local\LogMeIn Hamachi

2017-05-24 19:10 - 2014-12-19 21:54 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Raptr

2017-05-23 21:04 - 2014-12-05 03:00 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-05-23 21:02 - 2014-12-05 03:00 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2017-05-23 17:55 - 2015-01-31 15:27 - 00000000 ____D C:\Program Files\Microsoft Office

2017-05-20 10:31 - 2017-04-01 22:55 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2017-05-20 10:31 - 2017-04-01 22:55 - 00000000 ____D C:\Program Files\Opera

2017-05-18 19:02 - 2015-07-22 23:09 - 00000000 ____D C:\Program Files (x86)\AMD

2017-05-18 19:02 - 2014-12-05 00:44 - 00000000 ____D C:\AMD

2017-05-16 18:06 - 2017-03-21 18:24 - 08479104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 02536320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 02198400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 01516416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00777088 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00696192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ C:\WINDOWS\system32\dgtrayicon.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00546688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00531328 _____ C:\WINDOWS\system32\GameManager64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00483712 _____ C:\WINDOWS\system32\atieah64.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00478080 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00467328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00411008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00365440 _____ C:\WINDOWS\SysWOW64\GameManager32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00360312 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00334208 _____ C:\WINDOWS\SysWOW64\atieah32.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00278400 _____ C:\WINDOWS\system32\clinfo.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00276352 _____ C:\WINDOWS\system32\hsa-thunk64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00245112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00242048 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00203648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00191360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00169856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00167808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00156704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00150912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00148440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00135040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00133504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00122744 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00115072 _____ C:\WINDOWS\system32\atidxx64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00101760 _____ C:\WINDOWS\SysWOW64\atidxx32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00099192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00075136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00068992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00044920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00042368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00164400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00116072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00102520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00102512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Oracle

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\Program Files (x86)\Java

2017-05-12 17:49 - 2014-12-19 22:38 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2017-05-12 17:44 - 2014-12-06 02:58 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-05-12 17:44 - 2014-12-06 02:58 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-05-11 18:33 - 2015-08-02 13:38 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages

2017-05-10 19:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache

2017-05-10 07:33 - 2015-08-02 13:38 - 00000000 __RHD C:\Users\Public\AccountPictures

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-05-09 22:14 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed

2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Origin

2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Origin

2017-05-07 16:40 - 2014-12-05 01:48 - 00000000 ____D C:\DayZ

2017-05-04 21:02 - 2014-12-05 16:41 - 00000000 ____D C:\Program Files (x86)\Origin

2017-05-03 07:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat

2017-05-02 08:57 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2017-05-02 08:55 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup

2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning

2017-05-02 08:54 - 2017-03-20 06:42 - 00000000 ____D C:\WINDOWS\OCR

2017-05-02 08:53 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe

2017-05-02 08:53 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe

2017-05-02 08:53 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof

2017-05-02 08:53 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys

2017-05-02 08:53 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe

2017-05-02 08:53 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe

2017-05-02 08:53 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

2017-05-02 08:10 - 2015-08-02 13:40 - 00002434 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-05-02 08:10 - 2015-08-02 13:40 - 00000000 ___RD C:\Users\Dennis\OneDrive

2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate

2017-05-02 08:06 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT

2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration

2017-05-02 08:05 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2017-05-02 08:04 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell

2017-05-02 08:04 - 2015-08-02 13:36 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat

2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media

2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries

2017-05-02 08:02 - 2017-03-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard

2017-05-02 08:02 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2017-05-02 08:02 - 2017-02-27 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2017-05-02 08:02 - 2017-02-06 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite

2017-05-02 08:02 - 2017-02-05 23:46 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV

2017-05-02 08:02 - 2017-02-05 23:38 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake

2017-05-02 08:02 - 2017-01-09 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software

2017-05-02 08:02 - 2016-12-15 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex-Editor MX

2017-05-02 08:02 - 2016-12-15 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2017-05-02 08:02 - 2016-11-22 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2017-05-02 08:02 - 2016-11-15 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediatek Wireless

2017-05-02 08:02 - 2016-03-06 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2017-05-02 08:02 - 2016-03-05 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Passfoto Manager

2017-05-02 08:02 - 2016-03-05 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PassbildPro

2017-05-02 08:02 - 2016-02-25 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64

2017-05-02 08:02 - 2016-02-07 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery

2017-05-02 08:02 - 2016-01-31 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio

2017-05-02 08:02 - 2016-01-31 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9

2017-05-02 08:02 - 2016-01-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Houhou SRS

2017-05-02 08:02 - 2016-01-05 14:19 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2017-05-02 08:02 - 2015-12-16 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout 4

2017-05-02 08:02 - 2015-12-09 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4

2017-05-02 08:02 - 2015-11-22 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosteRazor

2017-05-02 08:02 - 2015-09-12 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2017-05-02 08:02 - 2015-07-25 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MonInfo

2017-05-02 08:02 - 2015-07-16 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2017-05-02 08:02 - 2015-04-10 19:08 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tyre

2017-05-02 08:02 - 2015-04-10 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tyre

2017-05-02 08:02 - 2015-02-28 18:42 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RMPrepUSB

2017-05-02 08:02 - 2015-02-18 22:52 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TonidoDrive

2017-05-02 08:02 - 2015-02-17 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer

2017-05-02 08:02 - 2015-01-29 19:37 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online

2017-05-02 08:02 - 2015-01-29 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager

2017-05-02 08:02 - 2015-01-16 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2017-05-02 08:02 - 2014-12-31 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN

2017-05-02 08:02 - 2014-12-19 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2017-05-02 08:02 - 2014-12-11 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Middle Earth Shadow of Mordor

2017-05-02 08:02 - 2014-12-11 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Advanced Warfare

2017-05-02 08:02 - 2014-12-11 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Vanishing of Ethan Carter

2017-05-02 08:02 - 2014-12-05 18:11 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen

2017-05-02 08:02 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

2017-05-02 08:02 - 2014-12-05 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2017-05-02 08:02 - 2014-12-05 14:47 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2017-05-02 08:02 - 2014-12-05 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GBT_DL_OBJ

2017-05-02 08:02 - 2014-12-05 02:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps

2017-05-02 08:02 - 2014-12-05 02:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2017-05-02 08:02 - 2014-12-05 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2017-05-02 08:02 - 2014-12-05 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2017-05-02 08:02 - 2014-12-05 00:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2017-05-02 08:02 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\winrm

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\WCN

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\slmgr

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\dsc

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\System

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-05-02 08:00 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism

2017-05-02 08:00 - 2016-11-15 15:46 - 00000000 ____D C:\WINDOWS\system32\RaLanguages

2017-05-02 08:00 - 2016-11-14 18:33 - 00000000 ____D C:\WINDOWS\system32\€

2017-05-02 08:00 - 2015-02-23 17:27 - 00000000 ____D C:\WINDOWS\system32\appmgmt

2017-05-02 08:00 - 2015-01-29 20:39 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files\Windows Sidebar

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\System

2017-05-02 07:59 - 2017-03-07 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-05-02 07:59 - 2017-01-31 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox

2017-05-02 07:59 - 2017-01-21 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco

2017-05-02 07:59 - 2016-12-16 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2017-05-02 07:59 - 2016-11-16 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte

2017-05-02 07:59 - 2016-11-14 21:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc

2017-05-02 07:59 - 2016-11-14 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raptr

2017-05-02 07:59 - 2016-01-10 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft

2017-05-02 07:59 - 2015-11-03 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB

2017-05-02 07:59 - 2015-08-19 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2017-05-02 07:59 - 2015-08-19 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EpsonNet

2017-05-02 07:59 - 2015-05-27 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\leawo

2017-05-02 07:59 - 2015-05-15 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon

2017-05-02 07:59 - 2015-05-12 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2017-05-02 07:59 - 2015-04-18 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark

2017-05-02 07:59 - 2015-03-12 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble

2017-05-02 07:59 - 2015-03-11 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools

2017-05-02 07:59 - 2014-12-20 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frontier

2017-05-02 07:59 - 2014-12-06 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games

2017-05-02 07:59 - 2014-12-05 00:59 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2017-05-02 07:59 - 2014-12-05 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes

2017-05-02 07:59 - 2014-12-05 00:33 - 00000000 ____D C:\Program Files\Intel

2017-05-02 07:58 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2017-04-30 13:24 - 2017-01-21 15:34 - 00000000 ____D C:\Users\Dennis\Desktop\Bücher

2017-04-29 20:26 - 2014-12-07 00:46 - 00000000 ____D C:\ProgramData\EA Logs

2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb

2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\system32\atiapfxx.blb

2017-04-25 00:56 - 2017-03-21 18:24 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap

2017-04-25 00:51 - 2017-03-21 18:24 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-02-18 17:59 - 2016-01-21 22:52 - 0000600 _____ () C:\Users\Dennis\AppData\Local\PUTTY.RND

2017-03-10 15:41 - 2017-03-10 15:41 - 0000865 _____ () C:\Users\Dennis\AppData\Local\recently-used.xbel

2016-01-11 19:04 - 2016-01-30 12:29 - 0000040 ___SH () C:\ProgramData\.zreglib

2017-05-02 07:57 - 2017-05-02 07:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-05-19 20:02
 

==================== Ende von FRST.txt ============================

Addition.txt folgt im nächsten Post, wird sonst zu lang.

Addition.txt

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-05-2017

durchgefÃ¼hrt von Dennis (25-05-2017 00:02:28)

Gestartet von C:\Users\Dennis\Desktop

Windows 10 Pro Version 1703 (X64) (2017-05-02 06:06:36)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2002795488-2026584554-4065357487-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2002795488-2026584554-4065357487-503 - Limited - Disabled)

Dennis (S-1-5-21-2002795488-2026584554-4065357487-1000 - Administrator - Enabled) => C:\Users\Dennis

Gast (S-1-5-21-2002795488-2026584554-4065357487-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2002795488-2026584554-4065357487-1002 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

@BIOS B14.1003.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)

@BIOS B14.1003.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden

3DMark (HKLM-x32\...\{66847f67-7331-422f-bc6c-d961c453d7df}) (Version: 1.5.884.0 - Futuremark)

3DMark (Version: 1.5.884.0 - Futuremark) Hidden

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

ACP Application (Version: 2015.1223.1036.43 - Advanced Micro Devices, Inc.) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)

Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)

Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)

Akamai NetSession Interface (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)

AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)

Anki (HKLM-x32\...\Anki) (Version:  - )

AnyDVD (HKLM-x32\...\AnyDVD) (Version: 8.0.9.0 - RedFox)

APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.16.0503 - Gigabyte)

APP Center (x32 Version: 1.16.0503 - Gigabyte) Hidden

ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.2.3 - ASUSTek COMPUTER INC.)

ASUS GPU Tweak (x32 Version: 2.5.2.3 - ASUSTek COMPUTER INC.) Hidden

ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)

Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )

Battlefield 3â„¢ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)

Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version:  - Ubisoft)

BioShock (HKLM-x32\...\Steam App 7670) (Version:  - 2K Boston)

BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)

Borderlands 2 (HKLM-x32\...\Borderlands 2_is1) (Version:  - )

Call of Duty Advanced Warfare (HKLM-x32\...\Call of Duty Advanced Warfare_is1) (Version: 1.0 - ENiGMA)

Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization BR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Child of Light (HKLM-x32\...\Steam App 256290) (Version:  - Ubisoft MontrÃ©al)

Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.4.00243 - Cisco Systems, Inc.)

Cisco AnyConnect Secure Mobility Client (x32 Version: 4.4.00243 - Cisco Systems, Inc.) Hidden

CloudDrive (HKLM-x32\...\TonidoDrive) (Version:  - )

Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Dead Spaceâ„¢ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)

Deadfall Adventures (HKLM-x32\...\Steam App 231330) (Version:  - The Farm 51)

Democracy 3 (HKLM-x32\...\Steam App 245470) (Version:  - Positech Games)

Destination Sol (HKLM-x32\...\Steam App 342980) (Version:  - Milosh Petrov)

Discord (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)

Divinity: Original Sin Enhanced Edition (HKLM-x32\...\Steam App 373420) (Version:  - Larian Studios)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)

EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.00.0002 - GIGABYTE)

EasyTune (x32 Version: 1.00.0002 - GIGABYTE) Hidden

EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

Elcomsoft Cloud eXplorer (HKLM-x32\...\{D5ED1A08-0171-448C-92ED-D94365EBB226}) (Version: 1.00.8203.2945 - Elcomsoft Co. Ltd.)

Elite Dangerous Launcher version 0.4.4468.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.4468.0 - Frontier Developments)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version:  - SEIKO EPSON Corporation)

EpsonNet SetupManager V2 (HKLM-x32\...\InstallShield_{485863E4-C20E-4629-A3B1-B4C8E706A7CB}) (Version: 2.2.7 - SEIKO EPSON CORPORATION)

EpsonNet SetupManager V2 (x32 Version: 2.2.7 - SEIKO EPSON CORPORATION) Hidden

Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)

EVE Online (HKLM\...\Steam App 8500) (Version:  - CCP)

Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)

Fallout 3 (HKLM-x32\...\Steam App 22300) (Version:  - Bethesda Game Studios)

Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version:  - )

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)

Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.00 - Ubisoft)

Far Cry 4 (HKLM-x32\...\RmFyQ3J5NA==_is1) (Version: 1 - )

FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)

FORCED (HKLM-x32\...\Steam App 249990) (Version:  - BetaDwarf)

Fraps (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.36.208 - Digital Wave Ltd)

FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)

Futuremark SystemInfo (HKLM-x32\...\{79659071-4B68-4EC8-833C-49C97B68FCD0}) (Version: 4.36.512.0 - Futuremark)

Gauntletâ„¢  (HKLM-x32\...\Steam App 258970) (Version:  - Arrowhead Game Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)

Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden

Hack 'n' Slash (HKLM-x32\...\Steam App 246070) (Version:  - Double Fine Productions)

HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - )

Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)

hide.me VPN Version 1.0.5 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.5 - eVenture Limited)

HMA! Pro VPN 3.4.6.1 (HKLM-x32\...\HMA! Pro VPN) (Version: 3.4.6.1 - Privax Ltd)

Houhou SRS version 1.2 (HKLM-x32\...\Houhou SRS_is1) (Version: 1.2 - )

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)

IntelÂ® Chipsatz-GerÃ¤tesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden

Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)

Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)

Kill The Bad Guy (HKLM-x32\...\Steam App 293940) (Version:  - Exkee)

Killing Floor 2 (HKLM-x32\...\Steam App 232090) (Version:  - Tripwire Interactive)

Leawo Blu-ray Player version  1.8.8.0 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.8.8.0 - leawo Software)

LibreOffice 4.4.6.3 (HKLM-x32\...\{1013DB12-EC2E-455E-B5ED-BFD056DC1A99}) (Version: 4.4.6.3 - The Document Foundation)

Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

MakeMKV v1.10.4 (HKLM-x32\...\MakeMKV) (Version: v1.10.4 - GuinpinSoft inc)

Mass Effect (HKLM-x32\...\Steam App 17460) (Version:  - BioWare)

Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version:  - BioWare)

Mass Effectâ„¢ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)

MATLAB R2015b (HKLM\...\Matlab R2015b) (Version: 8.6 - MathWorks)

Mediatek RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.39.173 - MediatekWiFi)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)

Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)

Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.7369.2130 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Middle Earth Shadow of Mordor (HKLM-x32\...\Middle Earth Shadow of Mordor_is1) (Version:  - )

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version:  - EnTech Taiwan)

Mozilla Firefox 53.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 de)) (Version: 53.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)

MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)

Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)

Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

OpenVPN 2.4.2-I601  (HKLM\...\OpenVPN) (Version: 2.4.2-I601 - OpenVPN Technologies, Inc.)

Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software)

Origin (HKLM-x32\...\Origin) (Version: 10.4.9.38188 - Electronic Arts, Inc.)

Papers, Please (HKLM-x32\...\Steam App 239030) (Version:  - 3909)

PassbildPro v2.6a (HKLM-x32\...\PassbildPro_is1) (Version:  - PassbildPro)

Passfoto Manager Ver. 1.3 (HKLM-x32\...\Passfoto Manager_is1) (Version:  - NoSpy Software Lab)

PDF24 Creator 8.0.3 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PhonerLite 2.45 (HKLM-x32\...\PhonerLite_is1) (Version: 2.45 - Heiko Sommerfeldt)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc)

Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)

Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version:  - Crystal Dynamics)

Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version:  - Piranha Bytes)

RMPrepUSB (HKLM-x32\...\RMPrepUSB) (Version:  - )

Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)

Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)

Shadow Warrior (HKLM-x32\...\Steam App 233130) (Version:  - Flying Wild Hog)

Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.00.0000 - GIGABYTE)

SIV (x32 Version: 1.00.0000 - GIGABYTE) Hidden

Skypeâ„¢ 7.34 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.34.103 - Skype Technologies S.A.)

Spintires (HKLM-x32\...\Steam App 263280) (Version:  - OoveeÂ® Game Studios)

STAR WARSâ„¢ Battlefrontâ„¢ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)

Talisman: Digital Edition (HKLM-x32\...\Steam App 247000) (Version:  - Nomad Games Limited)

TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )

TeXstudio 2.10.8 (HKLM-x32\...\TeXstudio_is1) (Version: 2.10.8 - Benito van der Zander)

The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)

The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)

The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)

The Secret of Monkey Island: Special Edition (HKLM-x32\...\Steam App 32360) (Version:  - LucasArts)

The Vanishing of Ethan Carter (HKLM-x32\...\The Vanishing of Ethan Carter_is1) (Version:  - )

The Whispered World Special Edition (HKLM-x32\...\Steam App 268540) (Version:  - Daedalic Entertainment)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)

The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)

This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)

Tiger Knight: Empire War (HKLM\...\Steam App 534500) (Version:  - NetDragon Websoft Holdings Limited)

TI-Nspireâ„¢ CAS Student Software (HKLM-x32\...\{F03A8756-7FCB-4DCD-9AC1-12C63A6075F1}) (Version: 3.9.0.463 - Texas Instruments Inc.)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

TomTom HOME (HKLM-x32\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Transcendence (HKLM-x32\...\Steam App 364510) (Version:  - Kronosaur Productions)

Tyre (HKLM-x32\...\Tyre_is1) (Version: 6.4.0.6 - 't Schrijverke)

Undertale (HKLM\...\Steam App 391540) (Version:  - tobyfox)

Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)

USB Multi-Channel Audio Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006206}) (Version: 1.00.0008 - C-Media Electronics, Inc.)

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.9.0 - Elaborate Bytes)

Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version:  - RuneStorm)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)

Warhammer Quest (HKLM-x32\...\Steam App 326670) (Version:  - Rodeo Games)

Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)

Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)

Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0C3B8712-2743-48BD-A022-B4200115B15E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {0C536337-0CDC-45E1-903B-1A9C6A6B7933} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)

Task: {107BFE19-7528-40A0-998A-C4A82110F2D9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)

Task: {134D1A35-FDCD-4817-AA02-115C2A62BB1C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)

Task: {18CA43DE-A075-4CCD-AC81-C76668062D58} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {1BC57658-67A8-451B-968D-CA240ECD1E40} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {1E1B9767-CDFA-4232-9FA6-2E6F21AEB071} - System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {1E53F75E-BEF8-4CE0-9B4B-C687D9FA797B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {21824C20-E975-4603-8522-320FA332ED39} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {2C29168A-09A2-44D5-909A-7EA2F780AE26} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {2DA9B8FC-0C73-48D6-ABF2-30EC30C76767} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {31BEA046-56E0-4D59-BCFB-2285FF7FB4E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)

Task: {335DF35C-CFE6-418E-BDAE-512DD89C797B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {468CFE7D-C8B9-4E7B-BD5B-4230E0F06F81} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {46B1B2E9-DE3D-4BAF-8CA4-F981DEDD1202} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)

Task: {479EF5A4-C830-451B-9977-FFDD71F48016} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {4E7A87EB-7B7F-4FA2-B476-557EB04F7ABE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe 

Task: {5DD9CEAC-A36F-4398-8B11-0A486120B9E1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {60EDE66C-E6B2-4AD5-81E8-13CC2C8386C8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {65067170-8470-4C93-BAF2-19FFBAEEEF0F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)

Task: {6AFD0255-0ED0-419C-B6D5-95BD71359A74} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {6FC9EBEA-BC08-41AE-B004-58408A7B0D48} - System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {7214D99B-28C1-457B-A5A1-BBAC0FF0DBEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {774A0F66-E2F1-47A1-BE12-D3F7B351426B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe 

Task: {7820ED84-DD48-4DCB-BBB5-38FAB0A8AC9F} - System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {81425B80-0453-4DC2-8102-375B54E9A7C2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated)

Task: {830B3AE3-0B5D-4574-9DEC-2F05194B49A6} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {85DDD876-F0C4-4BE4-BA13-6D4C5D2C428D} - System32\Tasks\MATLAB R2015b Startup Accelerator => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe [2015-07-30] ()

Task: {86720F65-531C-418B-82D6-009C7F4F901C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {879E17BB-C3CB-4CB9-AC5F-BB792D7F51D0} - System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {92E5D5FE-5288-4700-96B1-C4545452CA35} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)

Task: {96515D1F-2F89-4D9F-97FE-3BB632C13368} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-26] ()

Task: {9E4B0ADA-55F2-4B64-9E69-3C59D88ACB98} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {9F5DB38C-8E11-41CD-A313-26F2BC2222BF} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {A01C12CD-1656-4A58-A7AC-FF75834CA7C2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-06] (Microsoft Corporation)

Task: {A0D1B58F-9267-47CC-81C4-9F32E9C7C158} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {A1117A36-8F68-46DE-98D8-592B58FF68D3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe 

Task: {A8E079FC-6829-4396-B1CF-106D7F7F9933} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)

Task: {A93A7AFD-DB3D-4E47-8DAD-5F7678AB77B4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe 

Task: {ABE2B663-9B4B-4ABF-B96F-76888D49E9AC} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {ACD1141C-2870-44BA-9521-4E88A22BAEC9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated)

Task: {B5994E13-3374-40A5-9041-9E83E5446E4F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {B688EEC8-585D-406C-A7B8-A74B608AD0B2} - System32\Tasks\Opera scheduled Autoupdate 1491080137 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software)

Task: {B7BCDC4F-DA02-479A-8A99-581AB05576AE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C059B4FA-0A31-4C63-8A43-D0E37C4D0FBF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C18890E5-6EDB-40D5-A0B6-DA5DE3036E77} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C7F2E336-27B9-4032-B230-73F0892A712D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {C89711F7-0823-4DB8-BBBF-2CB8CC3174E4} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {D39CB3D4-C0FF-4B49-971E-2D411AC6985C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {D5C6685E-6D00-41E1-9021-965ABA38A6BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)

Task: {E25C6802-A114-456B-9B90-A7E6BE3A7B53} - System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {E5115114-5C02-4114-A7AD-62B5D391EE30} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG

Task: {F3E5F059-038B-4B71-B726-283DB44B9BAB} - System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {F40006B3-B99B-43CA-AA9A-04AF9CEE7B14} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {FB79D84D-835E-4A74-BCF1-5EA79615A574} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{086E526A-2170-469E-BCA6-33E120A37FD4} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9C19764F-9338-48FD-B114-CB1DA88859EB} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9F0E0896-8027-4110-AE14-1994D9793796} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\MATLAB R2015b Startup Accelerator.job => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe

2015-04-14 16:27 - 2015-04-14 16:27 - 00016896 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe

2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2015-07-30 10:52 - 2015-07-30 10:52 - 01244456 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe

2016-09-14 03:00 - 2016-09-14 03:00 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll

2016-09-14 03:00 - 2016-09-14 03:00 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll

2016-09-14 03:00 - 2016-09-14 03:00 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll

2016-09-14 03:00 - 2016-09-14 03:00 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll

2016-09-14 02:59 - 2016-09-14 02:59 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll

2016-09-14 02:59 - 2016-09-14 02:59 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll

2016-09-14 03:00 - 2016-09-14 03:00 - 00191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-05-09 18:30 - 2017-05-09 18:31 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 43195904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 02457088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\skypert.dll

2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2014-10-14 20:51 - 2014-10-14 20:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2014-10-14 20:51 - 2014-10-14 20:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2017-05-11 08:44 - 2017-05-11 08:44 - 00632448 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe

2016-12-09 18:09 - 2016-12-09 18:09 - 00073728 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-11-14 19:34 - 2017-04-29 20:11 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll

2014-01-22 14:53 - 2014-01-22 14:53 - 01607680 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\BDR_info.dll

2015-02-16 11:47 - 2015-02-16 11:47 - 00105472 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ycc.dll

2017-01-18 15:30 - 2017-01-04 15:28 - 01958912 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\ffmpeg.dll

2017-01-18 15:31 - 2017-01-18 15:31 - 01082880 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node

2017-01-18 15:31 - 2017-01-18 15:31 - 03750400 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll

2017-01-18 15:31 - 2017-01-18 15:31 - 00914432 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node

2017-01-18 15:31 - 2017-01-18 15:31 - 01127424 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node

2017-01-18 15:30 - 2017-01-04 15:28 - 02278912 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\libglesv2.dll

2017-01-18 15:30 - 2017-01-04 15:28 - 00096768 _____ () C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\libegl.dll

2017-05-24 23:51 - 2017-05-24 23:51 - 00148992 _____ () \\?\C:\Users\Dennis\AppData\Local\Temp\7E48.tmp.node

2017-01-18 15:31 - 2017-04-26 19:07 - 02658296 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node

2017-01-30 20:33 - 2017-03-26 15:31 - 02665976 _____ () \\?\C:\Users\Dennis\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node

2017-02-28 10:51 - 2017-02-28 10:51 - 01937376 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll

2016-11-14 19:34 - 2017-04-29 20:11 - 00012288 _____ () C:\Program Files (x86)\Origin\libEGL.DLL
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:3or4kl4x13tuuug3Byamue2s4b [87]

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ==========================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2009-07-14 04:34 - 2015-11-24 19:18 - 00001030 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1        rad.msn.com

127.0.0.1         live.rads.msn.com

127.0.0.1        ads1.msn.com

127.0.0.1        static.2mdn.net

127.0.0.1        g.msn.com

127.0.0.1        a.ads2.msads.net

127.0.0.1        b.ads2.msads.net

127.0.0.1        ac3.msn.com
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dennis\Desktop\FMA-B\edward-elric-fullmetal-alchemist-anime-hd-wallpaper-1920x1080-4286.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "TomTomHOME.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [WMP-Out-UDP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [{C8A93475-860E-4055-B33C-C979047DFAC4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{3BC467AD-FA73-4107-BA04-160B87A33C8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [UDP Query User{03006707-C27F-4B41-978D-F822ECD498DE}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe

FirewallRules: [TCP Query User{12636CBA-3FAB-4730-A3EF-84378F54EF02}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe

FirewallRules: [{B007250D-6005-4EFF-8FDD-6713AC272D67}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{D0366D73-8F91-4BAE-B69A-720DCB7A9F8F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{A0664D65-8878-4BBC-B0B7-A1CB4B99C932}] => (Allow) C:\Program Files\Opera\44.0.2510.859\opera.exe

FirewallRules: [{A5BBA3F1-F245-4E1E-A825-8FBF70A695EA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{A9E0C9B0-BA90-417D-8E3A-26991AE6672C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{4743FCA9-2B12-4964-BEAA-48B8720EDC2D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{A901D95A-50EB-49D5-8B92-191B41724345}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [UDP Query User{BE8874F1-7AC1-4D6E-BBC2-2C3932E1FBD7}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe

FirewallRules: [TCP Query User{8909F6B8-3AA0-4C0B-A279-4D80672A98C8}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe

FirewallRules: [{D0978E56-8639-435A-9AA0-03FAC8534521}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{EB6C9921-F9BD-45F5-9EA2-A9809547D731}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{6B01820A-BC70-47C2-A456-E7BD549AC433}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{631D1288-7375-450D-B0FB-BA7CD10679D0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{BEF76BDA-666C-4E5A-82AF-CD891FF2481E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{F192CA2A-37BC-48BB-89CB-2A791E2F37DB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{14241604-6E67-444C-A418-97FCCEA6C05F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{5EA9902A-85F2-4CE5-90BE-717AFCA4A85F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{E7C68301-1909-4E4C-9F69-4E328E45D668}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{ECC74987-E071-4AED-B521-FD0974F986A8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{A7A4606C-91DB-40B4-A778-FD6835CA1F53}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{6A373D75-E879-443E-B990-6CADC572C38E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{112588CC-ED52-484E-9C71-A30F840E0AEC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [UDP Query User{1F66EFA8-E987-4659-9108-376E633EB84C}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe

FirewallRules: [TCP Query User{97A2EB9A-8D07-4ADD-9593-8D0AF22797C3}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe

FirewallRules: [{E8ED0263-9E6F-41B1-89B3-2826D83AF0CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe

FirewallRules: [{2F077E75-D03D-42FC-B96D-7AD1C18A0013}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe

FirewallRules: [{2445D4A7-847D-4C3D-B157-2539618E4511}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe

FirewallRules: [{B244DCF4-721D-4E41-B925-A7747CA22A38}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe

FirewallRules: [{0211D729-46EC-4F34-BE2B-F8F871ECE4F5}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe

FirewallRules: [{FCC1A3B9-D2DC-4A73-8A62-70D26E8120BB}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe

FirewallRules: [{EECA8479-45CF-401E-A0F4-FF821BF63DD2}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe

FirewallRules: [{7F7921F1-5D8A-4A53-98DD-4E038847967D}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe

FirewallRules: [{D5BC8FED-36F4-4BE2-9101-C2EFFA368B74}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{71CD7AEE-6B80-4E59-8794-855128480BEE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{F67CA00F-298D-4BFD-9276-6F4AF8685547}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{7E3FD844-BCFF-4AAA-A7EA-117D75AB246B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{529B95C2-595F-4C4E-BDEA-81037FABB918}] => (Allow) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe

FirewallRules: [{6F5338E3-F316-4763-8901-FBA83DFD6625}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe

FirewallRules: [{1EEA632C-3075-4161-AC28-B6C21732FCEF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe

FirewallRules: [{A4161788-52F5-4257-A64C-28E6B89C7EB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{2B5DA77C-0B39-45FA-8195-C6A432CB931A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1F9B9D8E-2BD3-4391-AEF3-FB3CE3892803}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{5C4DC916-884B-4D7D-8222-3B11DE11FDF9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{A35793A3-C175-400A-95EB-D79E9ED79BE7}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [UDP Query User{E526B719-A956-4B53-B8FB-8033475D2161}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe

FirewallRules: [TCP Query User{84224BF9-F3AE-46B7-93BB-AFFBA57F129F}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe

FirewallRules: [{8886650D-C142-4ABD-82A9-8043D801F30A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe

FirewallRules: [{1CAF08E3-CB6D-495B-A10E-0920C08AE867}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe

FirewallRules: [{80887978-7CB1-46A5-8655-802C5B017BBC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe

FirewallRules: [{1543DA99-FFF7-4644-827B-4A7A0C352224}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe

FirewallRules: [{D2625030-4199-493E-B43D-9D138CFDD46C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe

FirewallRules: [{4876ECCC-2913-4073-8469-4D894C8D40A4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe

FirewallRules: [{21E0A7E6-A501-4D31-970B-7FBACFB98421}] => (Block) E:\Games\Fallout 4\Fallout4.exe

FirewallRules: [{6B4E6899-FA39-42AC-82B7-3AB6298F2DE0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{6B7D8532-183E-4B41-A560-2426F92DFD59}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{5537E916-E20E-495A-BDA7-CE6BAEB25001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B1752EF4-7B9A-4E4F-A826-465DFECF2EC6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{D426A011-1D55-4A3B-86AF-4DADFECD6CFD}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe

FirewallRules: [TCP Query User{E08FEE99-82C4-4236-9D7E-E9E97D2F2D6B}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe

FirewallRules: [{B5E5F6BE-6760-4D4F-B3F8-9DB2ABF51380}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{6E7ED5C4-D93A-45AF-AF96-8D241FA2C809}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{19E8DC9D-9071-4D98-BDB0-4AAD27D832F3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe

FirewallRules: [{52BCACAB-D39C-476C-8375-9B5702AFC777}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe

FirewallRules: [{B5AADAE9-FC7E-4C98-950D-DFC4E3B888B6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe

FirewallRules: [{5C58E99A-065D-4F36-BCB1-580A7524FF35}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe

FirewallRules: [{63A08AF5-6B4C-4055-831E-D5DC5AA9264A}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{A52D0E5E-9B4E-4AB5-8090-910934ACA14B}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{1CD6F05B-FE37-41C0-BADF-F3EB9867A5E5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{563AD2ED-8DE0-4F73-BD85-2C59C9E7503A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{3578656D-9C9B-4E94-884A-6415F5834F17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe

FirewallRules: [{466F57AE-2A30-4946-83F9-2E86F8DF70F1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe

FirewallRules: [UDP Query User{2F7EEFF2-3479-4F03-84DC-28E4501C0DFA}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe

FirewallRules: [TCP Query User{9D52F165-4930-43D3-9CF0-615BE7728FD8}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe

FirewallRules: [{2B855FCD-0CAC-465A-A7E7-1EB9802D530A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe

FirewallRules: [{217140AD-AE90-4B99-9C6B-262EE560E39C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe

FirewallRules: [{0D9C14D9-B981-4851-B78B-12BB403944C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe

FirewallRules: [{E36F2E60-B1BE-4EEB-A1CB-74795CE3E56F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe

FirewallRules: [{077547A7-8CDA-4F83-9641-0F659EB842A7}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe

FirewallRules: [{34A2137D-C3F2-47A9-9B06-415516F7FFFB}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe

FirewallRules: [{AF3F05DB-7B8E-408B-9490-213795316AF8}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{5AE8E97E-FE31-4A9F-8C24-717672F7C067}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{9ABFFF5F-1432-4070-8DA9-8F070B86597D}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{4EB06D8E-7463-4D66-9421-3ABF73C00EEB}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{5788A922-3EDA-4EA9-8F41-359ED4B0D41C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{C1C4070B-1E5E-48BB-A5A9-34683EC17352}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{F63C2199-4F8F-4391-97A2-1C1025BEB546}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{8487BCB2-4ED4-4C4B-BCE3-75AEA5EA3DF0}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{427C1569-11F3-4793-AAF9-50B1DDC06EC7}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{B8011D23-E7F6-484B-AFEE-6B6A2E6B4B05}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{3ACC4CEC-B76D-46FF-A63C-8E6E28A639CF}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{555C9BCD-35DE-428D-B378-A534BC929F0C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{B8CBEB91-0AC8-4E5B-BA92-6A5C4BD89944}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{48BB8AF9-F8B9-4358-B327-F92A09ED10AA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{537C4630-8994-4D2A-9A5F-66E86D6B7597}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{294FC133-15D0-4D83-9A1F-7A87F088140C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [TCP Query User{8EBA783C-8571-42C1-A309-D79ACFB82416}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [UDP Query User{D37A7B0A-EAB9-40D2-9992-6114902ACD22}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [{B8F733B2-E4F5-4020-B337-C139C2085ED4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe

FirewallRules: [{C0C4EC0B-D162-45F1-A64F-71556254153E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe

FirewallRules: [TCP Query User{B0777C6D-07A7-440D-BB99-BEA2F09669AB}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe

FirewallRules: [UDP Query User{85136BAA-0985-4142-91F6-A5A1D4D8EAFD}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe

FirewallRules: [TCP Query User{6C3516A0-83BE-4E9F-9190-167D66C6317A}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe

FirewallRules: [UDP Query User{3352E604-EB1E-4B95-B644-8CC9B0081607}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe

FirewallRules: [{08A87F18-30EC-4038-95E0-D9C0A5BFE115}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{993AB1AA-C3F1-4777-AD17-7D3A0762CE8E}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{0FC41D5F-B52D-451C-B493-7783D4FB7599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe

FirewallRules: [{FA3FA25E-8719-4335-97E7-7ACFF2417869}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe

FirewallRules: [TCP Query User{490D175F-C7B0-4805-B4AF-D4332F2E1B51}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe

FirewallRules: [UDP Query User{816A79E7-9DF2-4B97-9596-298BF5F8BBBD}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe

FirewallRules: [TCP Query User{90A20EF9-8733-48B9-BE89-7E67E0DC10A6}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe

FirewallRules: [UDP Query User{526B30C7-7223-49C3-82AC-1BD336CC7D1A}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe

FirewallRules: [{27C7404F-E442-47C2-95A7-F06546099A4B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe

FirewallRules: [{56E993A7-4416-4887-B4EC-078462FB4ADE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe

FirewallRules: [{DBEAA64E-72E9-4278-B927-89CC548A3D1F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe

FirewallRules: [{B17EC375-AC70-413F-9E23-2F7FA4251FD2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe

FirewallRules: [{23B1BABF-073D-4130-B515-0AFF1EAFD67E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{86413EFC-5C2B-48DF-B947-7BF3D0CEE40A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{720F2924-BDDA-4539-8445-7734D72814D9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{8CF02EB5-A443-48EE-8AD2-7E57AE3C3770}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{2ED659E6-F140-4C67-A180-734C0519B612}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{F5A17CD9-D3A3-41C0-BE68-84107A5B92E9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{F7F91883-D335-484A-B12A-90BF0F2A50AD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe

FirewallRules: [{62B9457A-421E-405B-A059-76FBD50EB1DD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe

FirewallRules: [{AFF575EE-B405-4922-8475-62FD93D4F7E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe

FirewallRules: [{C00F93D4-A1C7-4D2C-8365-F9438073BB8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe

FirewallRules: [{EE44C46C-57E6-4BFA-BADC-18A734D84674}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe

FirewallRules: [{DA9731C4-6676-4019-A653-367AA00883B3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe

FirewallRules: [{44568B77-7D5D-49D7-BB9A-367214673571}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe

FirewallRules: [{C6D816B5-39AE-4ABB-B778-DBB4183E31B9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe

FirewallRules: [{27B07604-918F-42BD-A8F9-072CADE6468B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [{C000E71A-E82D-4AE7-AFB2-557AA469D4E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [{39C49974-14D0-4559-A8B1-7EC599A8FF09}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{AD531B64-6D4D-4ED8-9E9D-53F3AE6AC643}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{F796FB4A-83F8-4EBA-A213-D53C40D04FAA}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{19B4F5DC-E7B8-4D3E-A436-95496168E852}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{7CE0F63A-5E13-4123-AD8D-09273025843C}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe

FirewallRules: [{6E6E965F-5F1E-4BCF-9601-F57B3603EEE3}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe

FirewallRules: [TCP Query User{8976121B-EECC-4335-A198-DB21CEBA0541}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe

FirewallRules: [UDP Query User{9FF7851B-20FF-4D5A-9F93-F8C0C4CD108E}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe

FirewallRules: [{96183AA5-A9A6-4A9F-B250-53514E77C591}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{20684F7F-6221-4A82-ADF8-7CEE0642CB6D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{55F9FF76-96A4-4952-A921-6E3DE4C8707A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe

FirewallRules: [{8FE16784-A716-4E50-BD65-55ACF71D6CE2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe

FirewallRules: [TCP Query User{AAA9FB64-2C4E-4A20-A586-965B42E94574}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe

FirewallRules: [UDP Query User{E1CDC6D8-0240-4ED9-8CAF-D0F66772AF68}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe

FirewallRules: [TCP Query User{3AB445F5-9F1B-409E-9EC9-3C5CF0122236}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe

FirewallRules: [UDP Query User{64F06DD8-335C-4C3A-91E9-87F5931DA5DA}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe

FirewallRules: [{8C6DB3DC-1AB2-44B7-BA5A-D3B2A0247599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{C7A6198E-2533-49A8-BF06-29D7997406FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{2F351A0D-F7D0-4D31-87A9-F685998F24FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe

FirewallRules: [{B82CBB1E-0624-4938-9B66-5D869B76CABB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe

FirewallRules: [{675D4551-A3CE-4486-B702-B7DB8F246C91}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{7CE9C52A-9276-4273-A704-A25B166A0E77}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{7455FDAB-B26F-4931-8DA8-A844B1C84E94}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe

FirewallRules: [{756436C1-D16D-49A4-878E-999A3D2F4ED1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe

FirewallRules: [{EAEF4FA0-2DEE-41AF-9620-3F2F5B62E841}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe

FirewallRules: [{692F4D46-3792-492D-9631-15895DE196BF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe

FirewallRules: [{B3352B1E-4D15-4982-87F3-835D78EBC1EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{DD39BA85-D589-49F8-BB4B-6C5F0912F768}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{F7A40669-1C9B-4F9D-BB9D-894C4437E8D5}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe

FirewallRules: [UDP Query User{BFF39BCB-D25E-48FE-AB45-D48C67E3D4C0}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe

FirewallRules: [{A8657DD5-DBCD-4641-820D-9F6BAA00D487}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe

FirewallRules: [{648726DC-649C-4467-A51D-9634A9856039}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe

FirewallRules: [{852ECAE5-94A5-43AE-ADD4-9EC158FD44D2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe

FirewallRules: [{730F4784-59E8-4FDA-8AB9-77E70934F824}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe

FirewallRules: [{E164CA86-DFD0-4634-942F-FA1F5D459EFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe

FirewallRules: [{ACC4C8AC-AF53-44F5-8586-660505430136}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe

FirewallRules: [{F497D5F2-A6DB-4E91-98B7-E93656A4B158}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe

FirewallRules: [{A64DF8AF-E477-41A1-B0F9-A239AB185B48}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe

FirewallRules: [{872B69E4-989B-40CD-8480-C52922391AA1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe

FirewallRules: [{3F162C09-5E17-464C-AE18-9A193D8CFB92}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe

FirewallRules: [{525DBDC3-1A1A-4A27-8775-6DE52FECECFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{2E60A323-6C96-4CF7-A176-8059625198A0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{614A831E-6F6D-4B99-910F-36B4FA6CC69A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe

FirewallRules: [{6725B28F-3B8C-434D-9F67-11C6364AB54D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe

FirewallRules: [{9719D41D-BF61-45B7-9025-D576749F2999}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe

FirewallRules: [{F7472A95-D314-4D96-8161-F5EA4CC9BCED}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe

FirewallRules: [{C00716BB-1F31-4A89-9328-254F5B247ACD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3BF96EDB-9FA0-4C0A-B92C-6B916F9FD695}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{4D5770AF-9437-42F4-9831-D8A400F95D51}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe

FirewallRules: [{6AB8641A-A6F2-4A99-B787-757FF5EB7788}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe

FirewallRules: [{361D4BF1-417E-488B-918A-A8B2F244BB08}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe

FirewallRules: [{8289C635-A454-4FDB-8732-67B5F1921C4F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe

FirewallRules: [{991405F1-338C-416B-B2C5-A95F43E0E979}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe

FirewallRules: [{7C76EEE1-36CB-4E5A-AAE3-3D164027B6EC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe

FirewallRules: [{B0A6CF7B-141E-49B7-AA61-A82E3F42D4CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe

FirewallRules: [{E1A5F566-3518-41FE-86F0-1586A47727C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe

FirewallRules: [{6CCE767F-8005-4758-9171-E495D3DBD212}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe

FirewallRules: [{EAE60A23-558E-401E-8C83-9C7CD643DC52}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe

FirewallRules: [{9884FD7C-4415-48E6-9432-C3E60352A44D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe

FirewallRules: [{7C9D39DB-23FF-49F9-9CE5-6FEC24468E27}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe

FirewallRules: [TCP Query User{7C4203C9-C082-4238-A4CB-58753C1F0B6C}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe

FirewallRules: [UDP Query User{421DB6E2-33C9-410C-8EFB-05F73D5E4D29}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe

FirewallRules: [TCP Query User{4BDA6A17-766D-4232-BAAA-90E3EA3EC6C2}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe

FirewallRules: [UDP Query User{5D092578-F888-4AC4-B9AF-63830CB98B4C}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe

FirewallRules: [{C081FCD8-647D-4AFD-B876-035D055B1FE6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe

FirewallRules: [{EBB3EDD2-334F-4EA3-B236-427203E15816}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe

FirewallRules: [TCP Query User{47630AA2-8BC0-42F6-86F3-F56CE07AFA33}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{CE06F7D5-EA95-46DB-942A-7AD99186660F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{F275B108-8993-4C50-9619-48DAD287646B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{CF4DDEC5-0D82-4A10-92EA-050458B6737E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [TCP Query User{3DA6C6E9-D4B8-44D1-8E14-1CBBCD1F68FB}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe

FirewallRules: [UDP Query User{F479C94A-0B6A-4966-B864-8268564FE96E}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe

FirewallRules: [{DF63C77C-B3A0-4225-B421-7F14B5B61D7C}] => (Allow) LPort=7777

FirewallRules: [{560CE11D-6E66-4C7C-9356-F7116B4088E2}] => (Allow) LPort=7777

FirewallRules: [TCP Query User{B55ABF91-9441-4130-A2F6-A9BDE3536C46}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{74D866EC-B243-4998-BD74-9A7F1B75A30D}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe

FirewallRules: [{FF2A0257-E89E-425F-9507-BEF55266965F}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{AFA94905-6E8F-425B-9712-A235169C8F7D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{A8C15B47-34E0-4C46-B707-650201622059}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{E3528CD5-2F55-4A5D-BF1C-B2F9CC0EF6C1}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{75BECF26-E15F-4F2F-A1AD-2C474D8E1C74}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{74C3B8BD-2F78-4C22-AE59-2F1D5795D794}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe

FirewallRules: [{19F97437-F8FB-4C3E-B8FC-4003633622E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{F3F3D22B-E00C-4062-A31B-A36D148C904F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{BCA6E2C9-F713-4B1D-9AE0-4C143E6ED4D8}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe

FirewallRules: [{F717F064-92C9-4B38-BBF3-28A153829494}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe

FirewallRules: [{30A06786-9A12-4960-A262-8722ABA7DC49}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{820C9087-29C6-4C19-BA6C-2FF6D876D41F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{7E9E2F58-7F77-4E0A-A7CF-18A90A978667}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe

FirewallRules: [{4D720489-96F0-4924-A0E0-10434060CAA6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe

FirewallRules: [{E4C937AB-5EC5-47EC-BBCF-8907C1E904FC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [{DD5CFC20-053C-4908-A3D8-990901C72F86}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [{1E021EA6-4F72-4CB1-8710-AD453045770E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{E5DD8B9E-F1C6-4828-97D5-6C70EEAF9430}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{35CC350D-6000-483C-A96A-3C5771B28918}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{A02B5A66-8301-4A05-8FE0-BFE21B5CDE82}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{C6BF81B9-1F2C-47C6-A781-2E69599C78FA}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{4E74000F-2C98-4043-A394-548D7CA050CF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{DBF843D6-CC0E-457F-A055-2D56277E55E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe

FirewallRules: [{FB15088D-AEF2-49D1-8AFF-8C3604794B87}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe

FirewallRules: [{B48CCDD1-D87C-4431-9BA9-063473CBD9B5}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe

FirewallRules: [{319E0304-5853-4BF4-853F-6E2488F0145C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{0E8CF9D4-C8FB-4930-B319-1DAD65671E4E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{5EC2A222-C3DD-4C7E-B2D4-79566E7721B2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{DB41A4F4-6D0B-48AD-BE11-1531FA505068}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{E1E54F54-C80D-4D17-8957-D0A017B300CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{F9EB673D-E27E-4936-922B-99BAD67A0714}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{B591DC37-4523-47B7-B14A-A1E2C675D192}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{82724F50-9003-4FD2-83A0-2FCF497491D5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{C55674D5-1D32-4A83-B5D2-C250AB7D12DE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{D197808A-C7B7-43A8-AFB9-10C266F467AE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [TCP Query User{13ADBCA4-15CB-4498-8457-41903CADB1E8}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe

FirewallRules: [UDP Query User{B2F3CAE9-D58E-43D2-B3AA-7B053762CE29}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe

FirewallRules: [{8491ACEC-7216-4A16-BD5D-9A4A783B1B20}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{1964DBDA-3427-4EFF-821E-FBE915ED24F4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{4C3E9107-49B2-4F52-9AB8-E548386FCC45}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{EB65C903-A396-422E-9E7A-531A0CFD5CBB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{BF060809-5FBF-4E9F-BBDA-9E7FD6E3FC06}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{DDB3404A-557A-44E6-98E8-6D4B56A7D6D9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe

FirewallRules: [{90833148-6956-44D3-8EE8-0EBA2C733E17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe

FirewallRules: [{9A1F4C0E-9B7F-4C03-9413-9ADCD4F1AF0C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{F5402017-714C-4205-8020-586CB774DA11}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{C4557A97-9B4A-4817-8B00-286FE8C2A77E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{960B6CAD-9EA2-48BD-AFB7-9B0EB1949D26}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{61891A3B-4944-423A-BB8A-09970AC1A7F7}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe
 

==================== Wiederherstellungspunkte =========================
 

09-05-2017 22:11:38 Windows Update

18-05-2017 19:01:56 Windows Update

23-05-2017 21:02:37 Windows Update

24-05-2017 23:49:16 Revo Uninstaller's restore point - Avira Antivirus

24-05-2017 23:50:23 Revo Uninstaller's restore point - Avira Connect
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/24/2017 11:56:54 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm MSASCui.exe, Version 4.11.15063.0 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 244c
 

Startzeit: 01d2d4d87e11523c
 

Beendigungszeit: 2
 

Anwendungspfad: C:\Program Files\Windows Defender\MSASCui.exe
 

Berichts-ID: 47d97a6e-5947-42b0-acb3-b4f63f52ab6c
 

VollstÃ¤ndiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (05/24/2017 11:51:29 PM) (Source: openvpnserv) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (05/24/2017 11:50:23 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}
 

Error: (05/24/2017 11:49:16 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}
 

Error: (05/24/2017 11:48:58 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "c:\program files (x86)\ubisoft\ubisoft game launcher\cache\patch\5086\upc.exe".

Die abhÃ¤ngige Assemblierung "XAudio2_7.X,processorArchitecture="X86",type="Win32",version="9.29.1962.0"" konnte nicht gefunden werden.

Verwenden Sie fÃ¼r eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)

Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
 

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)

Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
 

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)

Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
 

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)

Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1
 

Error: (05/24/2017 10:22:02 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: Dennis-Zock-PC)

Description: Ãœberspringen: Eap method DLL path Fehler bei der ÃœberprÃ¼fung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0
 
 

Systemfehler:

=============

Error: (05/24/2017 11:51:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.
 

Error: (05/24/2017 11:51:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 

Die Anforderung wird nicht unterstÃ¼tzt.
 

Error: (05/18/2017 07:13:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.
 

Error: (05/18/2017 07:13:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 

Die Anforderung wird nicht unterstÃ¼tzt.
 

Error: (05/10/2017 10:36:43 PM) (Source: DCOM) (EventID: 10010) (User: Dennis-Zock-PC)

Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (05/10/2017 10:36:43 PM) (Source: DCOM) (EventID: 10010) (User: Dennis-Zock-PC)

Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (05/10/2017 07:24:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.
 

Error: (05/10/2017 07:24:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 

Die Anforderung wird nicht unterstÃ¼tzt.
 

Error: (05/09/2017 08:06:21 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.
 

Error: (05/09/2017 08:06:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 

Die Anforderung wird nicht unterstÃ¼tzt.
 
 

CodeIntegrity:

===================================

  Date: 2017-05-24 23:37:47.792

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:47.788

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:47.783

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.772

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.771

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.770

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.769

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.768

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 22:08:15.854

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 22:08:15.854

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz

Prozentuale Nutzung des RAM: 18%

Installierter physikalischer RAM: 16310.5 MB

Verfügbarer physikalischer RAM: 13341.76 MB

Summe virtueller Speicher: 32694.5 MB

Verfügbarer virtueller Speicher: 29312.38 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:237.81 GB) (Free:79.43 GB) NTFS

Drive e: (Games) (Fixed) (Total:2794.39 GB) (Free:2016.1 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Auha :wtf: hast ja einiges an Programmen/Spielen drauf :wtf:

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

So, Scan ist durchgelaufen mit Ergebnis, dass keine Malware gefunden wurde, und kein Cleanup nötig ist.

Vermutlich wird in diesem Fall kein Log-File erstellt, da ich keins finden konnte.

Und ja, ist ein Gaming-PC :lach:

Ah, mein Fehler, die Datei heißt nur system-log.txt, deshalb habe ich sie nicht gefunden:

Code:

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 10.0.9200 Windows 10 x64
 

Account is Administrative
 

Internet Explorer version: 11.296.15063.0
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED

CPU speed: 3.500000 GHz

Memory total: 17102798848, free: 13624586240
 

Downloaded database version: v2017.05.24.10

Downloaded database version: v2017.04.02.01

Downloaded database version: v2017.05.19.01

=======================================

Initializing...

Driver version: 0.3.0.4

------------ Kernel report ------------

     05/25/2017 00:14:08

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kd.dll

\SystemRoot\system32\mcupdate_GenuineIntel.dll

\SystemRoot\System32\drivers\msrpc.sys

\SystemRoot\System32\drivers\ksecdd.sys

\SystemRoot\System32\drivers\werkernel.sys

\SystemRoot\System32\drivers\CLFS.SYS

\SystemRoot\System32\drivers\tm.sys

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\BOOTVID.dll

\SystemRoot\System32\drivers\FLTMGR.SYS

\SystemRoot\System32\drivers\clipsp.sys

\SystemRoot\System32\drivers\cmimcext.sys

\SystemRoot\System32\drivers\ntosext.sys

\SystemRoot\system32\CI.dll

\SystemRoot\System32\drivers\cng.sys

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\system32\drivers\SleepStudyHelper.sys

\SystemRoot\System32\Drivers\acpiex.sys

\SystemRoot\System32\Drivers\WppRecorder.sys

\SystemRoot\System32\drivers\ACPI.sys

\SystemRoot\System32\drivers\WMILIB.SYS

\SystemRoot\System32\drivers\intelpep.sys

\SystemRoot\system32\drivers\WindowsTrustedRT.sys

\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\drivers\msisadrv.sys

\SystemRoot\System32\drivers\pci.sys

\SystemRoot\System32\drivers\vdrvroot.sys

\SystemRoot\system32\drivers\pdc.sys

\SystemRoot\system32\drivers\CEA.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\System32\drivers\spaceport.sys

\SystemRoot\System32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\System32\drivers\iaStorA.sys

\SystemRoot\System32\drivers\storport.sys

\SystemRoot\System32\drivers\EhStorClass.sys

\SystemRoot\System32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\Wof.sys

\SystemRoot\System32\Drivers\NTFS.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\System32\drivers\wfplwfs.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\System32\drivers\volume.sys

\SystemRoot\System32\drivers\volsnap.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\system32\drivers\iorate.sys

\SystemRoot\System32\drivers\disk.sys

\SystemRoot\System32\drivers\CLASSPNP.SYS

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\drivers\cdrom.sys

\SystemRoot\system32\drivers\filecrypt.sys

\SystemRoot\system32\drivers\tbs.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\BasicDisplay.sys

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\vmbkmclr.sys

\SystemRoot\System32\drivers\BasicRender.sys

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\drivers\afd.sys

\SystemRoot\System32\drivers\vwififlt.sys

\SystemRoot\System32\drivers\pacer.sys

\SystemRoot\system32\drivers\netbios.sys

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\csc.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\System32\drivers\npsvctrig.sys

\SystemRoot\System32\drivers\mssmbios.sys

\SystemRoot\System32\drivers\gpuenergydrv.sys

\SystemRoot\System32\Drivers\ElbyCDIO.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\DRIVERS\ahcache.sys

\SystemRoot\System32\drivers\tap0901.sys

\SystemRoot\System32\drivers\hmatap.sys

\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys

\SystemRoot\System32\drivers\kdnic.sys

\SystemRoot\System32\drivers\umbus.sys

\SystemRoot\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys

\SystemRoot\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys

\SystemRoot\System32\drivers\HDAudBus.sys

\SystemRoot\System32\drivers\portcls.sys

\SystemRoot\System32\drivers\drmk.sys

\SystemRoot\System32\drivers\ks.sys

\SystemRoot\System32\drivers\USBXHCI.SYS

\SystemRoot\system32\drivers\ucx01000.sys

\SystemRoot\system32\DRIVERS\TeeDriverx64.sys

\SystemRoot\System32\drivers\e1i63x64.sys

\SystemRoot\System32\drivers\usbehci.sys

\SystemRoot\System32\drivers\USBPORT.SYS

\SystemRoot\System32\drivers\serial.sys

\SystemRoot\System32\drivers\serenum.sys

\SystemRoot\System32\Drivers\AnyDVD.sys

\SystemRoot\System32\drivers\wmiacpi.sys

\SystemRoot\System32\drivers\intelppm.sys

\SystemRoot\System32\drivers\acpipagr.sys

\SystemRoot\System32\drivers\cbfs3.sys

\SystemRoot\System32\drivers\NdisVirtualBus.sys

\SystemRoot\System32\drivers\swenum.sys

\SystemRoot\system32\drivers\LGBusEnum.sys

\SystemRoot\System32\drivers\VClone.sys

\SystemRoot\System32\drivers\rdpbus.sys

\SystemRoot\System32\drivers\usbhub.sys

\SystemRoot\System32\drivers\USBD.SYS

\SystemRoot\system32\drivers\AtihdWT6.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\System32\drivers\UsbHub3.sys

\SystemRoot\system32\drivers\RTKVHD64.sys

\SystemRoot\System32\Drivers\fastfat.SYS

\SystemRoot\System32\drivers\usbccgp.sys

\SystemRoot\System32\drivers\hidusb.sys

\SystemRoot\System32\drivers\HIDCLASS.SYS

\SystemRoot\System32\drivers\HIDPARSE.SYS

\SystemRoot\System32\drivers\kbdhid.sys

\SystemRoot\System32\drivers\kbdclass.sys

\SystemRoot\system32\DRIVERS\CMUAC.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\win32kfull.sys

\SystemRoot\System32\win32kbase.sys

\SystemRoot\System32\drivers\mouhid.sys

\SystemRoot\System32\drivers\mouclass.sys

\SystemRoot\System32\Drivers\dump_diskdump.sys

\SystemRoot\System32\Drivers\dump_iaStorA.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\System32\drivers\dxgmms2.sys

\SystemRoot\System32\drivers\monitor.sys

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\system32\drivers\luafv.sys

\SystemRoot\system32\drivers\wcifs.sys

\SystemRoot\system32\drivers\storqosflt.sys

\SystemRoot\System32\drivers\registry.sys

\SystemRoot\system32\drivers\lltdio.sys

\SystemRoot\system32\drivers\mslldp.sys

\SystemRoot\system32\drivers\rspndr.sys

\SystemRoot\System32\DRIVERS\wanarp.sys

\SystemRoot\system32\drivers\ndisuio.sys

\SystemRoot\system32\DRIVERS\nwifi.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\System32\drivers\mpsdrv.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\??\C:\WINDOWS\system32\drivers\amdacpksd.sys

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\system32\drivers\mmcss.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\system32\drivers\mqac.sys

\SystemRoot\system32\drivers\Ndu.sys

\SystemRoot\system32\drivers\peauth.sys

\SystemRoot\System32\DRIVERS\srv.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\System32\drivers\condrv.sys

\SystemRoot\System32\drivers\tunnel.sys

\??\C:\Windows\gdrv.sys

\SystemRoot\system32\drivers\LGVirHid.sys

\SystemRoot\system32\drivers\WdFilter.sys

\SystemRoot\system32\Drivers\WdNisDrv.sys

\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys

\??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

----------- End -----------

Done!
 

Scan started

Database versions:

  main:    v2017.05.24.10

  rootkit: v2017.04.02.01
 

<<<2>>>

Physical Sector Size: 512

Drive: 1, DevicePointer: 0xffff858a2f1cd060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xffff858a2dda29f0, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffff858a2f1cd060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

DevicePointer: 0xffff858a2d3ff040, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffff858a2d3fde40, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffff858a2cdf5060, DeviceName: \Device\00000037\, DriverName: \Driver\iaStorA\

------------ End ----------

Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...

Done!

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xffff858a2f1ce060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xffff858a2dd689f0, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffff858a2f1ce060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

DevicePointer: 0xffff858a2cdf6680, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffff858a2d3fe250, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffff858a2cdf2060, DeviceName: \Device\00000036\, DriverName: \Driver\iaStorA\

------------ End ----------

Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 0

Scanning MBR on drive 0...

Inspecting partition table:

This drive is a GPT Drive.

MBR Signature: 55AA

Disk Signature: 0
 

GPT Protective MBR Partition information:
 

    Partition 0 type is EFI-GPT (0xee)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1  Numsec = 4294967295
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

GPT Partition information:
 

    GPT Header Signature 4546492050415254

    GPT Header Revision 65536 Size 92 CRC 2329526443

    GPT Header CurrentLba = 1 BackupLba 5860533167

    GPT Header FirstUsableLba 34  LastUsableLba 5860533134

    GPT Header Guid da68d8e0-8a93-425b-a37c-96331baad3d1

    GPT Header Contains 128 partition entries starting at LBA 2

    GPT Header Partition entry size = 128
 

    Backup GPT header Signature 4546492050415254

    Backup GPT header Revision 65536 Size 92 CRC 2329526443

    Backup GPT header CurrentLba = 5860533167 BackupLba 1

    Backup GPT header FirstUsableLba 34  LastUsableLba 5860533134

    Backup GPT header Guid da68d8e0-8a93-425b-a37c-96331baad3d1

    Backup GPT header Contains 128 partition entries starting at LBA 5860533135

    Backup GPT header Partition entry size = 128
 

    Partition 0 Type e3c9e316-b5c-4db8-817d-f92df0215ae

    Partition ID d81df2bb-71ea-4619-a67f-74f340f321eb

    FirstLBA 34  Last LBA 262177

    Attributes 0

    Partition Name         Microsoft reserved partition
 

    Partition 1 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7

    Partition ID 90bcd7fb-9d1e-49b3-88ac-5dda4d2eda

    FirstLBA 264192  Last LBA 5860532223

    Attributes 0

    Partition Name                 Basic data partition
 

Disk Size: 3000592982016 bytes

Sector size: 512 bytes
 

Done!

Drive 1

This is a System drive

Scanning MBR on drive 1...

Inspecting partition table:

This drive is a GPT Drive.

MBR Signature: 55AA

Disk Signature: 0
 

GPT Protective MBR Partition information:
 

    Partition 0 type is EFI-GPT (0xee)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1  Numsec = 4294967295
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

GPT Partition information:
 

    GPT Header Signature 4546492050415254

    GPT Header Revision 65536 Size 92 CRC 3500198989

    GPT Header CurrentLba = 1 BackupLba 500118191

    GPT Header FirstUsableLba 34  LastUsableLba 500118158

    GPT Header Guid 546f0912-744a-4931-85e-72ec9b6d61

    GPT Header Contains 128 partition entries starting at LBA 2

    GPT Header Partition entry size = 128
 

    Backup GPT header Signature 4546492050415254

    Backup GPT header Revision 65536 Size 92 CRC 3500198989

    Backup GPT header CurrentLba = 500118191 BackupLba 1

    Backup GPT header FirstUsableLba 34  LastUsableLba 500118158

    Backup GPT header Guid 546f0912-744a-4931-85e-72ec9b6d61

    Backup GPT header Contains 128 partition entries starting at LBA 500118159

    Backup GPT header Partition entry size = 128
 

    Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b

    Partition ID f67554a4-e0d-44f5-8b71-db7a8b6fc925

    FirstLBA 2048  Last LBA 206847

    Attributes 0

    Partition Name                 EFI system partition
 

    GPT Partition 0 is bootable

    Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae

    Partition ID 54f31a06-9139-4ef2-8320-03f64d1563e

    FirstLBA 206848  Last LBA 468991

    Attributes 0

    Partition Name         Microsoft reserved partition
 

    Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7

    Partition ID b3719f4e-dde8-4275-ac40-a4df47e49ced

    FirstLBA 468992  Last LBA 499195903

    Attributes 0

    Partition Name                 Basic data partition
 

    Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac

    Partition ID 3002c209-2634-44d6-8938-1b83505a36d4

    FirstLBA 499195904  Last LBA 500117503

    Attributes 1

    Partition Name                                     
 

Disk Size: 256060514304 bytes

Sector size: 512 bytes
 

Done!

<<<2>>>

<<<3>>>

Volume: E:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.7C" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-9ADCC8A918291A1B1FEC5008F230350F9D280C63.bin.83" is compressed (flags = 1)

Scan finished

Ach jeh, ich scheine schon müde zu sein, sorry für die vielen Nachträge.
Ich hatte die Software noch auch, das Logfile wird erst nachdem man auf Exit gedrückt hat erstellt....:pfeiff:

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2017.05.24.10

  rootkit: v2017.04.02.01
 

Windows 10 x64 NTFS

Internet Explorer 11.296.15063.0

Dennis :: DENNIS-ZOCK-PC [administrator]
 

25.05.2017 00:14:13

mbar-log-2017-05-25 (00-14-13).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 352688

Time elapsed: 8 minute(s), 29 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass adwCleaner so eingestellt wie auf diesem Screenshot zu sehen:

http://saved.im/mtg4nzk1egdo/malware...r-settings.png
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Anbei die generierten Logs:

AdwCleaner:

Code:

# AdwCleaner v6.046 - Bericht erstellt am 25/05/2017 um 00:43:13

# Aktualisiert am 24/04/2017 von Malwarebytes

# Datenbank : 2017-05-23.1 [Server]

# Betriebssystem : Windows 10 Pro  (X64)

# Benutzername : Dennis - DENNIS-ZOCK-PC

# Gestartet von : C:\Users\Dennis\Desktop\AdwCleaner_6.046.exe

# Modus: Löschen

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 
 
 

***** [ Dateien ] *****
 
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
 
 

***** [ Browser ] *****
 
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: "Prefetch" Dateien gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C0].txt - [1364 Bytes] - [25/05/2017 00:43:13]

C:\AdwCleaner\AdwCleaner[S0].txt - [1636 Bytes] - [25/05/2017 00:42:46]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1510 Bytes] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.1.3 (04.10.2017)

Operating System: Windows 10 Pro x64 

Ran by Dennis (Administrator) on 25.05.2017 at  0:46:01,19

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 5 
 

Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio (Folder) 

Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gkojfkhlekighikafcpjkiklfbnlmeio (Folder) 

Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage-journal (File) 

Successfully deleted: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage (File) 

Successfully deleted: C:\Users\Dennis\AppData\Roaming\3909 (Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 25.05.2017 at  0:47:04,38

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

FRST.txt:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017

durchgeführt von Dennis (Administrator) auf DENNIS-ZOCK-PC (25-05-2017 00:54:56)

Gestartet von C:\Users\Dennis\Desktop

Geladene Profile: Dennis (Verfügbare Profile: Dennis & DefaultAppPool)

Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

() C:\Windows\SysWOW64\ASGT.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe

(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe

(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

() C:\Program Files\OpenVPN\bin\openvpn-gui.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginThinSetupInternal.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)

HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)

HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1223168 2016-12-09] (Cisco Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)

HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-04-30] (TomTom)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [GalaxyClient] => E:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [4954176 2017-05-22] (GOG.com)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dennis\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [10737184 2016-12-26] (RedFox)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Discord] => C:\Users\Dennis\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27774936 2017-04-02] (Skype Technologies S.A.)

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mediatek Wireless Utility.lnk [2017-03-26]

ShortcutTarget: Mediatek Wireless Utility.lnk -> C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe (Mediatek Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{195c279c-9b92-4a79-976a-3ac520f7026c}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{54deaf3b-03c8-41bd-ae4c-dbec6e7f4c6d}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{6daff1b1-d1c8-459b-adc5-05e0d6458d6e}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{b8aac3fa-f900-4e7f-834d-2f112cf7a49d}: [DhcpNameServer] 192.168.0.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

SearchScopes: HKU\S-1-5-21-2002795488-2026584554-4065357487-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-05-06] (Microsoft Corporation)

BHO: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\system32\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-06] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-05-05] (Microsoft Corporation)

BHO-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} -> C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-09-19] (EldoS Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-12] (Oracle Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-05] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-12] (Oracle Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-06] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-05] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default [2015-07-09]

FF Extension: (Emulator) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\Navcore.9.500.1161701@tomtom.com [2015-04-10] [ist nicht signiert]

FF Extension: (Tyre) - C:\Users\Dennis\AppData\Roaming\TomTom\HOME\Profiles\4n9ou3a7.default\Extensions\tyre@tyre.tk [2015-04-10] [ist nicht signiert]

FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2015-07-09] [ist nicht signiert]

FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 [2017-05-25]

FF Homepage: Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715 -> hxxps://www.google.de/?gws_rd=ssl

FF Extension: (Mailvelope) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2017-04-18]

FF Extension: (Adblock Plus) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]

FF Extension: (Greasemonkey) - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8eardfhw.default-1479136325715\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-27]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()

FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-06] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()

FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-12] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-12] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-05] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-05] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-08-28] (Nexon)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default [2017-05-22]

CHR Extension: (Google Präsentationen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]

CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]

CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]

CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]

CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]

CHR Extension: (NicoNico Audio Extractor) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecoahjklhopckkiefihjloeidikepdh [2015-03-09]

CHR Extension: (Adobe Acrobat) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-13]

CHR Extension: (Google Tabellen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]

CHR Extension: (Avira Browserschutz) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-03-15]

CHR Extension: (Google Docs Offline) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-13]

CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-15]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

Opera: 

=======

StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2017-05-05] (Microsoft Corporation)

R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-02-08] (Digital Wave Ltd.)

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [236832 2015-10-21] (EasyAntiCheat Ltd)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)

R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Datei ist nicht signiert]

S3 GalaxyClientService; E:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [512576 2017-05-22] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-19] (GOG.com)

S3 HmaOpenVpnService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [38912 2017-02-02] (The OpenVPN Project)

S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2014-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)

R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.)

R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Datei ist nicht signiert]

R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)

S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2147216 2017-04-10] (Electronic Arts)

R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3116440 2017-04-10] (Electronic Arts)

S2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2016-12-15] (Geek Software GmbH)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2015-12-23] (Advanced Micro Devices)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)

R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)

R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)

R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [154448 2016-07-11] (RedFox)

R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2016-12-08] (Advanced Micro Devices)

S3 atillk64; C:\Program Files (x86)\ASUS\GPU Tweak\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.)

R3 cbfs3; C:\WINDOWS\System32\drivers\cbfs3.sys [341904 2011-09-19] (EldoS Corporation)

R3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [661760 2016-01-02] (C-MEDIA)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 EagleX64; C:\WINDOWS\system32\drivers\EagleX64.sys [174728 2015-08-28] (AhnLab, Inc.)

S3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)

R3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2016-11-23] (The OpenVPN Project)

S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-10-05] (Microsoft Corporation)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 USBMULCD; C:\WINDOWS\system32\drivers\CM10664.sys [4135424 2013-09-12] (C-Media Electronics Inc)

S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-11-19] (Cisco Systems, Inc.)

U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [41472 2017-03-18] (Microsoft Corporation)

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-05-25 00:47 - 2017-05-25 00:47 - 00001261 _____ C:\Users\Dennis\Desktop\JRT.txt

2017-05-25 00:45 - 2017-05-25 00:45 - 01663672 _____ (Malwarebytes) C:\Users\Dennis\Desktop\JRT.exe

2017-05-25 00:41 - 2017-05-25 00:43 - 00000000 ____D C:\AdwCleaner

2017-05-25 00:41 - 2017-05-25 00:40 - 04102600 _____ C:\Users\Dennis\Desktop\AdwCleaner_6.046.exe

2017-05-25 00:14 - 2017-05-25 00:32 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2017-05-25 00:14 - 2017-05-25 00:14 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-05-25 00:14 - 2017-05-25 00:14 - 00000000 ____D C:\ProgramData\Malwarebytes

2017-05-25 00:13 - 2017-05-25 00:32 - 00000000 ____D C:\Users\Dennis\Desktop\mbar

2017-05-25 00:13 - 2017-05-25 00:13 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2017-05-25 00:02 - 2017-05-25 00:03 - 00100223 _____ C:\Users\Dennis\Desktop\Addition.txt

2017-05-25 00:01 - 2017-05-25 00:55 - 00023451 _____ C:\Users\Dennis\Desktop\FRST.txt

2017-05-25 00:01 - 2017-05-25 00:54 - 00000000 ____D C:\FRST

2017-05-25 00:01 - 2017-05-24 22:47 - 02429952 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe

2017-05-24 23:48 - 2017-05-24 23:48 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk

2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2017-05-24 23:48 - 2017-05-24 23:48 - 00000000 ____D C:\Program Files\VS Revo Group

2017-05-24 22:19 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis\OpenVPN

2017-05-24 22:18 - 2017-05-24 22:18 - 00000953 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\TAP-Windows

2017-05-24 22:18 - 2017-05-24 22:18 - 00000000 ____D C:\Program Files\OpenVPN

2017-05-24 22:05 - 2017-05-24 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HMA! Pro VPN

2017-05-23 17:56 - 2017-05-23 17:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER

2017-05-18 19:02 - 2017-05-18 19:02 - 00003160 _____ C:\WINDOWS\System32\Tasks\StartCN

2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2017-05-18 19:02 - 2017-05-18 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings

2017-05-16 18:06 - 2017-05-16 18:06 - 10320248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00924544 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00864120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00514424 _____ C:\WINDOWS\system32\amdgfxinfo64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00121208 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00112512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00112000 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00091520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00029056 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll

2017-05-16 18:06 - 2017-05-16 18:06 - 00029048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00573800 _____ C:\WINDOWS\system32\amdmiracast.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00196176 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00139080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll

2017-05-16 18:05 - 2017-05-16 18:05 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll

2017-05-13 10:58 - 2017-05-18 19:13 - 00000949 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job

2017-05-13 10:58 - 2017-05-18 19:13 - 00000763 _____ C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job

2017-05-13 10:58 - 2017-05-13 10:58 - 00004148 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}

2017-05-13 10:58 - 2017-05-13 10:58 - 00003970 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}

2017-05-10 22:29 - 2017-05-10 22:29 - 16627692 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.zip

2017-05-10 22:29 - 2017-05-10 22:29 - 16507878 _____ C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen.7z

2017-05-10 22:24 - 2017-05-10 22:26 - 00000000 ____D C:\Users\Dennis\Desktop\UNU2.0_Swingarm_Schweissen

2017-05-09 22:11 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-05-09 22:11 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-05-09 22:11 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2017-05-09 22:11 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-05-09 22:11 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll

2017-05-09 22:11 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-05-09 22:11 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2017-05-09 22:11 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2017-05-09 22:11 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-05-09 22:11 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2017-05-09 22:11 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2017-05-09 22:11 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-05-09 22:11 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2017-05-09 22:11 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-05-09 22:11 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll

2017-05-09 22:11 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-05-09 22:11 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-05-09 22:11 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2017-05-09 22:11 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-05-09 22:11 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2017-05-09 22:11 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-05-09 22:11 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe

2017-05-09 22:11 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll

2017-05-09 22:11 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-05-09 22:11 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2017-05-09 22:11 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-05-09 22:11 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-05-09 22:11 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2017-05-09 22:11 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-05-09 22:11 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-05-09 22:11 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2017-05-09 22:11 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-05-09 22:11 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-05-09 22:11 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2017-05-09 22:11 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2017-05-09 22:11 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2017-05-09 22:11 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2017-05-09 22:11 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-05-09 22:11 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-05-09 22:11 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2017-05-09 22:11 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-05-09 22:11 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2017-05-09 22:11 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2017-05-09 22:11 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-05-09 22:11 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-05-09 22:11 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-05-09 22:11 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-05-09 22:11 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-05-09 22:11 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-05-09 22:11 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe

2017-05-09 22:11 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-05-09 22:11 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-05-09 22:11 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-05-09 22:11 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2017-05-09 22:11 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-05-09 22:11 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2017-05-09 22:11 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys

2017-05-09 22:11 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-05-09 22:11 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2017-05-09 22:11 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll

2017-05-09 22:11 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2017-05-09 22:11 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-05-09 22:11 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2017-05-09 22:11 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2017-05-09 22:11 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-05-09 22:11 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2017-05-09 22:11 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2017-05-09 22:11 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-05-09 22:11 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-05-09 22:11 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-05-09 22:11 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-05-09 22:11 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-05-09 22:11 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-05-09 22:11 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-05-09 22:11 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2017-05-09 22:11 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-05-09 22:11 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-05-09 22:11 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-05-09 22:11 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2017-05-09 22:11 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe

2017-05-09 22:11 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2017-05-09 22:11 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys

2017-05-09 22:11 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll

2017-05-07 14:55 - 2017-05-07 14:55 - 19741458 _____ C:\Users\Dennis\Desktop\Dryzz_MT.zip

2017-05-07 14:55 - 2017-05-07 14:47 - 02050374 _____ C:\Users\Dennis\Desktop\Master_Thesis_Dryzz_Corrected.pdf

2017-05-06 22:20 - 2017-05-06 22:20 - 00000000 ____D C:\Users\Dennis\AppData\Local\DBG

2017-05-02 08:55 - 2017-05-02 08:55 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2017-05-02 08:55 - 2017-05-02 08:55 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2017-05-02 08:55 - 2017-05-02 08:55 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2017-05-02 08:55 - 2017-05-02 08:55 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys

2017-05-02 08:55 - 2017-05-02 08:55 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2017-05-02 08:55 - 2017-05-02 08:55 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2017-05-02 08:54 - 2017-03-17 23:00 - 07702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll

2017-05-02 08:54 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll

2017-05-02 08:54 - 2017-03-17 23:00 - 02454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll

2017-05-02 08:54 - 2017-03-17 22:59 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll

2017-05-02 08:54 - 2017-03-17 22:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 07405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 01914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll

2017-05-02 08:54 - 2017-03-17 22:54 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll

2017-05-02 08:54 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll

2017-05-02 08:54 - 2017-03-17 22:43 - 06917632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll

2017-05-02 08:54 - 2017-03-17 22:40 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 07244800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 01868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll

2017-05-02 08:54 - 2017-03-17 22:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll

2017-05-02 08:54 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll

2017-05-02 08:54 - 2017-02-10 12:22 - 00002060 _____ C:\WINDOWS\system32\noise.jpn

2017-05-02 08:53 - 2017-05-02 08:53 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\msmq

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\WINDOWS\system32\BestPractices

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\Reference Assemblies

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files\MSBuild

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\Program Files (x86)\MSBuild

2017-05-02 08:53 - 2017-05-02 08:53 - 00000000 ____D C:\inetpub

2017-05-02 08:53 - 2017-05-02 08:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2017-05-02 08:53 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles

2017-05-02 08:52 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2017-05-02 08:52 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2017-05-02 08:52 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2017-05-02 08:10 - 2017-05-02 08:10 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2017-05-02 08:09 - 2017-05-02 08:09 - 00000020 ___SH C:\Users\Dennis\ntuser.ini

2017-05-02 08:09 - 2017-05-02 08:09 - 00000000 ____D C:\ProgramData\USOShared

2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml

2017-05-02 08:05 - 2017-05-02 08:05 - 00011433 _____ C:\WINDOWS\diagerr.xml

2017-05-02 08:04 - 2017-05-25 00:43 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-05-02 08:04 - 2017-05-24 21:24 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{634CF361-F616-4788-8E86-4D331F2B736A}

2017-05-02 08:04 - 2017-05-20 10:31 - 00003978 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1491080137

2017-05-02 08:04 - 2017-05-09 21:44 - 00004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2017-05-02 08:04 - 2017-05-09 21:44 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2017-05-02 08:04 - 2017-05-06 12:36 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2017-05-02 08:04 - 2017-05-02 08:11 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2

2017-05-02 08:04 - 2017-05-02 08:04 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003502 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003324 _____ C:\WINDOWS\System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}

2017-05-02 08:04 - 2017-05-02 08:04 - 00003248 _____ C:\WINDOWS\System32\Tasks\MATLAB R2015b Startup Accelerator

2017-05-02 08:04 - 2017-05-02 08:04 - 00002166 _____ C:\WINDOWS\System32\Tasks\arp_flush

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform

2017-05-02 08:04 - 2017-05-02 08:04 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS

2017-05-02 08:01 - 2017-05-02 08:01 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2017-05-02 07:59 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate

2017-05-02 07:59 - 2017-05-02 07:59 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines

2017-05-02 07:59 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2017-05-02 07:58 - 2017-05-25 00:49 - 02285270 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-05-02 07:58 - 2017-05-25 00:43 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin

2017-05-02 07:58 - 2017-05-24 22:19 - 00000000 ____D C:\Users\Dennis

2017-05-02 07:58 - 2017-05-18 19:02 - 00000000 ____D C:\Program Files\AMD

2017-05-02 07:58 - 2017-05-02 08:03 - 00000000 ____D C:\Users\DefaultAppPool

2017-05-02 07:58 - 2017-05-02 07:58 - 02011386 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Vorlagen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Startmenü

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Netzwerkumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Lokale Einstellungen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Eigene Dateien

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Druckumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Verlauf

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\AppData\Local\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\Dennis\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten

2017-05-02 07:58 - 2017-05-02 07:58 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2017-05-02 07:57 - 2017-05-24 21:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2017-05-02 07:57 - 2017-05-10 07:24 - 00703544 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2017-05-02 07:57 - 2017-05-02 07:57 - 00000000 ____D C:\Program Files\Realtek

2017-05-01 16:55 - 2017-05-02 08:09 - 00000000 ___DC C:\WINDOWS\Panther

2017-04-27 23:40 - 2017-04-27 23:40 - 00001256 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk

2017-04-27 23:40 - 2017-04-27 23:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\UNP

2017-04-27 23:10 - 2017-05-02 08:02 - 00000000 ____D C:\WINDOWS\system32\UNP

2017-04-27 23:10 - 2017-04-27 23:11 - 00000000 ____D C:\Program Files\UNP

2017-04-25 18:40 - 2017-04-25 18:40 - 00000000 ____D C:\Users\Dennis\AppData\Local\GOG.com
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-05-25 00:49 - 2017-03-20 06:41 - 00991698 _____ C:\WINDOWS\system32\perfh007.dat

2017-05-25 00:49 - 2017-03-20 06:41 - 00227546 _____ C:\WINDOWS\system32\perfc007.dat

2017-05-25 00:47 - 2016-11-19 13:13 - 00000000 ____D C:\Users\Dennis\AppData\LocalLow\Mozilla

2017-05-25 00:44 - 2014-12-05 00:51 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Skype

2017-05-25 00:43 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI

2017-05-25 00:43 - 2014-12-05 03:42 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys

2017-05-25 00:03 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF

2017-05-24 23:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2017-05-24 23:55 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM

2017-05-24 23:55 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2017-05-24 23:51 - 2016-11-19 02:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-05-24 23:51 - 2014-12-05 00:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2017-05-24 23:50 - 2015-08-02 13:31 - 00000000 ____D C:\ProgramData\Package Cache

2017-05-24 23:50 - 2014-12-05 00:55 - 00000000 ____D C:\ProgramData\Avira

2017-05-24 22:05 - 2016-12-14 22:14 - 00001222 _____ C:\Users\Public\Desktop\HMA! Pro VPN.lnk

2017-05-24 22:05 - 2016-12-14 22:14 - 00000000 ____D C:\Program Files (x86)\HMA! Pro VPN

2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps

2017-05-24 19:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-05-24 19:13 - 2015-04-22 23:24 - 00000000 ____D C:\Users\Dennis\AppData\Local\LogMeIn Hamachi

2017-05-24 19:10 - 2014-12-19 21:54 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Raptr

2017-05-23 21:04 - 2014-12-05 03:00 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-05-23 21:02 - 2014-12-05 03:00 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-05-23 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2017-05-23 17:55 - 2015-01-31 15:27 - 00000000 ____D C:\Program Files\Microsoft Office

2017-05-20 10:31 - 2017-04-01 22:55 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2017-05-20 10:31 - 2017-04-01 22:55 - 00000000 ____D C:\Program Files\Opera

2017-05-18 19:02 - 2015-07-22 23:09 - 00000000 ____D C:\Program Files (x86)\AMD

2017-05-18 19:02 - 2014-12-05 00:44 - 00000000 ____D C:\AMD

2017-05-16 18:06 - 2017-03-21 18:24 - 08479104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 02536320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 02198400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 01516416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 01040768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00777088 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00696192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ C:\WINDOWS\system32\dgtrayicon.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00551808 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00546688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00531328 _____ C:\WINDOWS\system32\GameManager64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00483712 _____ C:\WINDOWS\system32\atieah64.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00478080 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00467328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00411008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00365440 _____ C:\WINDOWS\SysWOW64\GameManager32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00360312 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00334208 _____ C:\WINDOWS\SysWOW64\atieah32.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00278400 _____ C:\WINDOWS\system32\clinfo.exe

2017-05-16 18:06 - 2017-03-21 18:24 - 00276352 _____ C:\WINDOWS\system32\hsa-thunk64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00245112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00242048 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00203648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00191360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00169856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00167808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00156704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00150912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00148440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00135040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00133504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00122744 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00115072 _____ C:\WINDOWS\system32\atidxx64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00101760 _____ C:\WINDOWS\SysWOW64\atidxx32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00099192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00075136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00068992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00044920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll

2017-05-16 18:06 - 2017-03-21 18:24 - 00042368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00164400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00131280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00116072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00102520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll

2017-05-16 18:05 - 2017-03-21 18:24 - 00102512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Oracle

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-05-12 17:50 - 2014-12-19 22:38 - 00000000 ____D C:\Program Files (x86)\Java

2017-05-12 17:49 - 2014-12-19 22:38 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2017-05-12 17:44 - 2014-12-06 02:58 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-05-12 17:44 - 2014-12-06 02:58 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-05-11 18:33 - 2015-08-02 13:38 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages

2017-05-10 19:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache

2017-05-10 07:33 - 2015-08-02 13:38 - 00000000 __RHD C:\Users\Public\AccountPictures

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2017-05-09 22:20 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-05-09 22:14 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2017-05-09 21:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed

2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Origin

2017-05-07 23:16 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Origin

2017-05-07 16:40 - 2014-12-05 01:48 - 00000000 ____D C:\DayZ

2017-05-04 21:02 - 2014-12-05 16:41 - 00000000 ____D C:\Program Files (x86)\Origin

2017-05-03 07:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat

2017-05-02 08:57 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2017-05-02 08:55 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup

2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-05-02 08:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning

2017-05-02 08:54 - 2017-03-20 06:42 - 00000000 ____D C:\WINDOWS\OCR

2017-05-02 08:53 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb

2017-05-02 08:53 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe

2017-05-02 08:53 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe

2017-05-02 08:53 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll

2017-05-02 08:53 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof

2017-05-02 08:53 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys

2017-05-02 08:53 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe

2017-05-02 08:53 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb

2017-05-02 08:53 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe

2017-05-02 08:53 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll

2017-05-02 08:53 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

2017-05-02 08:10 - 2015-08-02 13:40 - 00002434 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-05-02 08:10 - 2015-08-02 13:40 - 00000000 ___RD C:\Users\Dennis\OneDrive

2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2017-05-02 08:09 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate

2017-05-02 08:06 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT

2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2017-05-02 08:05 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration

2017-05-02 08:05 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2017-05-02 08:04 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell

2017-05-02 08:04 - 2015-08-02 13:36 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat

2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media

2017-05-02 08:03 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries

2017-05-02 08:02 - 2017-03-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard

2017-05-02 08:02 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2017-05-02 08:02 - 2017-02-27 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2017-05-02 08:02 - 2017-02-06 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite

2017-05-02 08:02 - 2017-02-05 23:46 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV

2017-05-02 08:02 - 2017-02-05 23:38 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake

2017-05-02 08:02 - 2017-01-09 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software

2017-05-02 08:02 - 2016-12-15 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex-Editor MX

2017-05-02 08:02 - 2016-12-15 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2017-05-02 08:02 - 2016-11-22 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2017-05-02 08:02 - 2016-11-15 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediatek Wireless

2017-05-02 08:02 - 2016-03-06 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2017-05-02 08:02 - 2016-03-05 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Passfoto Manager

2017-05-02 08:02 - 2016-03-05 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PassbildPro

2017-05-02 08:02 - 2016-02-25 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64

2017-05-02 08:02 - 2016-02-07 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery

2017-05-02 08:02 - 2016-01-31 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio

2017-05-02 08:02 - 2016-01-31 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9

2017-05-02 08:02 - 2016-01-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Houhou SRS

2017-05-02 08:02 - 2016-01-05 14:19 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2017-05-02 08:02 - 2015-12-16 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout 4

2017-05-02 08:02 - 2015-12-09 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4

2017-05-02 08:02 - 2015-11-22 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosteRazor

2017-05-02 08:02 - 2015-09-12 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2017-05-02 08:02 - 2015-07-25 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MonInfo

2017-05-02 08:02 - 2015-07-16 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2017-05-02 08:02 - 2015-04-10 19:08 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tyre

2017-05-02 08:02 - 2015-04-10 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tyre

2017-05-02 08:02 - 2015-02-28 18:42 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RMPrepUSB

2017-05-02 08:02 - 2015-02-18 22:52 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TonidoDrive

2017-05-02 08:02 - 2015-02-17 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer

2017-05-02 08:02 - 2015-01-29 19:37 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online

2017-05-02 08:02 - 2015-01-29 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager

2017-05-02 08:02 - 2015-01-16 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2017-05-02 08:02 - 2014-12-31 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN

2017-05-02 08:02 - 2014-12-19 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2017-05-02 08:02 - 2014-12-11 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Middle Earth Shadow of Mordor

2017-05-02 08:02 - 2014-12-11 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Advanced Warfare

2017-05-02 08:02 - 2014-12-11 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Vanishing of Ethan Carter

2017-05-02 08:02 - 2014-12-05 18:11 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen

2017-05-02 08:02 - 2014-12-05 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

2017-05-02 08:02 - 2014-12-05 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2017-05-02 08:02 - 2014-12-05 14:47 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2017-05-02 08:02 - 2014-12-05 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GBT_DL_OBJ

2017-05-02 08:02 - 2014-12-05 02:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps

2017-05-02 08:02 - 2014-12-05 02:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2017-05-02 08:02 - 2014-12-05 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2017-05-02 08:02 - 2014-12-05 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2017-05-02 08:02 - 2014-12-05 00:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2017-05-02 08:02 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\winrm

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\WCN

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\slmgr

2017-05-02 08:00 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\dsc

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\System

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas

2017-05-02 08:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-05-02 08:00 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism

2017-05-02 08:00 - 2016-11-15 15:46 - 00000000 ____D C:\WINDOWS\system32\RaLanguages

2017-05-02 08:00 - 2016-11-14 18:33 - 00000000 ____D C:\WINDOWS\system32\€

2017-05-02 08:00 - 2015-02-23 17:27 - 00000000 ____D C:\WINDOWS\system32\appmgmt

2017-05-02 08:00 - 2015-01-29 20:39 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files\Windows Sidebar

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help

2017-05-02 07:59 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\System

2017-05-02 07:59 - 2017-03-07 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-05-02 07:59 - 2017-01-31 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox

2017-05-02 07:59 - 2017-01-21 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco

2017-05-02 07:59 - 2016-12-16 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2017-05-02 07:59 - 2016-11-16 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte

2017-05-02 07:59 - 2016-11-14 21:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc

2017-05-02 07:59 - 2016-11-14 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raptr

2017-05-02 07:59 - 2016-01-10 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft

2017-05-02 07:59 - 2015-11-03 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB

2017-05-02 07:59 - 2015-08-19 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2017-05-02 07:59 - 2015-08-19 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EpsonNet

2017-05-02 07:59 - 2015-05-27 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\leawo

2017-05-02 07:59 - 2015-05-15 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon

2017-05-02 07:59 - 2015-05-12 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2017-05-02 07:59 - 2015-04-18 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark

2017-05-02 07:59 - 2015-03-12 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble

2017-05-02 07:59 - 2015-03-11 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools

2017-05-02 07:59 - 2014-12-20 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frontier

2017-05-02 07:59 - 2014-12-06 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games

2017-05-02 07:59 - 2014-12-05 00:59 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2017-05-02 07:59 - 2014-12-05 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes

2017-05-02 07:59 - 2014-12-05 00:33 - 00000000 ____D C:\Program Files\Intel

2017-05-02 07:58 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2017-04-30 13:24 - 2017-01-21 15:34 - 00000000 ____D C:\Users\Dennis\Desktop\Bücher

2017-04-29 20:26 - 2014-12-07 00:46 - 00000000 ____D C:\ProgramData\EA Logs

2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb

2017-04-25 01:06 - 2017-03-21 18:24 - 00795616 _____ C:\WINDOWS\system32\atiapfxx.blb

2017-04-25 00:56 - 2017-03-21 18:24 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap

2017-04-25 00:51 - 2017-03-21 18:24 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-02-18 17:59 - 2016-01-21 22:52 - 0000600 _____ () C:\Users\Dennis\AppData\Local\PUTTY.RND

2017-03-10 15:41 - 2017-03-10 15:41 - 0000865 _____ () C:\Users\Dennis\AppData\Local\recently-used.xbel

2016-01-11 19:04 - 2016-01-30 12:29 - 0000040 ___SH () C:\ProgramData\.zreglib

2017-05-02 07:57 - 2017-05-02 07:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-05-19 20:02
 

==================== Ende von FRST.txt ============================

Addition.txt folgt gleich.

Addition.txt:

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-05-2017

durchgefÃ¼hrt von Dennis (25-05-2017 00:55:22)

Gestartet von C:\Users\Dennis\Desktop

Windows 10 Pro Version 1703 (X64) (2017-05-02 06:06:36)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2002795488-2026584554-4065357487-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2002795488-2026584554-4065357487-503 - Limited - Disabled)

Dennis (S-1-5-21-2002795488-2026584554-4065357487-1000 - Administrator - Enabled) => C:\Users\Dennis

Gast (S-1-5-21-2002795488-2026584554-4065357487-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2002795488-2026584554-4065357487-1002 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

@BIOS B14.1003.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)

@BIOS B14.1003.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden

3DMark (HKLM-x32\...\{66847f67-7331-422f-bc6c-d961c453d7df}) (Version: 1.5.884.0 - Futuremark)

3DMark (Version: 1.5.884.0 - Futuremark) Hidden

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

ACP Application (Version: 2015.1223.1036.43 - Advanced Micro Devices, Inc.) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)

Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)

Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)

Akamai NetSession Interface (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)

AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)

Anki (HKLM-x32\...\Anki) (Version:  - )

AnyDVD (HKLM-x32\...\AnyDVD) (Version: 8.0.9.0 - RedFox)

APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.16.0503 - Gigabyte)

APP Center (x32 Version: 1.16.0503 - Gigabyte) Hidden

ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.2.3 - ASUSTek COMPUTER INC.)

ASUS GPU Tweak (x32 Version: 2.5.2.3 - ASUSTek COMPUTER INC.) Hidden

ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)

Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )

Battlefield 3â„¢ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)

Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version:  - Ubisoft)

BioShock (HKLM-x32\...\Steam App 7670) (Version:  - 2K Boston)

BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)

Borderlands 2 (HKLM-x32\...\Borderlands 2_is1) (Version:  - )

Call of Duty Advanced Warfare (HKLM-x32\...\Call of Duty Advanced Warfare_is1) (Version: 1.0 - ENiGMA)

Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization BR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden

Child of Light (HKLM-x32\...\Steam App 256290) (Version:  - Ubisoft MontrÃ©al)

Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.4.00243 - Cisco Systems, Inc.)

Cisco AnyConnect Secure Mobility Client (x32 Version: 4.4.00243 - Cisco Systems, Inc.) Hidden

CloudDrive (HKLM-x32\...\TonidoDrive) (Version:  - )

Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Dead Spaceâ„¢ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)

Deadfall Adventures (HKLM-x32\...\Steam App 231330) (Version:  - The Farm 51)

Democracy 3 (HKLM-x32\...\Steam App 245470) (Version:  - Positech Games)

Destination Sol (HKLM-x32\...\Steam App 342980) (Version:  - Milosh Petrov)

Discord (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)

Divinity: Original Sin Enhanced Edition (HKLM-x32\...\Steam App 373420) (Version:  - Larian Studios)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)

EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.00.0002 - GIGABYTE)

EasyTune (x32 Version: 1.00.0002 - GIGABYTE) Hidden

EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

Elcomsoft Cloud eXplorer (HKLM-x32\...\{D5ED1A08-0171-448C-92ED-D94365EBB226}) (Version: 1.00.8203.2945 - Elcomsoft Co. Ltd.)

Elite Dangerous Launcher version 0.4.4468.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.4468.0 - Frontier Developments)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version:  - SEIKO EPSON Corporation)

EpsonNet SetupManager V2 (HKLM-x32\...\InstallShield_{485863E4-C20E-4629-A3B1-B4C8E706A7CB}) (Version: 2.2.7 - SEIKO EPSON CORPORATION)

EpsonNet SetupManager V2 (x32 Version: 2.2.7 - SEIKO EPSON CORPORATION) Hidden

Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)

EVE Online (HKLM\...\Steam App 8500) (Version:  - CCP)

Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)

Fallout 3 (HKLM-x32\...\Steam App 22300) (Version:  - Bethesda Game Studios)

Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version:  - )

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)

Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.00 - Ubisoft)

Far Cry 4 (HKLM-x32\...\RmFyQ3J5NA==_is1) (Version: 1 - )

FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)

FORCED (HKLM-x32\...\Steam App 249990) (Version:  - BetaDwarf)

Fraps (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.36.208 - Digital Wave Ltd)

FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)

Futuremark SystemInfo (HKLM-x32\...\{79659071-4B68-4EC8-833C-49C97B68FCD0}) (Version: 4.36.512.0 - Futuremark)

Gauntletâ„¢  (HKLM-x32\...\Steam App 258970) (Version:  - Arrowhead Game Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)

Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden

Hack 'n' Slash (HKLM-x32\...\Steam App 246070) (Version:  - Double Fine Productions)

HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - )

Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)

hide.me VPN Version 1.0.5 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.5 - eVenture Limited)

HMA! Pro VPN 3.4.6.1 (HKLM-x32\...\HMA! Pro VPN) (Version: 3.4.6.1 - Privax Ltd)

Houhou SRS version 1.2 (HKLM-x32\...\Houhou SRS_is1) (Version: 1.2 - )

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)

IntelÂ® Chipsatz-GerÃ¤tesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden

Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)

Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)

Kill The Bad Guy (HKLM-x32\...\Steam App 293940) (Version:  - Exkee)

Killing Floor 2 (HKLM-x32\...\Steam App 232090) (Version:  - Tripwire Interactive)

Leawo Blu-ray Player version  1.8.8.0 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.8.8.0 - leawo Software)

LibreOffice 4.4.6.3 (HKLM-x32\...\{1013DB12-EC2E-455E-B5ED-BFD056DC1A99}) (Version: 4.4.6.3 - The Document Foundation)

Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

MakeMKV v1.10.4 (HKLM-x32\...\MakeMKV) (Version: v1.10.4 - GuinpinSoft inc)

Mass Effect (HKLM-x32\...\Steam App 17460) (Version:  - BioWare)

Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version:  - BioWare)

Mass Effectâ„¢ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)

MATLAB R2015b (HKLM\...\Matlab R2015b) (Version: 8.6 - MathWorks)

Mediatek RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.39.173 - MediatekWiFi)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)

Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)

Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.7369.2130 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Middle Earth Shadow of Mordor (HKLM-x32\...\Middle Earth Shadow of Mordor_is1) (Version:  - )

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version:  - EnTech Taiwan)

Mozilla Firefox 53.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 de)) (Version: 53.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)

MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)

Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)

Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (Version: 16.0.7369.2130 - Microsoft Corporation) Hidden

OpenVPN 2.4.2-I601  (HKLM\...\OpenVPN) (Version: 2.4.2-I601 - OpenVPN Technologies, Inc.)

Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software)

Origin (HKLM-x32\...\Origin) (Version: 10.4.9.38188 - Electronic Arts, Inc.)

Papers, Please (HKLM-x32\...\Steam App 239030) (Version:  - 3909)

PassbildPro v2.6a (HKLM-x32\...\PassbildPro_is1) (Version:  - PassbildPro)

Passfoto Manager Ver. 1.3 (HKLM-x32\...\Passfoto Manager_is1) (Version:  - NoSpy Software Lab)

PDF24 Creator 8.0.3 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PhonerLite 2.45 (HKLM-x32\...\PhonerLite_is1) (Version: 2.45 - Heiko Sommerfeldt)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc)

Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)

Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version:  - Crystal Dynamics)

Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version:  - Piranha Bytes)

RMPrepUSB (HKLM-x32\...\RMPrepUSB) (Version:  - )

Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)

Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)

Shadow Warrior (HKLM-x32\...\Steam App 233130) (Version:  - Flying Wild Hog)

Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.00.0000 - GIGABYTE)

SIV (x32 Version: 1.00.0000 - GIGABYTE) Hidden

Skypeâ„¢ 7.34 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.34.103 - Skype Technologies S.A.)

Spintires (HKLM-x32\...\Steam App 263280) (Version:  - OoveeÂ® Game Studios)

STAR WARSâ„¢ Battlefrontâ„¢ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)

Talisman: Digital Edition (HKLM-x32\...\Steam App 247000) (Version:  - Nomad Games Limited)

TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )

TeXstudio 2.10.8 (HKLM-x32\...\TeXstudio_is1) (Version: 2.10.8 - Benito van der Zander)

The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)

The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)

The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)

The Secret of Monkey Island: Special Edition (HKLM-x32\...\Steam App 32360) (Version:  - LucasArts)

The Vanishing of Ethan Carter (HKLM-x32\...\The Vanishing of Ethan Carter_is1) (Version:  - )

The Whispered World Special Edition (HKLM-x32\...\Steam App 268540) (Version:  - Daedalic Entertainment)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)

The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com)

This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)

Tiger Knight: Empire War (HKLM\...\Steam App 534500) (Version:  - NetDragon Websoft Holdings Limited)

TI-Nspireâ„¢ CAS Student Software (HKLM-x32\...\{F03A8756-7FCB-4DCD-9AC1-12C63A6075F1}) (Version: 3.9.0.463 - Texas Instruments Inc.)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

TomTom HOME (HKLM-x32\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Transcendence (HKLM-x32\...\Steam App 364510) (Version:  - Kronosaur Productions)

Tyre (HKLM-x32\...\Tyre_is1) (Version: 6.4.0.6 - 't Schrijverke)

Undertale (HKLM\...\Steam App 391540) (Version:  - tobyfox)

Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)

USB Multi-Channel Audio Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006206}) (Version: 1.00.0008 - C-Media Electronics, Inc.)

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.9.0 - Elaborate Bytes)

Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version:  - RuneStorm)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)

Warhammer Quest (HKLM-x32\...\Steam App 326670) (Version:  - Rodeo Games)

Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)

Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)

Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0C3B8712-2743-48BD-A022-B4200115B15E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {0C536337-0CDC-45E1-903B-1A9C6A6B7933} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)

Task: {107BFE19-7528-40A0-998A-C4A82110F2D9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)

Task: {134D1A35-FDCD-4817-AA02-115C2A62BB1C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)

Task: {18CA43DE-A075-4CCD-AC81-C76668062D58} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {1BC57658-67A8-451B-968D-CA240ECD1E40} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {1E1B9767-CDFA-4232-9FA6-2E6F21AEB071} - System32\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {1E53F75E-BEF8-4CE0-9B4B-C687D9FA797B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {21824C20-E975-4603-8522-320FA332ED39} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {2C29168A-09A2-44D5-909A-7EA2F780AE26} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {2DA9B8FC-0C73-48D6-ABF2-30EC30C76767} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {31BEA046-56E0-4D59-BCFB-2285FF7FB4E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-05-06] (Microsoft Corporation)

Task: {335DF35C-CFE6-418E-BDAE-512DD89C797B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {468CFE7D-C8B9-4E7B-BD5B-4230E0F06F81} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {46B1B2E9-DE3D-4BAF-8CA4-F981DEDD1202} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)

Task: {479EF5A4-C830-451B-9977-FFDD71F48016} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {4E7A87EB-7B7F-4FA2-B476-557EB04F7ABE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe 

Task: {5DD9CEAC-A36F-4398-8B11-0A486120B9E1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {60EDE66C-E6B2-4AD5-81E8-13CC2C8386C8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {65067170-8470-4C93-BAF2-19FFBAEEEF0F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)

Task: {6AFD0255-0ED0-419C-B6D5-95BD71359A74} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {6FC9EBEA-BC08-41AE-B004-58408A7B0D48} - System32\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {7214D99B-28C1-457B-A5A1-BBAC0FF0DBEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {774A0F66-E2F1-47A1-BE12-D3F7B351426B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe 

Task: {7820ED84-DD48-4DCB-BBB5-38FAB0A8AC9F} - System32\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {81425B80-0453-4DC2-8102-375B54E9A7C2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated)

Task: {830B3AE3-0B5D-4574-9DEC-2F05194B49A6} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {85DDD876-F0C4-4BE4-BA13-6D4C5D2C428D} - System32\Tasks\MATLAB R2015b Startup Accelerator => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe [2015-07-30] ()

Task: {86720F65-531C-418B-82D6-009C7F4F901C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {879E17BB-C3CB-4CB9-AC5F-BB792D7F51D0} - System32\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {92E5D5FE-5288-4700-96B1-C4545452CA35} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)

Task: {96515D1F-2F89-4D9F-97FE-3BB632C13368} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-26] ()

Task: {9E4B0ADA-55F2-4B64-9E69-3C59D88ACB98} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {9F5DB38C-8E11-41CD-A313-26F2BC2222BF} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {A01C12CD-1656-4A58-A7AC-FF75834CA7C2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-06] (Microsoft Corporation)

Task: {A0D1B58F-9267-47CC-81C4-9F32E9C7C158} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {A1117A36-8F68-46DE-98D8-592B58FF68D3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe 

Task: {A8E079FC-6829-4396-B1CF-106D7F7F9933} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)

Task: {A93A7AFD-DB3D-4E47-8DAD-5F7678AB77B4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe 

Task: {ABE2B663-9B4B-4ABF-B96F-76888D49E9AC} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {ACD1141C-2870-44BA-9521-4E88A22BAEC9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated)

Task: {B5994E13-3374-40A5-9041-9E83E5446E4F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {B688EEC8-585D-406C-A7B8-A74B608AD0B2} - System32\Tasks\Opera scheduled Autoupdate 1491080137 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software)

Task: {B7BCDC4F-DA02-479A-8A99-581AB05576AE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C059B4FA-0A31-4C63-8A43-D0E37C4D0FBF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C18890E5-6EDB-40D5-A0B6-DA5DE3036E77} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {C7F2E336-27B9-4032-B230-73F0892A712D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {C89711F7-0823-4DB8-BBBF-2CB8CC3174E4} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe 

Task: {D39CB3D4-C0FF-4B49-971E-2D411AC6985C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {D5C6685E-6D00-41E1-9021-965ABA38A6BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-05] (Microsoft Corporation)

Task: {E25C6802-A114-456B-9B90-A7E6BE3A7B53} - System32\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {E5115114-5C02-4114-A7AD-62B5D391EE30} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG

Task: {F3E5F059-038B-4B71-B726-283DB44B9BAB} - System32\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {F40006B3-B99B-43CA-AA9A-04AF9CEE7B14} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe 

Task: {FB79D84D-835E-4A74-BCF1-5EA79615A574} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Invitation {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {086E526A-2170-469E-BCA6-33E120A37FD4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{086E526A-2170-469E-BCA6-33E120A37FD4} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9C19764F-9338-48FD-B114-CB1DA88859EB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9C19764F-9338-48FD-B114-CB1DA88859EB} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON WF-3620 Series Update {9F0E0896-8027-4110-AE14-1994D9793796}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE :/EXE:{9F0E0896-8027-4110-AE14-1994D9793796} /F:Update  WORKGROUP\DENNIS-ZOCK-PC$ ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\MATLAB R2015b Startup Accelerator.job => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe

2015-04-14 16:27 - 2015-04-14 16:27 - 00016896 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe

2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-05-09 18:30 - 2017-05-09 18:31 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 43195904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2017-05-09 18:30 - 2017-05-09 18:31 - 02457088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\skypert.dll

2017-05-11 08:44 - 2017-05-11 08:44 - 00632448 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe

2016-12-09 18:09 - 2016-12-09 18:09 - 00073728 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2017-02-27 18:06 - 2017-02-08 15:02 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-11-14 19:34 - 2017-04-29 20:11 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll

2017-02-28 10:51 - 2017-02-28 10:51 - 01937376 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll

2016-11-14 19:34 - 2017-04-29 20:11 - 00012288 _____ () C:\Program Files (x86)\Origin\libEGL.DLL
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:3or4kl4x13tuuug3Byamue2s4b [87]

AlternateDataStreams: C:\Users\Dennis\Desktop\Bild.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ==========================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2009-07-14 04:34 - 2015-11-24 19:18 - 00001030 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1        rad.msn.com

127.0.0.1         live.rads.msn.com

127.0.0.1        ads1.msn.com

127.0.0.1        static.2mdn.net

127.0.0.1        g.msn.com

127.0.0.1        a.ads2.msads.net

127.0.0.1        b.ads2.msads.net

127.0.0.1        ac3.msn.com
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dennis\Desktop\FMA-B\edward-elric-fullmetal-alchemist-anime-hd-wallpaper-1920x1080-4286.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2002795488-2026584554-4065357487-1000\...\StartupApproved\Run: => "TomTomHOME.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [WMP-Out-UDP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP-x86] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP_1] => (Allow) C:\Program Files\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-TCP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [WMP-Out-UDP-x86_1] => (Allow) C:\Program Files (x86)\Windows Media Player\wmplayer.exe

FirewallRules: [{C8A93475-860E-4055-B33C-C979047DFAC4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{3BC467AD-FA73-4107-BA04-160B87A33C8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [UDP Query User{03006707-C27F-4B41-978D-F822ECD498DE}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe

FirewallRules: [TCP Query User{12636CBA-3FAB-4730-A3EF-84378F54EF02}E:\origin\mass effect 3\binaries\win32\masseffect3.exe] => (Allow) E:\origin\mass effect 3\binaries\win32\masseffect3.exe

FirewallRules: [{B007250D-6005-4EFF-8FDD-6713AC272D67}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{D0366D73-8F91-4BAE-B69A-720DCB7A9F8F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{A0664D65-8878-4BBC-B0B7-A1CB4B99C932}] => (Allow) C:\Program Files\Opera\44.0.2510.859\opera.exe

FirewallRules: [{A5BBA3F1-F245-4E1E-A825-8FBF70A695EA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{A9E0C9B0-BA90-417D-8E3A-26991AE6672C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{4743FCA9-2B12-4964-BEAA-48B8720EDC2D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{A901D95A-50EB-49D5-8B92-191B41724345}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [UDP Query User{BE8874F1-7AC1-4D6E-BBC2-2C3932E1FBD7}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe

FirewallRules: [TCP Query User{8909F6B8-3AA0-4C0B-A279-4D80672A98C8}C:\program files (x86)\phonerlite\phonerlite.exe] => (Allow) C:\program files (x86)\phonerlite\phonerlite.exe

FirewallRules: [{D0978E56-8639-435A-9AA0-03FAC8534521}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{EB6C9921-F9BD-45F5-9EA2-A9809547D731}] => (Allow) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{6B01820A-BC70-47C2-A456-E7BD549AC433}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{631D1288-7375-450D-B0FB-BA7CD10679D0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{BEF76BDA-666C-4E5A-82AF-CD891FF2481E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{F192CA2A-37BC-48BB-89CB-2A791E2F37DB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{14241604-6E67-444C-A418-97FCCEA6C05F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{5EA9902A-85F2-4CE5-90BE-717AFCA4A85F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{E7C68301-1909-4E4C-9F69-4E328E45D668}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{ECC74987-E071-4AED-B521-FD0974F986A8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{A7A4606C-91DB-40B4-A778-FD6835CA1F53}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{6A373D75-E879-443E-B990-6CADC572C38E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{112588CC-ED52-484E-9C71-A30F840E0AEC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [UDP Query User{1F66EFA8-E987-4659-9108-376E633EB84C}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe

FirewallRules: [TCP Query User{97A2EB9A-8D07-4ADD-9593-8D0AF22797C3}E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe

FirewallRules: [{E8ED0263-9E6F-41B1-89B3-2826D83AF0CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe

FirewallRules: [{2F077E75-D03D-42FC-B96D-7AD1C18A0013}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Eve Online\eve.exe

FirewallRules: [{2445D4A7-847D-4C3D-B157-2539618E4511}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe

FirewallRules: [{B244DCF4-721D-4E41-B925-A7747CA22A38}] => (Allow) E:\Games\Rayman\Rayman Origins\Rayman Origins.exe

FirewallRules: [{0211D729-46EC-4F34-BE2B-F8F871ECE4F5}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe

FirewallRules: [{FCC1A3B9-D2DC-4A73-8A62-70D26E8120BB}] => (Allow) E:\Games\Rayman\Rayman Origins\gu.exe

FirewallRules: [{EECA8479-45CF-401E-A0F4-FF821BF63DD2}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe

FirewallRules: [{7F7921F1-5D8A-4A53-98DD-4E038847967D}] => (Allow) E:\Games\The Crew\The Crew (Worldwide)\TheCrew.exe

FirewallRules: [{D5BC8FED-36F4-4BE2-9101-C2EFFA368B74}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{71CD7AEE-6B80-4E59-8794-855128480BEE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{F67CA00F-298D-4BFD-9276-6F4AF8685547}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{7E3FD844-BCFF-4AAA-A7EA-117D75AB246B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{529B95C2-595F-4C4E-BDEA-81037FABB918}] => (Allow) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe

FirewallRules: [{6F5338E3-F316-4763-8901-FBA83DFD6625}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe

FirewallRules: [{1EEA632C-3075-4161-AC28-B6C21732FCEF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe

FirewallRules: [{A4161788-52F5-4257-A64C-28E6B89C7EB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{2B5DA77C-0B39-45FA-8195-C6A432CB931A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1F9B9D8E-2BD3-4391-AEF3-FB3CE3892803}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{5C4DC916-884B-4D7D-8222-3B11DE11FDF9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{A35793A3-C175-400A-95EB-D79E9ED79BE7}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [UDP Query User{E526B719-A956-4B53-B8FB-8033475D2161}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe

FirewallRules: [TCP Query User{84224BF9-F3AE-46B7-93BB-AFFBA57F129F}E:\games\fallout 4\fallout4.exe] => (Allow) E:\games\fallout 4\fallout4.exe

FirewallRules: [{8886650D-C142-4ABD-82A9-8043D801F30A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe

FirewallRules: [{1CAF08E3-CB6D-495B-A10E-0920C08AE867}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe

FirewallRules: [{80887978-7CB1-46A5-8655-802C5B017BBC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe

FirewallRules: [{1543DA99-FFF7-4644-827B-4A7A0C352224}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\x64\Talos_Demo.exe

FirewallRules: [{D2625030-4199-493E-B43D-9D138CFDD46C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe

FirewallRules: [{4876ECCC-2913-4073-8469-4D894C8D40A4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle Public Test\Bin\Talos_Demo.exe

FirewallRules: [{21E0A7E6-A501-4D31-970B-7FBACFB98421}] => (Block) E:\Games\Fallout 4\Fallout4.exe

FirewallRules: [{6B4E6899-FA39-42AC-82B7-3AB6298F2DE0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{6B7D8532-183E-4B41-A560-2426F92DFD59}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{5537E916-E20E-495A-BDA7-CE6BAEB25001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B1752EF4-7B9A-4E4F-A826-465DFECF2EC6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{D426A011-1D55-4A3B-86AF-4DADFECD6CFD}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe

FirewallRules: [TCP Query User{E08FEE99-82C4-4236-9D7E-E9E97D2F2D6B}C:\program files\matlab\r2015b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2015b\bin\win64\matlab.exe

FirewallRules: [{B5E5F6BE-6760-4D4F-B3F8-9DB2ABF51380}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{6E7ED5C4-D93A-45AF-AF96-8D241FA2C809}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{19E8DC9D-9071-4D98-BDB0-4AAD27D832F3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe

FirewallRules: [{52BCACAB-D39C-476C-8375-9B5702AFC777}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe

FirewallRules: [{B5AADAE9-FC7E-4C98-950D-DFC4E3B888B6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe

FirewallRules: [{5C58E99A-065D-4F36-BCB1-580A7524FF35}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe

FirewallRules: [{63A08AF5-6B4C-4055-831E-D5DC5AA9264A}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{A52D0E5E-9B4E-4AB5-8090-910934ACA14B}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{1CD6F05B-FE37-41C0-BADF-F3EB9867A5E5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{563AD2ED-8DE0-4F73-BD85-2C59C9E7503A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{3578656D-9C9B-4E94-884A-6415F5834F17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe

FirewallRules: [{466F57AE-2A30-4946-83F9-2E86F8DF70F1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe

FirewallRules: [UDP Query User{2F7EEFF2-3479-4F03-84DC-28E4501C0DFA}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe

FirewallRules: [TCP Query User{9D52F165-4930-43D3-9CF0-615BE7728FD8}C:\program files (x86)\tvapp\livestream\livestream.exe] => (Allow) C:\program files (x86)\tvapp\livestream\livestream.exe

FirewallRules: [{2B855FCD-0CAC-465A-A7E7-1EB9802D530A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe

FirewallRules: [{217140AD-AE90-4B99-9C6B-262EE560E39C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Transcendence\Transcendence.exe

FirewallRules: [{0D9C14D9-B981-4851-B78B-12BB403944C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe

FirewallRules: [{E36F2E60-B1BE-4EEB-A1CB-74795CE3E56F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Risen 3\system\Risen3.exe

FirewallRules: [{077547A7-8CDA-4F83-9641-0F659EB842A7}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe

FirewallRules: [{34A2137D-C3F2-47A9-9B06-415516F7FFFB}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet SetupManager V2\SManager.exe

FirewallRules: [{AF3F05DB-7B8E-408B-9490-213795316AF8}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{5AE8E97E-FE31-4A9F-8C24-717672F7C067}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{9ABFFF5F-1432-4070-8DA9-8F070B86597D}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{4EB06D8E-7463-4D66-9421-3ABF73C00EEB}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{5788A922-3EDA-4EA9-8F41-359ED4B0D41C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{C1C4070B-1E5E-48BB-A5A9-34683EC17352}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{F63C2199-4F8F-4391-97A2-1C1025BEB546}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{8487BCB2-4ED4-4C4B-BCE3-75AEA5EA3DF0}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{427C1569-11F3-4793-AAF9-50B1DDC06EC7}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{B8011D23-E7F6-484B-AFEE-6B6A2E6B4B05}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{3ACC4CEC-B76D-46FF-A63C-8E6E28A639CF}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{555C9BCD-35DE-428D-B378-A534BC929F0C}] => (Allow) E:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{B8CBEB91-0AC8-4E5B-BA92-6A5C4BD89944}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{48BB8AF9-F8B9-4358-B327-F92A09ED10AA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{537C4630-8994-4D2A-9A5F-66E86D6B7597}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{294FC133-15D0-4D83-9A1F-7A87F088140C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [TCP Query User{8EBA783C-8571-42C1-A309-D79ACFB82416}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [UDP Query User{D37A7B0A-EAB9-40D2-9992-6114902ACD22}E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [{B8F733B2-E4F5-4020-B337-C139C2085ED4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe

FirewallRules: [{C0C4EC0B-D162-45F1-A64F-71556254153E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Alien Isolation\AI.exe

FirewallRules: [TCP Query User{B0777C6D-07A7-440D-BB99-BEA2F09669AB}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe

FirewallRules: [UDP Query User{85136BAA-0985-4142-91F6-A5A1D4D8EAFD}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe

FirewallRules: [TCP Query User{6C3516A0-83BE-4E9F-9190-167D66C6317A}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe

FirewallRules: [UDP Query User{3352E604-EB1E-4B95-B644-8CC9B0081607}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe

FirewallRules: [{08A87F18-30EC-4038-95E0-D9C0A5BFE115}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{993AB1AA-C3F1-4777-AD17-7D3A0762CE8E}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{0FC41D5F-B52D-451C-B493-7783D4FB7599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe

FirewallRules: [{FA3FA25E-8719-4335-97E7-7ACFF2417869}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Deadfall Adventures\Binaries\Win32\ADVGame-Win32-Shipping.exe

FirewallRules: [TCP Query User{490D175F-C7B0-4805-B4AF-D4332F2E1B51}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe

FirewallRules: [UDP Query User{816A79E7-9DF2-4B97-9596-298BF5F8BBBD}E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) E:\program files (x86)\star citizen\starcitizen\citizenclient\bin64\starcitizen.exe

FirewallRules: [TCP Query User{90A20EF9-8733-48B9-BE89-7E67E0DC10A6}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe

FirewallRules: [UDP Query User{526B30C7-7223-49C3-82AC-1BD336CC7D1A}E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe] => (Block) E:\program files (x86)\2k games\borderlands 2\binaries\win32\borderlands2.exe

FirewallRules: [{27C7404F-E442-47C2-95A7-F06546099A4B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe

FirewallRules: [{56E993A7-4416-4887-B4EC-078462FB4ADE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe

FirewallRules: [{DBEAA64E-72E9-4278-B927-89CC548A3D1F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe

FirewallRules: [{B17EC375-AC70-413F-9E23-2F7FA4251FD2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe

FirewallRules: [{23B1BABF-073D-4130-B515-0AFF1EAFD67E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{86413EFC-5C2B-48DF-B947-7BF3D0CEE40A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{720F2924-BDDA-4539-8445-7734D72814D9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{8CF02EB5-A443-48EE-8AD2-7E57AE3C3770}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{2ED659E6-F140-4C67-A180-734C0519B612}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{F5A17CD9-D3A3-41C0-BE68-84107A5B92E9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{F7F91883-D335-484A-B12A-90BF0F2A50AD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe

FirewallRules: [{62B9457A-421E-405B-A059-76FBD50EB1DD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect\Binaries\MassEffect.exe

FirewallRules: [{AFF575EE-B405-4922-8475-62FD93D4F7E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe

FirewallRules: [{C00F93D4-A1C7-4D2C-8365-F9438073BB8C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe

FirewallRules: [{EE44C46C-57E6-4BFA-BADC-18A734D84674}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe

FirewallRules: [{DA9731C4-6676-4019-A653-367AA00883B3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe

FirewallRules: [{44568B77-7D5D-49D7-BB9A-367214673571}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe

FirewallRules: [{C6D816B5-39AE-4ABB-B778-DBB4183E31B9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe

FirewallRules: [{27B07604-918F-42BD-A8F9-072CADE6468B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [{C000E71A-E82D-4AE7-AFB2-557AA469D4E3}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [{39C49974-14D0-4559-A8B1-7EC599A8FF09}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{AD531B64-6D4D-4ED8-9E9D-53F3AE6AC643}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{F796FB4A-83F8-4EBA-A213-D53C40D04FAA}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{19B4F5DC-E7B8-4D3E-A436-95496168E852}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{7CE0F63A-5E13-4123-AD8D-09273025843C}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe

FirewallRules: [{6E6E965F-5F1E-4BCF-9601-F57B3603EEE3}] => (Allow) E:\Origin\Mass Effect 3\Binaries\Win32\MassEffect3.exe

FirewallRules: [TCP Query User{8976121B-EECC-4335-A198-DB21CEBA0541}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe

FirewallRules: [UDP Query User{9FF7851B-20FF-4D5A-9F93-F8C0C4CD108E}C:\dayz\dayz.exe] => (Allow) C:\dayz\dayz.exe

FirewallRules: [{96183AA5-A9A6-4A9F-B250-53514E77C591}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{20684F7F-6221-4A82-ADF8-7CEE0642CB6D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{55F9FF76-96A4-4952-A921-6E3DE4C8707A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe

FirewallRules: [{8FE16784-A716-4E50-BD65-55ACF71D6CE2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe

FirewallRules: [TCP Query User{AAA9FB64-2C4E-4A20-A586-965B42E94574}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe

FirewallRules: [UDP Query User{E1CDC6D8-0240-4ED9-8CAF-D0F66772AF68}E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Block) E:\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe

FirewallRules: [TCP Query User{3AB445F5-9F1B-409E-9EC9-3C5CF0122236}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe

FirewallRules: [UDP Query User{64F06DD8-335C-4C3A-91E9-87F5931DA5DA}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe

FirewallRules: [{8C6DB3DC-1AB2-44B7-BA5A-D3B2A0247599}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{C7A6198E-2533-49A8-BF06-29D7997406FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{2F351A0D-F7D0-4D31-87A9-F685998F24FD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe

FirewallRules: [{B82CBB1E-0624-4938-9B66-5D869B76CABB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout 3\FalloutLauncher.exe

FirewallRules: [{675D4551-A3CE-4486-B702-B7DB8F246C91}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{7CE9C52A-9276-4273-A704-A25B166A0E77}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{7455FDAB-B26F-4931-8DA8-A844B1C84E94}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe

FirewallRules: [{756436C1-D16D-49A4-878E-999A3D2F4ED1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\HacknSlash\Hack.exe

FirewallRules: [{EAEF4FA0-2DEE-41AF-9620-3F2F5B62E841}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe

FirewallRules: [{692F4D46-3792-492D-9631-15895DE196BF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Warhammer Quest\WarhammerQuest.exe

FirewallRules: [{B3352B1E-4D15-4982-87F3-835D78EBC1EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{DD39BA85-D589-49F8-BB4B-6C5F0912F768}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{F7A40669-1C9B-4F9D-BB9D-894C4437E8D5}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe

FirewallRules: [UDP Query User{BFF39BCB-D25E-48FE-AB45-D48C67E3D4C0}E:\teso\launcher\bethesda.net_launcher.exe] => (Allow) E:\teso\launcher\bethesda.net_launcher.exe

FirewallRules: [{A8657DD5-DBCD-4641-820D-9F6BAA00D487}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe

FirewallRules: [{648726DC-649C-4467-A51D-9634A9856039}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe

FirewallRules: [{852ECAE5-94A5-43AE-ADD4-9EC158FD44D2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe

FirewallRules: [{730F4784-59E8-4FDA-8AB9-77E70934F824}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe

FirewallRules: [{E164CA86-DFD0-4634-942F-FA1F5D459EFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe

FirewallRules: [{ACC4C8AC-AF53-44F5-8586-660505430136}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Secret of Monkey Island Special Edition\MISE.exe

FirewallRules: [{F497D5F2-A6DB-4E91-98B7-E93656A4B158}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe

FirewallRules: [{A64DF8AF-E477-41A1-B0F9-A239AB185B48}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe

FirewallRules: [{872B69E4-989B-40CD-8480-C52922391AA1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe

FirewallRules: [{3F162C09-5E17-464C-AE18-9A193D8CFB92}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe

FirewallRules: [{525DBDC3-1A1A-4A27-8775-6DE52FECECFC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{2E60A323-6C96-4CF7-A176-8059625198A0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{614A831E-6F6D-4B99-910F-36B4FA6CC69A}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe

FirewallRules: [{6725B28F-3B8C-434D-9F67-11C6364AB54D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe

FirewallRules: [{9719D41D-BF61-45B7-9025-D576749F2999}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe

FirewallRules: [{F7472A95-D314-4D96-8161-F5EA4CC9BCED}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Whispered World Special Edition\VisionaireConfigurationTool.exe

FirewallRules: [{C00716BB-1F31-4A89-9328-254F5B247ACD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3BF96EDB-9FA0-4C0A-B92C-6B916F9FD695}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{4D5770AF-9437-42F4-9831-D8A400F95D51}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe

FirewallRules: [{6AB8641A-A6F2-4A99-B787-757FF5EB7788}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kill The Bad Guy\KillTheBadGuy.exe

FirewallRules: [{361D4BF1-417E-488B-918A-A8B2F244BB08}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe

FirewallRules: [{8289C635-A454-4FDB-8732-67B5F1921C4F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe

FirewallRules: [{991405F1-338C-416B-B2C5-A95F43E0E979}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe

FirewallRules: [{7C76EEE1-36CB-4E5A-AAE3-3D164027B6EC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP.exe

FirewallRules: [{B0A6CF7B-141E-49B7-AA61-A82E3F42D4CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe

FirewallRules: [{E1A5F566-3518-41FE-86F0-1586A47727C0}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Spintires\SpinTires.exe

FirewallRules: [{6CCE767F-8005-4758-9171-E495D3DBD212}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe

FirewallRules: [{EAE60A23-558E-401E-8C83-9C7CD643DC52}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Destination Sol\sol.exe

FirewallRules: [{9884FD7C-4415-48E6-9432-C3E60352A44D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe

FirewallRules: [{7C9D39DB-23FF-49F9-9CE5-6FEC24468E27}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe

FirewallRules: [TCP Query User{7C4203C9-C082-4238-A4CB-58753C1F0B6C}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe

FirewallRules: [UDP Query User{421DB6E2-33C9-410C-8EFB-05F73D5E4D29}E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\ti-nspire cas student software.exe

FirewallRules: [TCP Query User{4BDA6A17-766D-4232-BAAA-90E3EA3EC6C2}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe

FirewallRules: [UDP Query User{5D092578-F888-4AC4-B9AF-63830CB98B4C}E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe] => (Allow) E:\program files (x86)\ti education\ti-nspire cas student software\jre\bin\java.exe

FirewallRules: [{C081FCD8-647D-4AFD-B876-035D055B1FE6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe

FirewallRules: [{EBB3EDD2-334F-4EA3-B236-427203E15816}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe

FirewallRules: [TCP Query User{47630AA2-8BC0-42F6-86F3-F56CE07AFA33}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{CE06F7D5-EA95-46DB-942A-7AD99186660F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{F275B108-8993-4C50-9619-48DAD287646B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{CF4DDEC5-0D82-4A10-92EA-050458B6737E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [TCP Query User{3DA6C6E9-D4B8-44D1-8E14-1CBBCD1F68FB}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe

FirewallRules: [UDP Query User{F479C94A-0B6A-4966-B864-8268564FE96E}C:\kf2server\binaries\win64\kfserver.exe] => (Allow) C:\kf2server\binaries\win64\kfserver.exe

FirewallRules: [{DF63C77C-B3A0-4225-B421-7F14B5B61D7C}] => (Allow) LPort=7777

FirewallRules: [{560CE11D-6E66-4C7C-9356-F7116B4088E2}] => (Allow) LPort=7777

FirewallRules: [TCP Query User{B55ABF91-9441-4130-A2F6-A9BDE3536C46}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{74D866EC-B243-4998-BD74-9A7F1B75A30D}C:\users\dennis\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dennis\appdata\local\akamai\netsession_win.exe

FirewallRules: [{FF2A0257-E89E-425F-9507-BEF55266965F}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{AFA94905-6E8F-425B-9712-A235169C8F7D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{A8C15B47-34E0-4C46-B707-650201622059}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{E3528CD5-2F55-4A5D-BF1C-B2F9CC0EF6C1}] => (Allow) E:\Vindictus\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{75BECF26-E15F-4F2F-A1AD-2C474D8E1C74}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{74C3B8BD-2F78-4C22-AE59-2F1D5795D794}E:\vindictus\vindictus eu\en-eu\vindictus.exe] => (Allow) E:\vindictus\vindictus eu\en-eu\vindictus.exe

FirewallRules: [{19F97437-F8FB-4C3E-B8FC-4003633622E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{F3F3D22B-E00C-4062-A31B-A36D148C904F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Child of Light\ChildofLight.exe

FirewallRules: [{BCA6E2C9-F713-4B1D-9AE0-4C143E6ED4D8}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe

FirewallRules: [{F717F064-92C9-4B38-BBF3-28A153829494}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\FORCED\FORCED.exe

FirewallRules: [{30A06786-9A12-4960-A262-8722ABA7DC49}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{820C9087-29C6-4C19-BA6C-2FF6D876D41F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{7E9E2F58-7F77-4E0A-A7CF-18A90A978667}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe

FirewallRules: [{4D720489-96F0-4924-A0E0-10434060CAA6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Talisman\Talisman.exe

FirewallRules: [{E4C937AB-5EC5-47EC-BBCF-8907C1E904FC}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [{DD5CFC20-053C-4908-A3D8-990901C72F86}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [{1E021EA6-4F72-4CB1-8710-AD453045770E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{E5DD8B9E-F1C6-4828-97D5-6C70EEAF9430}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{35CC350D-6000-483C-A96A-3C5771B28918}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{A02B5A66-8301-4A05-8FE0-BFE21B5CDE82}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{C6BF81B9-1F2C-47C6-A781-2E69599C78FA}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{4E74000F-2C98-4043-A394-548D7CA050CF}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{DBF843D6-CC0E-457F-A055-2D56277E55E1}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe

FirewallRules: [{FB15088D-AEF2-49D1-8AFF-8C3604794B87}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe

FirewallRules: [{B48CCDD1-D87C-4431-9BA9-063473CBD9B5}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe

FirewallRules: [{319E0304-5853-4BF4-853F-6E2488F0145C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{0E8CF9D4-C8FB-4930-B319-1DAD65671E4E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{5EC2A222-C3DD-4C7E-B2D4-79566E7721B2}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{DB41A4F4-6D0B-48AD-BE11-1531FA505068}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{E1E54F54-C80D-4D17-8957-D0A017B300CE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{F9EB673D-E27E-4936-922B-99BAD67A0714}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe

FirewallRules: [{B591DC37-4523-47B7-B14A-A1E2C675D192}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{82724F50-9003-4FD2-83A0-2FCF497491D5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{C55674D5-1D32-4A83-B5D2-C250AB7D12DE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [{D197808A-C7B7-43A8-AFB9-10C266F467AE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe

FirewallRules: [TCP Query User{13ADBCA4-15CB-4498-8457-41903CADB1E8}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe

FirewallRules: [UDP Query User{B2F3CAE9-D58E-43D2-B3AA-7B053762CE29}E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Block) E:\program files (x86)\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe

FirewallRules: [{8491ACEC-7216-4A16-BD5D-9A4A783B1B20}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{1964DBDA-3427-4EFF-821E-FBE915ED24F4}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{4C3E9107-49B2-4F52-9AB8-E548386FCC45}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{EB65C903-A396-422E-9E7A-531A0CFD5CBB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{BF060809-5FBF-4E9F-BBDA-9E7FD6E3FC06}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe

FirewallRules: [{DDB3404A-557A-44E6-98E8-6D4B56A7D6D9}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe

FirewallRules: [{90833148-6956-44D3-8EE8-0EBA2C733E17}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe

FirewallRules: [{9A1F4C0E-9B7F-4C03-9413-9ADCD4F1AF0C}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{F5402017-714C-4205-8020-586CB774DA11}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{C4557A97-9B4A-4817-8B00-286FE8C2A77E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{960B6CAD-9EA2-48BD-AFB7-9B0EB1949D26}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe

FirewallRules: [{61891A3B-4944-423A-BB8A-09970AC1A7F7}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe
 

==================== Wiederherstellungspunkte =========================
 

09-05-2017 22:11:38 Windows Update

18-05-2017 19:01:56 Windows Update

23-05-2017 21:02:37 Windows Update

24-05-2017 23:49:16 Revo Uninstaller's restore point - Avira Antivirus

24-05-2017 23:50:23 Revo Uninstaller's restore point - Avira Connect

25-05-2017 00:46:01 JRT Pre-Junkware Removal
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/25/2017 12:54:47 AM) (Source: ATIeRecord) (EventID: 16387) (User: )

Description: 
 

Error: (05/25/2017 12:51:23 AM) (Source: ATIeRecord) (EventID: 16387) (User: )

Description: 
 

Error: (05/25/2017 12:47:17 AM) (Source: ATIeRecord) (EventID: 16387) (User: )

Description: 
 

Error: (05/25/2017 12:46:46 AM) (Source: ATIeRecord) (EventID: 16387) (User: )

Description: 
 

Error: (05/25/2017 12:46:13 AM) (Source: ATIeRecord) (EventID: 16387) (User: )

Description: 
 

Error: (05/25/2017 12:43:40 AM) (Source: openvpnserv) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (05/24/2017 11:56:54 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm MSASCui.exe, Version 4.11.15063.0 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 244c
 

Startzeit: 01d2d4d87e11523c
 

Beendigungszeit: 2
 

Anwendungspfad: C:\Program Files\Windows Defender\MSASCui.exe
 

Berichts-ID: 47d97a6e-5947-42b0-acb3-b4f63f52ab6c
 

VollstÃ¤ndiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (05/24/2017 11:51:29 PM) (Source: openvpnserv) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (05/24/2017 11:50:23 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}
 

Error: (05/24/2017 11:49:16 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfÃ¼r ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {e91e312c-6cda-432a-acf4-0bb4de691008}
 
 

Systemfehler:

=============

Error: (05/25/2017 12:46:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhÃ¤ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten GerÃ¤ten verbunden.
 

Error: (05/25/2017 12:43:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 

Die Anforderung wird nicht unterstÃ¼tzt.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "TomTomHOMEService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 120000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "OpenVPN Interactive Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/25/2017 12:43:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "MediatekRegistryWriter64" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2017-05-24 23:37:47.792

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:47.788

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:47.783

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.772

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.771

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.770

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.769

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 23:37:42.768

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 22:08:15.854

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-05-24 22:08:15.854

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Raptr Inc\Raptr\ltc_help64-116716.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz

Prozentuale Nutzung des RAM: 16%

Installierter physikalischer RAM: 16310.5 MB

Verfügbarer physikalischer RAM: 13600.08 MB

Summe virtueller Speicher: 32694.5 MB

Verfügbarer virtueller Speicher: 29776.31 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:237.81 GB) (Free:79.18 GB) NTFS

Drive e: (Games) (Fixed) (Total:2794.39 GB) (Free:2016.08 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================