Hallo,

vor zwei Tagen hatte ich Internetabbrüche. Laut Windows-Diagnose war irgendwas mit der DNS-Server verbindung. Nachdem ich dann gesehen hab das zwei neue Geräte an meinem Router (Speedport W 723V) hängen löschte ich diese aus der Liste und I-net war wieder da. Jedoch verbinden diese MAC-Addressen nach einem Routerneustart automatich. Kannte sowas bisher nur durch WLAN, nachdem ich dann aber ein Kabel gelegt hab, die Festplatte formartiert und von Vista auf Win7 upgegradet hab war lange Zeit ruhe. Doch jetzt geht das wieder los.

danke im Vorraus
Gruß Gora

OTL logfile created on: 26.07.2013 02:00:06 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Patryk\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,69 Gb Available Physical Memory | 67,19% Memory free
8,00 Gb Paging File | 6,44 Gb Available in Paging File | 80,56% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454,04 Gb Total Space | 287,62 Gb Free Space | 63,35% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 423,43 Gb Free Space | 90,91% Space Free | Partition Type: NTFS
 
Computer Name: GRR | User Name: Patryk | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - File not found -- 
PRC - [2013.07.26 01:59:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Patryk\Downloads\OTL.exe
PRC - [2013.06.25 10:45:27 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2013.06.25 10:45:19 | 000,589,368 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
PRC - [2013.06.25 10:45:16 | 000,345,144 | ---- | M] (Avira Operations GmbH & Co. KG) -- c:\program files (x86)\avira\antivir desktop\avgnt.exe
PRC - [2013.06.25 10:45:16 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2013.06.18 16:21:11 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2013.05.11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.06.18 16:21:30 | 003,285,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV:64bit: - [2011.12.02 10:51:58 | 004,913,608 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\Windows\SysNative\hasplms.exe -- (hasplms)
SRV - [2013.07.12 10:02:52 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.06.25 10:45:27 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.06.25 10:45:19 | 000,589,368 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2013.06.25 10:45:16 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2013.06.18 16:21:21 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.05.11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013.02.10 11:34:54 | 000,541,608 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.10.31 23:38:24 | 000,075,136 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.03.06 15:13:37 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2013.02.26 15:56:51 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2013.02.26 15:56:50 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.12.19 07:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.17 09:01:22 | 000,110,592 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rzudd.sys -- (rzudd)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.24 09:58:44 | 000,139,592 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aksfridge.sys -- (aksfridge)
DRV:64bit: - [2011.11.24 09:58:44 | 000,078,208 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aksdf.sys -- (aksdf)
DRV:64bit: - [2011.10.07 09:31:42 | 000,321,536 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hardlock.sys -- (hardlock)
DRV:64bit: - [2011.09.21 11:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2011.09.08 08:23:30 | 000,057,088 | ---- | M] (SafeNet Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\akshhl.sys -- (akshhl)
DRV:64bit: - [2011.08.09 07:11:50 | 000,021,120 | ---- | M] (SafeNet Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\aksusb.sys -- (aksusb)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.09 09:36:00 | 000,053,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\akshasp.sys -- (akshasp)
DRV:64bit: - [2010.11.21 05:24:15 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.03.01 12:43:14 | 000,161,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdm.sys -- (s1039mdm)
DRV:64bit: - [2010.03.01 12:43:14 | 000,137,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039obex.sys -- (s1039obex)
DRV:64bit: - [2010.03.01 12:43:12 | 000,158,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039unic.sys -- (s1039unic)
DRV:64bit: - [2010.03.01 12:43:12 | 000,141,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mgmt.sys -- (s1039mgmt)
DRV:64bit: - [2010.03.01 12:43:12 | 000,034,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039nd5.sys -- (s1039nd5)
DRV:64bit: - [2010.03.01 12:43:10 | 000,019,568 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdfl.sys -- (s1039mdfl)
DRV:64bit: - [2010.03.01 12:43:02 | 000,127,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039bus.sys -- (s1039bus)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:35:20 | 000,278,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1e6032e.sys -- (e1express)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.07.23 07:57:04 | 000,052,992 | ---- | M] (Ideazon Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Alpham164.sys -- (Alpham1)
DRV:64bit: - [2007.03.20 09:51:04 | 000,021,760 | ---- | M] (Ideazon Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Alpham264.sys -- (Alpham2)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2D D1 C3 59 22 96 CC 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.07.09 01:43:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.07.09 01:43:32 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2013.07.10 23:11:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\Extensions
[2013.07.26 00:23:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\udwzstrt.default\extensions
[2013.07.23 00:43:42 | 000,534,063 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\udwzstrt.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2013.07.26 00:23:31 | 000,824,431 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\udwzstrt.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.07.10 23:10:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013.07.10 23:10:58 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPath = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9CF929FC-EF0C-486A-88E8-3ED4522BE7E5}: DhcpNameServer = 192.168.2.1
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{36113eff-0539-11e1-b56b-0019214939df}\Shell - "" = AutoRun
O33 - MountPoints2\{36113eff-0539-11e1-b56b-0019214939df}\Shell\AutoRun\command - "" = K:\Startme.exe
O33 - MountPoints2\{92eef564-0464-11e1-b4c4-0019214939df}\Shell - "" = AutoRun
O33 - MountPoints2\{92eef564-0464-11e1-b4c4-0019214939df}\Shell\AutoRun\command - "" = K:\pushinst.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.07.26 01:45:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.07.13 21:40:49 | 000,000,000 | ---D | C] -- C:\Users\Patryk\Documents\My Games
[2013.07.13 21:39:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grinding Gear Games
[2013.07.13 21:39:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Grinding Gear Games
[2013.07.12 15:41:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013.07.12 13:21:41 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Local\ElevatedDiagnostics
[2013.07.12 11:03:32 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013.07.10 23:13:35 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013.07.10 23:11:07 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Roaming\Mozilla
[2013.07.10 23:11:07 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Local\Mozilla
[2013.07.10 23:10:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013.07.10 23:10:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.07.10 22:46:56 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2013.07.10 22:45:55 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2013.07.10 21:02:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013.07.10 21:01:11 | 000,061,368 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2013.07.10 21:01:11 | 000,053,176 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2013.07.10 17:33:22 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Local\Macromedia
[2013.07.10 17:27:16 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Local\VirtualStore
[2013.07.10 14:17:10 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013.07.09 01:43:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
 
========== Files - Modified Within 30 Days ==========
 
[2013.07.26 01:59:31 | 000,000,000 | ---- | M] () -- C:\Users\Patryk\defogger_reenable
[2013.07.26 01:45:19 | 000,002,070 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.07.26 01:29:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.07.26 00:22:27 | 000,020,272 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.07.26 00:22:27 | 000,020,272 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.07.26 00:19:29 | 001,613,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.07.26 00:19:29 | 000,696,848 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.07.26 00:19:29 | 000,652,166 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.07.26 00:19:29 | 000,148,144 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.07.26 00:19:29 | 000,121,098 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.07.26 00:15:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.07.26 00:14:58 | 3220,623,360 | -HS- | M] () -- C:\hiberfil.sys
[2013.07.13 21:39:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Path of Exile.lnk
[2013.07.13 20:41:28 | 000,000,337 | ---- | M] () -- C:\Users\Patryk\AppData\Local\Perfmon.PerfmonCfg
[2013.07.12 13:43:30 | 000,000,680 | RHS- | M] () -- C:\Users\Patryk\ntuser.pol
[2013.07.10 23:11:00 | 000,001,151 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.07.10 19:37:03 | 774,457,731 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.07.10 13:09:52 | 001,590,370 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.07.10 12:58:55 | 000,291,512 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.07.10 11:26:54 | 000,007,633 | ---- | M] () -- C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg
[2013.07.10 10:07:56 | 000,098,695 | ---- | M] () -- C:\Users\Patryk\Desktop\841 nach Roseller..pdf
 
========== Files Created - No Company Name ==========
 
[2013.07.26 01:59:31 | 000,000,000 | ---- | C] () -- C:\Users\Patryk\defogger_reenable
[2013.07.13 21:39:33 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Path of Exile.lnk
[2013.07.13 20:28:39 | 000,000,337 | ---- | C] () -- C:\Users\Patryk\AppData\Local\Perfmon.PerfmonCfg
[2013.07.10 23:11:00 | 000,001,163 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.07.10 23:11:00 | 000,001,151 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.07.10 22:46:38 | 003,065,455 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2013.07.10 22:44:39 | 000,021,578 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2013.07.10 19:37:03 | 774,457,731 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.07.10 10:07:56 | 000,098,695 | ---- | C] () -- C:\Users\Patryk\Desktop\841 nach Roseller..pdf
[2012.09.26 17:01:42 | 001,590,370 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.12.14 23:52:26 | 000,000,680 | RHS- | C] () -- C:\Users\Patryk\ntuser.pol
[2011.11.26 10:00:38 | 000,007,633 | ---- | C] () -- C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg
[2011.10.31 23:31:13 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.10.31 23:31:07 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.03.06 19:38:19 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Thunderbird
[2011.11.25 18:54:53 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Tific
[2012.11.18 23:34:23 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\TS3Client
[2012.03.04 15:12:27 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\ts3overlay
 
========== Purity Check ==========
 
 

< End of report >
         

OTL Extras logfile created on: 26.07.2013 02:00:06 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Patryk\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,69 Gb Available Physical Memory | 67,19% Memory free
8,00 Gb Paging File | 6,44 Gb Available in Paging File | 80,56% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454,04 Gb Total Space | 287,62 Gb Free Space | 63,35% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 423,43 Gb Free Space | 90,91% Space Free | Partition Type: NTFS
 
Computer Name: GRR | User Name: Patryk | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{09025929-A15C-4A41-8F89-E6852BC7C3DC}" = rport=139 | protocol=6 | dir=out | app=system | 
"{10E1CA07-6C8A-46B1-AD3A-79AD5E82C08E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{2A8EAE75-0506-4E1E-8BF6-AFB54344C9C9}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{35A6C5B4-3FE2-4912-B90F-8774B26FE484}" = lport=445 | protocol=6 | dir=in | app=system | 
"{3FABB283-541F-452C-AB6B-CAA6CF51607C}" = rport=445 | protocol=6 | dir=out | app=system | 
"{5970003C-836B-4883-B3FC-7B9F9A4957ED}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{68D16AE1-7DD9-40B1-BC59-66DD78ACC8BF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{6D362A7A-6DF0-43AB-BBF5-515A17972E81}" = lport=139 | protocol=6 | dir=in | app=system | 
"{7DD536B5-D70D-4CBB-9BB5-4B9FF614BCE8}" = rport=137 | protocol=17 | dir=out | app=system | 
"{B1ADD05F-2976-43B1-94F6-45109DE78AD2}" = rport=138 | protocol=17 | dir=out | app=system | 
"{B732F5DD-10F6-4794-8F30-CB5E5FB46007}" = lport=137 | protocol=17 | dir=in | app=system | 
"{CF70A097-73AC-45D8-AAF3-4785D6ECF489}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D94F4E04-43B0-47A0-B268-71F1D597B0E5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{EFA09936-37EB-42ED-8541-98B023B2CCAD}" = lport=138 | protocol=17 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{017F6E5E-AAE8-492E-9724-8038BE9441B1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | 
"{060F17AD-256F-4176-8D45-23AFF139A580}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\apps\2.0\peg580wh.z8g\c29wbn62.etr\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{0F74C158-D4D5-4A80-9159-C3D9458E5BE1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe | 
"{14377B26-ABF9-4978-B8DD-AAD95A114626}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{198B3100-FBEB-49C8-BF57-1A15B89783F0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
"{25A86FE5-AA62-4A88-96B2-E2371F733A75}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{29D07086-8321-4339-9307-68B8E767AE5F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe | 
"{2D05D2D1-54ED-475F-A457-6B1D21A45B38}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
"{2F380909-2249-4A9C-B93C-58A7230D1D4A}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"{30A23C3C-B6F4-4AE3-9E89-4F8690D9E91E}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe | 
"{31236CA6-AB01-4CD0-AB07-8AEE621F20C4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2000\agent.exe | 
"{31722190-6EBA-4118-828E-9343F1AB22A3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{34FF8778-274B-46B0-8C93-12B598D9D002}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{36CE59FE-25BD-4B7E-9FC3-1802E79EF4E3}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii public test\diablo iii.exe | 
"{3A5C4F52-27BF-4A4D-AEEA-7893039EDFF1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{41019FB9-D101-4FE9-9074-125B94A84FC1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{42DCC16F-746E-4ACF-BD85-B276C825C2C0}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe | 
"{438EACBF-C041-4A0F-A364-C97EE5F25CB8}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2000\agent.exe | 
"{471B7030-0E6B-40FB-B97B-C5B8487FA820}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe | 
"{4A1B68E8-8C4B-480D-A421-0E12C85D6B44}" = protocol=6 | dir=in | app=c:\program files (x86)\rift game\riftpatchlive.exe | 
"{51BB5B4B-AD93-459A-B568-3E2CFA5D1EED}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe | 
"{54C25172-9CE4-41F4-AF05-CA6074348673}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | 
"{5712CD18-3D15-47F1-A8AE-FE2A6A38CDDC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | 
"{5754347E-1BD6-433C-AD3F-7912BADCDBB4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops\blackops.exe | 
"{579C4CF6-2E37-4D23-8270-EAD0192A7A61}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{589FF7E4-15CF-46A9-A8EF-4D96DEF902F3}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{5CA057C4-A8D6-48AF-9CB3-993027081645}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{5E334862-0BF1-431C-97A6-A204C3442A63}" = protocol=6 | dir=in | app=c:\program files (x86)\rift game\rift.exe | 
"{63F740BF-BC90-412A-AC57-A4DD85608EFC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe | 
"{64072754-D146-4C68-8274-18E522E684C7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe | 
"{649F75C7-720D-42A6-9565-A3C15AB0D29A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{6D817D50-9803-4516-AFF4-DBFE067E2928}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{6E61A04E-063D-40CD-8F26-CC06ADB0B3BE}" = protocol=17 | dir=in | app=c:\program files (x86)\rift game\rift.exe | 
"{76103FEC-B651-43E1-A97F-C4F0D01CE497}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | 
"{7EE40E50-F5F4-4FD3-BFFA-CEA05BA2787C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | 
"{80E77E7B-DEA1-440E-9B6E-41B6C0B955FA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | 
"{82526C7B-9349-45AB-8CEC-E5086CD0F258}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{8C198097-C3C4-4793-BE72-8D6905D77B5B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{8D7CBEE9-3F64-4450-8038-2F5FC208CBFD}" = protocol=17 | dir=in | app=c:\program files (x86)\rift game\riftpatchlive.exe | 
"{92322537-8B17-45E4-8C32-0679E1A66545}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6zm.exe | 
"{925CEC03-B6D5-4F9F-A8F3-0573E72668EC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{9940E086-CF36-49B6-A2B5-076FB2E9090B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{9AB8704E-5A05-4D0B-BD97-F877E46F145F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6zm.exe | 
"{9BEF1993-2050-4A34-BBEE-5EF8FF815A4F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{A0A22DA7-A31A-4AE2-92C2-B8F769231211}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii public test\diablo iii.exe | 
"{A5203F8C-FBEA-4B5D-8702-3BAB3A34D9A4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | 
"{AAAB54B2-E518-4630-8419-785ACDBA9C95}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | 
"{ABB861DC-6E3A-4DFA-8BEE-56A65C0F43D8}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{ACBFB9C9-197B-4AD4-A047-3CAE6059FC56}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{AFBB2C2B-7844-48A4-A9BA-50B51440AD78}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{B37B679A-0730-4035-B07B-BFC187757BDA}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{B4C51A1D-751D-4E97-8B60-9247C2E73830}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2000\agent.exe | 
"{B6F5F4BB-1C62-4973-87D7-BDBE4B9D35C0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe | 
"{BB1FB2E3-83BA-45F5-9ACF-E20D696EBF0A}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe | 
"{BD85A19F-69D2-4DFC-8E1D-105C9C9CE332}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{BDE27FCB-8103-4962-911C-36D40F9167EA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{C1D30896-8E91-47BB-B2CC-D38116CA807D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{C77C2739-48F3-4EDA-B7EB-2B59FD5343BC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | 
"{C8E2264F-1AC5-491E-8760-59164F45C09F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | 
"{CB9561D6-31CD-4571-BBE9-EDAEE53D0026}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe | 
"{D261EBB8-9D5F-4762-BB7C-63DF74C1C138}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | 
"{D70C0DC0-DB0A-4466-B7F3-B09E84A8E384}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops\blackopsmp.exe | 
"{DFD9BF5F-06CC-4B7E-99B3-744210C52D9E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | 
"{E0B6D7BC-8FA7-4510-9565-56714AD09842}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops\blackops.exe | 
"{E4A4E69B-7D99-49B9-B70B-C9735DD5BEC9}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"{EBE2ABC4-1F77-4623-A980-AB4E7A2A4FB9}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{ECCF7628-B7A9-4DA1-A135-6FFC4BC4A440}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe | 
"{F0DB42C0-00E0-4E98-9D8C-4228BEB7AB08}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe | 
"{F10BCEEC-A0DF-4022-ACAA-FED90BF56BC6}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\apps\2.0\peg580wh.z8g\c29wbn62.etr\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{F3E758C9-0863-45B4-8EC4-A950A9033135}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty black ops\blackopsmp.exe | 
"{F45E84F5-4D3A-4023-8DA4-BE0225BA6D0C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2000\agent.exe | 
"{F7A3CCDA-3DFF-44C0-B535-553FE25912A2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe | 
"TCP Query User{0AA59196-2271-42A1-8F4D-FC15B7E8A056}C:\program files (x86)\diablo iii\diablo iii.exe" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"TCP Query User{1B16CB20-E4AD-4B47-993E-5BCB3C3D6C86}C:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\arma2oaserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\arma2oaserver.exe | 
"TCP Query User{29B4309A-49A6-49EF-9E18-F220FC07CE2D}C:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\expansion\beta\arma2oa.exe | 
"TCP Query User{4EA9B14E-2BF1-4081-884E-5237AA37FA6E}C:\program files\bohemia interactive\arma 2\expansion\beta\arma2oa.exe" = protocol=6 | dir=in | app=c:\program files\bohemia interactive\arma 2\expansion\beta\arma2oa.exe | 
"TCP Query User{57A40E9C-D0DA-4725-8F34-358DB4FF60CA}C:\users\patryk\appdata\local\temp\gw2.exe" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\gw2.exe | 
"TCP Query User{60C62018-8A18-4863-B208-0B94ADA4AB66}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe | 
"TCP Query User{83EA6E52-A06D-48F3-B096-1A4A8CDE742D}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"TCP Query User{976AA0E5-7A5A-4813-A9FA-2CDB4D428A2D}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"TCP Query User{AD1E52EA-277A-4438-8560-E49FBB845DEB}C:\program files (x86)\tera\tera-launcher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tera\tera-launcher.exe | 
"TCP Query User{EC8CFB2A-4D0E-4889-AF1F-BCE1F628C6F7}C:\program files (x86)\six projects\six updater\tools\bin\rsync.exe" = protocol=6 | dir=in | app=c:\program files (x86)\six projects\six updater\tools\bin\rsync.exe | 
"UDP Query User{333E9F34-F20F-4996-94F8-9271FB03ED0E}C:\users\patryk\appdata\local\temp\gw2.exe" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\gw2.exe | 
"UDP Query User{35DBB27B-09A1-4162-BC6B-6ECCFB6397C2}C:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\arma2oaserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\arma2oaserver.exe | 
"UDP Query User{62A9D691-F3B0-46E6-AF83-B5AB0561F437}C:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bohemia interactive\arma 2 operation arrowhead\expansion\beta\arma2oa.exe | 
"UDP Query User{6A04A612-8A67-432B-A3DF-9D0F6F976815}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"UDP Query User{9200ABEE-DC1E-49DB-83F7-B532FDF12FF2}C:\program files (x86)\diablo iii\diablo iii.exe" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"UDP Query User{AADC2532-ABDE-46D0-B21E-E630046CCCEC}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"UDP Query User{BDCB74B7-F0AE-4ABC-AB4D-0A48FF4FF78C}C:\program files\bohemia interactive\arma 2\expansion\beta\arma2oa.exe" = protocol=17 | dir=in | app=c:\program files\bohemia interactive\arma 2\expansion\beta\arma2oa.exe | 
"UDP Query User{CBE0C148-07F4-4C72-939D-0467133795C8}C:\program files (x86)\tera\tera-launcher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tera\tera-launcher.exe | 
"UDP Query User{EF0EB08E-8796-46BB-8035-437A3EDFB1D4}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe | 
"UDP Query User{F703D63E-F89C-40DA-91D0-D4D6A59894E2}C:\program files (x86)\six projects\six updater\tools\bin\rsync.exe" = protocol=17 | dir=in | app=c:\program files (x86)\six projects\six updater\tools\bin\rsync.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.23.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.20 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}" = Razer Synapse 2.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{90A4562F-D4A1-4B65-906D-41F236CF6902}" = Path of Exile
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Deutsch
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"Diablo III" = Diablo III
"Diablo III Public Test" = Diablo III Public Test
"Guild Wars 2" = Guild Wars 2
"Mozilla Firefox 22.0 (x86 de)" = Mozilla Firefox 22.0 (x86 de)
"Mozilla Thunderbird 17.0.4 (x86 de)" = Mozilla Thunderbird 17.0.4 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Steam App 202970" = Call of Duty: Black Ops II
"Steam App 202990" = Call of Duty: Black Ops II - Multiplayer
"Steam App 212910" = Call of Duty: Black Ops II - Zombies
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 42700" = Call of Duty: Black Ops
"Steam App 42710" = Call of Duty: Black Ops - Multiplayer
"Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 23.07.2013 20:31:40 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.07.2013 20:35:54 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.07.2013 21:11:51 | Computer Name = grr | Source = Application Hang | ID = 1002
Description = Programm Diablo III.exe, Version 1.0.8.16603 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 7a4    Startzeit: 01ce880a9c0098b5    Endzeit: 0    Anwendungspfad: C:\Program
 Files (x86)\Diablo III\Diablo III.exe    Berichts-ID: 02e6cdbe-f3fe-11e2-95cf-0019214939df

 
Error - 23.07.2013 21:31:19 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.07.2013 21:41:24 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.07.2013 21:49:54 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.07.2013 02:47:17 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.07.2013 18:19:55 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 25.07.2013 05:02:33 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
Error - 25.07.2013 18:16:47 | Computer Name = grr | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 25.07.2013 06:20:24 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy3" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:24 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy3" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:35 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:35 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:35 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:35 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:47 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:47 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:47 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.
 
Error - 25.07.2013 06:20:47 | Computer Name = grr | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.
 
 
< End of report >
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-07-26 02:48:03
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST3500630AS rev.3.AAD 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Patryk\AppData\Local\Temp\pxldqpow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 560                 fffff80002deb000 45 bytes [00, 00, 1E, 02, 4D, 6D, 43, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 607                 fffff80002deb02f 16 bytes [00, 05, 00, 00, 00, 00, 00, ...]

---- Threads - GMER 2.1 ----

Thread     [1820:3288]                                                                       00000000776c3e45
Thread     [1820:1904]                                                                       0000000076a17587
Thread     [1820:3436]                                                                       0000000072f1c59c
Thread     [1820:3220]                                                                       0000000072f1c59c
Thread     [1820:640]                                                                        0000000072f1c59c
Thread     [1820:3396]                                                                       00000000776c2e25
Thread     [1820:3992]                                                                       0000000072f1c41c
Thread     [1820:216]                                                                        0000000072d5e2db
Thread     [1820:2920]                                                                       0000000072f1c59c
Thread     [1820:2376]                                                                       0000000072f1c41c
Thread     [1820:3720]                                                                       0000000072f1c41c
Thread     [1820:2664]                                                                       0000000072f1c41c
Thread     [1820:600]                                                                        0000000072f1c41c
Thread     [1820:3108]                                                                       0000000072f1c41c
Thread     [1820:636]                                                                        0000000072f1c41c
Thread     [1820:2472]                                                                       0000000072f1c41c
Thread     [1820:692]                                                                        0000000072f1c41c
Thread     [1820:3372]                                                                       0000000072f1c41c
Thread     [1820:3952]                                                                       0000000072f1c41c
Thread     [1820:2428]                                                                       0000000072f1c41c
Thread     [1820:3592]                                                                       0000000072f1c41c
Thread     [1820:896]                                                                        0000000072f1c41c
Thread     [1820:3784]                                                                       0000000072f1c41c
Thread     [1820:3976]                                                                       0000000072f1c41c
Thread     [1820:3300]                                                                       0000000072f1c41c
Thread     [1820:3172]                                                                       0000000072f1c41c
Thread     [1820:3368]                                                                       0000000072f1c59c
Thread     [1820:3196]                                                                       00000000726f8e20
Thread     [1820:2444]                                                                       00000000726f8e20
Thread     [1820:2604]                                                                       00000000726f8e20
Thread     [1820:1656]                                                                       00000000726f4e00
Thread     [1820:2228]                                                                       0000000072f1c59c
Thread     [1820:2140]                                                                       0000000072f1c59c
Thread     [1820:2884]                                                                       0000000072f1c59c

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations  ?????????????????????????????,????????m???????X??????d???d??Composite.Dev????????????????????????????n???-???????.??????????????????????{4d36e96f-e325-11ce-bfc1-08002be10318}\0002?30???????????????w???????????????????????????????????z???????z????X?????????????USBSTOR\Disk?USBSTOR\RAW????{36fc9e60-c465-11cf-8056-444553540000}?6????Port_#0002.Hub_#0006?D???????&???&???&??3???{533c5b84-ec70-11d2-9505-00c04f79deaf}\0005??????k?k?n?n?n?n?k?n?????n?n?n??????????????????6.1.7600.16385???????????????????????????????????e?? 8???????????????????????????????d???????????????????????????l?????e.d??????????????????????????????????usb\composite????????????????????????????t?????s?????????????????????????????????????????????????&?????????????????????????d????WpdMtpDriver????????????? ??%S?????????????????l?????????????????0??????????????el???????????s??????????????????????generic_hid_device?TOR?????g????????nf??Microsoft???????????{65A9A6CF-64CD-480b-843E-32C86E1BA19F}??????@volsnap.inf,%msft%;Microsoft????????????/?????????

---- EOF - GMER 2.1 ----
         

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Moin Schrauber,


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-07-2013
Ran by Patryk (administrator) on 26-07-2013 08:48:33
Running from C:\Users\Patryk\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(SafeNet Inc.) C:\Windows\system32\hasplms.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {36113eff-0539-11e1-b56b-0019214939df} - K:\Startme.exe
MountPoints2: {92eef564-0464-11e1-b4c4-0019214939df} - K:\pushinst.exe
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-25] (Avira Operations GmbH & Co. KG)
HKU\Admin\...\Policies\system: [LogonHoursAction] 2
HKU\Admin\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\Sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)
HKU\Resi\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)
HKU\Resi\...\Policies\system: [LogonHoursAction] 2
HKU\Resi\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\udwzstrt.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\udwzstrt.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\udwzstrt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 hasplms; C:\Windows\system32\hasplms.exe [4913608 2011-12-02] (SafeNet Inc.)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S4 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2011-10-31] ()
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x]

==================== Drivers (Whitelisted) ====================

S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [57088 2011-09-08] (SafeNet Inc.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
R3 Alpham1; C:\Windows\System32\DRIVERS\Alpham164.sys [52992 2007-07-23] (Ideazon Corporation)
R3 Alpham2; C:\Windows\System32\DRIVERS\Alpham264.sys [21760 2007-03-20] (Ideazon Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] (SafeNet Inc.)
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-01] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-01] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-01] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-01] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-01] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-01] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-01] (MCCI Corporation)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-26 08:47 - 2013-07-26 08:47 - 00000000 ____D C:\FRST
2013-07-26 08:46 - 2013-07-26 08:46 - 01779853 _____ (Farbar) C:\Users\Patryk\Downloads\FRST64.exe
2013-07-26 06:26 - 2013-07-26 06:27 - 00471144 _____ C:\Windows\Minidump\072613-21886-01.dmp
2013-07-26 04:51 - 2013-07-26 06:15 - 00000000 ____D C:\ProgramData\Netzmanager
2013-07-26 04:51 - 2013-07-26 04:51 - 00001003 _____ C:\Users\Public\Desktop\Netzmanager.lnk
2013-07-26 04:51 - 2013-07-26 04:51 - 00000000 ____D C:\Program Files\Netzmanager
2013-07-26 04:50 - 2013-07-26 04:51 - 00000000 __HDC C:\ProgramData\{87B61FE8-334F-4066-B7AA-68DC81782D4D}
2013-07-26 04:50 - 2013-07-26 04:50 - 10980240 _____ (Deutsche Telekom AG, Marmiko IT-Solutions GmbH                                                                                                                                                                                                                                                              ) C:\Users\Patryk\Downloads\netzmanager_setup(1).exe
2013-07-26 04:50 - 2013-07-26 04:50 - 00000000 ____D C:\Users\Patryk\AppData\Local\PackageAware
2013-07-26 02:48 - 2013-07-26 02:48 - 00005627 _____ C:\Users\Patryk\Desktop\Gmer.log
2013-07-26 02:06 - 2013-07-26 02:06 - 00061672 _____ C:\Users\Patryk\Downloads\Extras.Txt
2013-07-26 02:06 - 2013-07-26 02:06 - 00059764 _____ C:\Users\Patryk\Downloads\OTL.Txt
2013-07-26 02:02 - 2013-07-26 02:02 - 00377856 _____ C:\Users\Patryk\Downloads\gmer_2.1.19163.exe
2013-07-26 01:59 - 2013-07-26 01:59 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Downloads\OTL.exe
2013-07-26 01:59 - 2013-07-26 01:59 - 00000474 _____ C:\Users\Patryk\Downloads\defogger_disable.log
2013-07-26 01:59 - 2013-07-26 01:59 - 00000000 _____ C:\Users\Patryk\defogger_reenable
2013-07-26 01:58 - 2013-07-26 01:58 - 00050477 _____ C:\Users\Patryk\Downloads\Defogger.exe
2013-07-13 21:40 - 2013-07-13 21:40 - 00000000 ____D C:\Users\Patryk\Documents\My Games
2013-07-13 21:39 - 2013-07-13 21:39 - 00002106 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 ____D C:\Program Files (x86)\Grinding Gear Games
2013-07-13 21:38 - 2013-07-13 21:38 - 07127040 _____ C:\Users\Patryk\Downloads\PathOfExileInstaller.msi
2013-07-13 20:28 - 2013-07-13 20:41 - 00000337 _____ C:\Users\Patryk\AppData\Local\Perfmon.PerfmonCfg
2013-07-10 23:13 - 2013-07-10 23:16 - 00000000 ____D C:\Windows\system32\MRT
2013-07-10 23:11 - 2013-07-10 23:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-10 23:11 - 2013-07-10 23:11 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Mozilla
2013-07-10 23:11 - 2013-07-10 23:11 - 00000000 ____D C:\Users\Patryk\AppData\Local\Mozilla
2013-07-10 23:10 - 2013-07-10 23:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-10 23:09 - 2013-07-10 23:09 - 00003034 _____ C:\Windows\System32\Tasks\{3EFC839A-4877-4DF4-83AB-CDEE9C6B07EE}
2013-07-10 22:46 - 2013-07-12 15:55 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-10 22:46 - 2013-03-15 06:16 - 06398240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-07-10 22:46 - 2013-03-15 06:16 - 03477280 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-07-10 22:46 - 2013-03-15 06:16 - 02555680 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-07-10 22:46 - 2013-03-15 06:16 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-07-10 22:46 - 2013-03-15 06:16 - 00237856 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-07-10 22:46 - 2013-03-15 06:16 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-07-10 22:46 - 2013-03-13 18:24 - 03065455 _____ C:\Windows\system32\nvcoproc.bin
2013-07-10 22:45 - 2013-07-10 22:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-07-10 22:44 - 2013-06-21 14:06 - 15920536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-07-10 22:44 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-07-10 22:44 - 2013-06-21 14:06 - 02936208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-07-10 22:44 - 2013-06-21 14:06 - 01059560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-07-10 22:44 - 2013-06-21 14:06 - 00021578 _____ C:\Windows\system32\nvinfo.pb
2013-07-10 22:44 - 2013-03-15 07:53 - 01807136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6431422.dll
2013-07-10 22:44 - 2013-03-15 07:53 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6431422.dll
2013-07-10 22:44 - 2012-12-19 07:42 - 00031672 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-07-10 22:44 - 2012-12-19 07:41 - 00194488 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-07-10 22:44 - 2012-12-18 10:31 - 01510328 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2013-07-10 22:33 - 2013-07-10 22:33 - 21703480 _____ (Mozilla) C:\Users\Patryk\Downloads\Firefox_Setup_22.0.exe
2013-07-10 21:02 - 2013-07-10 21:02 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-10 21:01 - 2012-12-29 12:34 - 00061368 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-07-10 21:01 - 2012-12-29 12:34 - 00053176 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 12427240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-07-10 19:57 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 02597856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00925648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00432928 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00372000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00266448 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00218592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00214448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-07-10 19:57 - 2013-06-21 14:06 - 00181488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-07-10 19:44 - 2013-07-10 19:47 - 229594432 _____ (NVIDIA Corporation) C:\Users\Patryk\Downloads\320.49-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-07-10 19:37 - 2013-07-26 06:26 - 499939715 _____ C:\Windows\MEMORY.DMP
2013-07-10 19:37 - 2013-07-10 19:37 - 00291048 _____ C:\Windows\Minidump\071013-21559-01.dmp
2013-07-10 17:33 - 2013-07-10 17:33 - 00000000 ____D C:\Users\Patryk\AppData\Local\Macromedia
2013-07-10 17:27 - 2013-07-10 17:27 - 00000000 ____D C:\Users\Patryk\AppData\Local\VirtualStore
2013-07-10 14:17 - 2013-07-12 11:35 - 00000000 ____D C:\Windows\ERUNT
2013-07-10 12:51 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-10 12:51 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-10 12:51 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-10 12:51 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 12:51 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-10 12:51 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-10 12:51 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-10 12:51 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-10 12:51 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-10 12:51 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 12:50 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 12:50 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-10 12:50 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 12:50 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 12:50 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-10 12:50 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 12:50 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-10 12:50 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-10 12:50 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-10 12:45 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 12:45 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 12:45 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 12:45 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 12:45 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 12:45 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 12:45 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 01:43 - 2013-07-09 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

2013-07-26 08:47 - 2013-07-26 08:47 - 00000000 ____D C:\FRST
2013-07-26 08:46 - 2013-07-26 08:46 - 01779853 _____ (Farbar) C:\Users\Patryk\Downloads\FRST64.exe
2013-07-26 08:29 - 2012-04-06 01:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-26 07:24 - 2009-07-14 06:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-26 07:24 - 2009-07-14 06:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-26 06:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-26 06:31 - 2011-04-12 09:43 - 00696848 _____ C:\Windows\system32\perfh007.dat
2013-07-26 06:31 - 2011-04-12 09:43 - 00148144 _____ C:\Windows\system32\perfc007.dat
2013-07-26 06:31 - 2009-07-14 07:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-26 06:27 - 2013-07-26 06:26 - 00471144 _____ C:\Windows\Minidump\072613-21886-01.dmp
2013-07-26 06:27 - 2011-10-29 11:43 - 00000000 ____D C:\Users\Patryk
2013-07-26 06:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-26 06:26 - 2013-07-10 19:37 - 499939715 _____ C:\Windows\MEMORY.DMP
2013-07-26 06:26 - 2011-12-14 20:57 - 00000000 ____D C:\Windows\Minidump
2013-07-26 06:26 - 2010-11-21 05:47 - 00644248 _____ C:\Windows\PFRO.log
2013-07-26 06:26 - 2009-07-14 06:51 - 00092909 _____ C:\Windows\setupact.log
2013-07-26 06:15 - 2013-07-26 04:51 - 00000000 ____D C:\ProgramData\Netzmanager
2013-07-26 06:15 - 2011-10-29 11:38 - 01417229 _____ C:\Windows\WindowsUpdate.log
2013-07-26 04:52 - 2011-10-29 11:43 - 00000000 ___RD C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-26 04:51 - 2013-07-26 04:51 - 00001003 _____ C:\Users\Public\Desktop\Netzmanager.lnk
2013-07-26 04:51 - 2013-07-26 04:51 - 00000000 ____D C:\Program Files\Netzmanager
2013-07-26 04:51 - 2013-07-26 04:50 - 00000000 __HDC C:\ProgramData\{87B61FE8-334F-4066-B7AA-68DC81782D4D}
2013-07-26 04:50 - 2013-07-26 04:50 - 10980240 _____ (Deutsche Telekom AG, Marmiko IT-Solutions GmbH                                                                                                                                                                                                                                                              ) C:\Users\Patryk\Downloads\netzmanager_setup(1).exe
2013-07-26 04:50 - 2013-07-26 04:50 - 00000000 ____D C:\Users\Patryk\AppData\Local\PackageAware
2013-07-26 02:48 - 2013-07-26 02:48 - 00005627 _____ C:\Users\Patryk\Desktop\Gmer.log
2013-07-26 02:06 - 2013-07-26 02:06 - 00061672 _____ C:\Users\Patryk\Downloads\Extras.Txt
2013-07-26 02:06 - 2013-07-26 02:06 - 00059764 _____ C:\Users\Patryk\Downloads\OTL.Txt
2013-07-26 02:02 - 2013-07-26 02:02 - 00377856 _____ C:\Users\Patryk\Downloads\gmer_2.1.19163.exe
2013-07-26 01:59 - 2013-07-26 01:59 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Downloads\OTL.exe
2013-07-26 01:59 - 2013-07-26 01:59 - 00000474 _____ C:\Users\Patryk\Downloads\defogger_disable.log
2013-07-26 01:59 - 2013-07-26 01:59 - 00000000 _____ C:\Users\Patryk\defogger_reenable
2013-07-26 01:58 - 2013-07-26 01:58 - 00050477 _____ C:\Users\Patryk\Downloads\Defogger.exe
2013-07-26 01:45 - 2013-04-02 12:37 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-26 01:45 - 2013-04-02 12:36 - 00000000 ____D C:\ProgramData\Avira
2013-07-20 09:58 - 2011-11-02 19:11 - 00000000 ____D C:\Users\Patryk\AppData\Local\CrashDumps
2013-07-13 21:40 - 2013-07-13 21:40 - 00000000 ____D C:\Users\Patryk\Documents\My Games
2013-07-13 21:39 - 2013-07-13 21:39 - 00002106 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 ____D C:\Program Files (x86)\Grinding Gear Games
2013-07-13 21:38 - 2013-07-13 21:38 - 07127040 _____ C:\Users\Patryk\Downloads\PathOfExileInstaller.msi
2013-07-13 20:41 - 2013-07-13 20:28 - 00000337 _____ C:\Users\Patryk\AppData\Local\Perfmon.PerfmonCfg
2013-07-12 15:55 - 2013-07-10 22:46 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-12 15:41 - 2011-10-30 16:52 - 00000000 ____D C:\NVIDIA
2013-07-12 13:43 - 2011-12-14 23:52 - 00000680 __RSH C:\Users\Patryk\ntuser.pol
2013-07-12 11:35 - 2013-07-10 14:17 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 10:57 - 2012-02-26 09:36 - 00000000 ____D C:\Users\Admin
2013-07-12 10:03 - 2011-10-29 21:18 - 00000000 ____D C:\Users\Patryk\AppData\Local\Adobe
2013-07-12 10:02 - 2012-04-06 01:13 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-12 10:02 - 2012-04-06 01:13 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-12 10:02 - 2011-10-29 14:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-10 23:16 - 2013-07-10 23:13 - 00000000 ____D C:\Windows\system32\MRT
2013-07-10 23:11 - 2013-07-10 23:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-10 23:11 - 2013-07-10 23:11 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Mozilla
2013-07-10 23:11 - 2013-07-10 23:11 - 00000000 ____D C:\Users\Patryk\AppData\Local\Mozilla
2013-07-10 23:11 - 2013-07-10 23:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-10 23:09 - 2013-07-10 23:09 - 00003034 _____ C:\Windows\System32\Tasks\{3EFC839A-4877-4DF4-83AB-CDEE9C6B07EE}
2013-07-10 23:01 - 2011-12-10 20:28 - 00000000 ____D C:\Users\Patryk\Downloads\Treiber Fujitsu-Siemens
2013-07-10 22:46 - 2011-10-29 13:23 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-07-10 22:45 - 2013-07-10 22:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-07-10 22:45 - 2011-10-29 13:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-07-10 22:33 - 2013-07-10 22:33 - 21703480 _____ (Mozilla) C:\Users\Patryk\Downloads\Firefox_Setup_22.0.exe
2013-07-10 21:02 - 2013-07-10 21:02 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-10 19:47 - 2013-07-10 19:44 - 229594432 _____ (NVIDIA Corporation) C:\Users\Patryk\Downloads\320.49-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-07-10 19:37 - 2013-07-10 19:37 - 00291048 _____ C:\Windows\Minidump\071013-21559-01.dmp
2013-07-10 17:33 - 2013-07-10 17:33 - 00000000 ____D C:\Users\Patryk\AppData\Local\Macromedia
2013-07-10 17:27 - 2013-07-10 17:27 - 00000000 ____D C:\Users\Patryk\AppData\Local\VirtualStore
2013-07-10 16:45 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-10 15:57 - 2011-11-02 18:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-10 13:09 - 2012-09-26 17:01 - 01590370 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-10 12:58 - 2009-07-14 06:45 - 00291512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-10 12:57 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 12:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-10 12:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 12:37 - 2012-02-15 23:57 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-10 11:26 - 2011-11-26 10:00 - 00007633 _____ C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg
2013-07-10 11:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-09 11:09 - 2013-07-09 01:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 08:35

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-07-2013
Ran by Patryk at 2013-07-26 08:49:00
Running from C:\Users\Patryk\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Avira Free Antivirus (x32 Version: 13.0.0.3884)
Call of Duty: Black Ops - Multiplayer (x32)
Call of Duty: Black Ops (x32)
Call of Duty: Black Ops II - Multiplayer (x32)
Call of Duty: Black Ops II - Zombies (x32)
Call of Duty: Black Ops II (x32)
Call of Duty: Modern Warfare 3 - Dedicated Server (x32)
Call of Duty: Modern Warfare 3 - Multiplayer (x32)
Call of Duty: Modern Warfare 3 (x32)
Diablo III (x32 Version: 1.0.8.16603)
Diablo III Public Test (x32 Version: 1.0.8.16256)
Guild Wars 2 (x32)
ID CPU-Z 1.59
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Mozilla Thunderbird 17.0.4 (x86 de) (x32 Version: 17.0.4)
Netzmanager (Version: 1.071)
Netzmanager (x32 Version: 1.071)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
Path of Exile (x32 Version: 0.11.1.25969)
Razer Synapse 2.0 (x32 Version: 1.4.13)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (Version: 3.0.9.2)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

12-07-2013 09:36:39 Ende der Bereinigung
13-07-2013 19:39:00 Installed Path of Exile
16-07-2013 10:11:05 Windows Update
19-07-2013 14:18:06 Windows Update
23-07-2013 07:57:04 Uniblue SpeedUpMyPC installation
23-07-2013 22:27:30 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {046004AD-0A3F-4133-9AE9-E2943167EFEF} - \MSIAfterburner No Task File
Task: {109E3B71-6C36-4969-9509-AF2AA4CAE1A7} - \Software Updater Ui No Task File
Task: {2BA3C49C-56AA-4CB9-A010-88CB06D216CC} - \GoogleUpdateTaskMachineCore No Task File
Task: {36156F0B-7578-41A5-B7E0-B4D10F7D00AB} - \Software Updater No Task File
Task: {3BD2D218-FEAD-4266-A2A9-267A17C2C5E4} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {5D4FDF78-A538-4E99-8946-139FCC9E018C} - System32\Tasks\{5BFBD36E-ED4A-4C05-A927-B29A1A3BD483} => C:\Program Files (x86)\Steam\steam.exe [2013-02-25] (Valve Corporation)
Task: {647F1BD7-B297-4756-8077-523CAC93B704} - System32\Tasks\{5B0695B3-8262-46E1-AC1D-B7D0909FFC75} => C:\Program Files (x86)\Steam\Steam.exe [2013-02-25] (Valve Corporation)
Task: {738EE32F-2C53-4E4E-A84E-183E4E5809FA} - System32\Tasks\User_Feed_Synchronization-{BBA1ACE9-D2A6-4EE8-BA25-2ED66D84803D} => C:\Windows\system32\msfeedssync.exe [2013-03-20] (Microsoft Corporation)
Task: {762CA153-AFBF-48FA-B855-9F0F1418DB8B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-12] (Adobe Systems Incorporated)
Task: {8318B486-138F-4C71-A764-7106DD4477E8} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {99D37B4B-31DA-4F6A-8AB6-EC0D0C4178FB} - \GoogleUpdateTaskMachineUA No Task File
Task: {C7A478FA-2712-46CA-A6C2-60D73A1375FC} - System32\Tasks\{3EFC839A-4877-4DF4-83AB-CDEE9C6B07EE} => C:\Users\Patryk\Downloads\320.49-desktop-win8-win7-winvista-64bit-international-whql.exe [2013-07-10] (NVIDIA Corporation)
Task: {D47CAA23-B691-4DDE-8641-547F9A3D9DCD} - \Scheduled Update for Ask Toolbar No Task File
Task: {F809A542-F74E-44CE-B138-E382C2B75914} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/26/2013 06:28:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/26/2013 00:16:47 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 11:02:33 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:19:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 08:47:17 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:49:54 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:41:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:31:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:11:51 AM) (Source: Application Hang) (User: )
Description: Programm Diablo III.exe, Version 1.0.8.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 7a4

Startzeit: 01ce880a9c0098b5

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Diablo III\Diablo III.exe

Berichts-ID: 02e6cdbe-f3fe-11e2-95cf-0019214939df

Error: (07/24/2013 02:35:54 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (07/26/2013 06:27:02 AM) (Source: BugCheck) (User: )
Description: 0x0000009f (0x0000000000000004, 0x0000000000000258, 0xfffffa8003cdfb50, 0xfffff80000b9c510)C:\Windows\MEMORY.DMP072613-21886-01

Error: (07/25/2013 00:20:47 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:47 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:47 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:47 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:35 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:35 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:35 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:35 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy2" den Befehl "chkdsk" aus.

Error: (07/25/2013 00:20:24 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy3" den Befehl "chkdsk" aus.


Microsoft Office Sessions:
=========================
Error: (07/26/2013 06:28:41 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/26/2013 00:16:47 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 11:02:33 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:19:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 08:47:17 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:49:54 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:41:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:31:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 03:11:51 AM) (Source: Application Hang)(User: )
Description: Diablo III.exe1.0.8.166037a401ce880a9c0098b50C:\Program Files (x86)\Diablo III\Diablo III.exe02e6cdbe-f3fe-11e2-95cf-0019214939df

Error: (07/24/2013 02:35:54 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2012-02-26 08:50:53.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Admin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-26 08:50:53.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Admin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-26 08:50:53.341
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-26 08:50:53.325
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:29.917
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:29.917
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:28.637
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:28.622
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:27.608
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-12-15 19:44:27.592
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 4095.23 MB
Available physical RAM: 2624.83 MB
Total Pagefile: 8188.65 MB
Available Pagefile: 6392.87 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:454.04 GB) (Free:287.42 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:423.43 GB) NTFS (Disk=1 Partition=1)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 5C9E5E07)
Partition 1: (Active) - (Size=454 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: C6D0F0A2)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hab vorhin das erste mal seit langem einen Bluescreen gehabt

Ereignisname: BlueScreen
Antwort: Nicht verfügbar
CAB-Datei-ID: 0

Problemsignatur:
P1: 
P2: 
P3: 
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Angefügte Dateien:
C:\Windows\Minidump\072613-21886-01.dmp
C:\Users\Patryk\AppData\Local\Temp\WER-53570-0.sysdata.xml
C:\Users\Patryk\AppData\Local\Temp\WERC071.tmp.WERInternalMetadata.xml

Diese Dateien befinden sich möglicherweise hier:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_0ac4dce6

Analysesymbol: X64_0x9F_4_WUDFRd!RdDevice::MarkForDelete+26
Es wird erneut nach einer Lösung gesucht: 0
Berichts-ID: 072613-21886-01
Berichtstatus: 0
         

und sowas hier in der Ereignissanzeige...

Ein Konto wurde erfolgreich angemeldet.

Antragsteller:
	Sicherheits-ID:		NULL SID
	Kontoname:		-
	Kontodomäne:		-
	Anmelde-ID:		0x0

Anmeldetyp:			3

Neue Anmeldung:
	Sicherheits-ID:		ANONYMOUS-ANMELDUNG
	Kontoname:		ANONYMOUS-ANMELDUNG
	Kontodomäne:		NT-AUTORITÄT
	Anmelde-ID:		0x245f1
	Anmelde-GUID:		{00000000-0000-0000-0000-000000000000}

Prozessinformationen:
	Prozess-ID:		0x0
	Prozessname:		-

Netzwerkinformationen:
	Arbeitsstationsname:	
	Quellnetzwerkadresse:	-
	Quellport:		-

Detaillierte Authentifizierungsinformationen:
	Anmeldeprozess:		NtLmSsp 
	Authentifizierungspaket:	NTLM
	Übertragene Dienste:	-
	Paketname (nur NTLM):	NTLM V1
	Schlüssellänge:		0

Dieses Ereignis wird beim Erstellen einer Anmeldesitzung generiert. Es wird auf dem Computer generiert, auf den zugegriffen wurde.

Die Antragstellerfelder geben das Konto auf dem lokalen System an, von dem die Anmeldung angefordert wurde. Dies ist meistens ein Dienst wie der Serverdienst oder ein lokaler Prozess wie "Winlogon.exe" oder "Services.exe".

Das Anmeldetypfeld gibt den jeweiligen Anmeldetyp an. Die häufigsten Typen sind 2 (interaktiv) und 3 (Netzwerk).

Die Felder für die neue Anmeldung geben das Konto an, für das die Anmeldung erstellt wurde, d. h. das angemeldete Konto.

Die Netzwerkfelder geben die Quelle einer Remoteanmeldeanforderung an. der Arbeitsstationsname ist nicht immer verfügbar und kann in manchen Fällen leer bleiben.

Die Felder für die Authentifizierungsinformationen enthalten detaillierte Informationen zu dieser speziellen Anmeldeanforderung.
	 - Die Anmelde-GUID ist ein eindeutiger Bezeichner, der verwendet werden kann, um dieses Ereignis mit einem KDC-Ereignis zu korrelieren.
	- Die übertragenen Dienste geben an, welche Zwischendienste an der Anmeldeanforderung beteiligt waren.
	- Der Paketname gibt das in den NTLM-Protokollen verwendete Unterprotokoll an.
	- Die Schlüssellänge gibt die Länge des generierten Sitzungsschlüssels an. Wenn kein Sitzungsschlüssel angefordert wurde, ist dieser Wert 0.
         

ist das normal?

Welche MAC-Adressen? WLAN ist aus? Router schon resettet?

Nachdem ich jetzt die Werkseinstellungen des Routers zurückgesetzt hab tauchen diese MAc-adressen nicht mehr auf!!

Jetzt steht nur noch meine Netzwerkkarte vom Rechner in der Geräteliste.

Auch nich wenn ich den Router resette, wonach die vorher (vor Werkseinstellungen zurücksetzen) immer aufgetaucht sind.

WLAN ist und war immer aus. (bin vor über einem Jahr auf LAN-KAbel umgestiegen)
Die zwei MAC-adressen, die mir vor drei Tagen nach einem Disconect in der Geräteliste des Routers aufgefallen sind kenn ich nicht.

Hab dazu meinen alten W-Lan Stick und iPod herrausgekramt aber die warens beide nicht.

gruß Gora

edit:
Na Klasse jetzt sind wieder 2 Geräte in der Liste

 >> grr                         192.168.2.100     00-19-21-...
 >> PC192-168-2-102     192.168.2.102     E9-EB-B3-...
         

grr ist meine karte- die andere ist mir unbekannt.

Und Du hast keinen weiteren PC, Laptop, Tablet, handy oder so? Nachbar der im gleichen Netz hängt?

Ne, definitiv...
Ich änder mal das gerätepasswort. Ansonsten beim Dienstanbieter neue Zugangsdaten ordern?

Hab vorsichtshalber i-net gesperrt während ich auf Arbeit war.

edit:
Oje

um genau diese zwei Kollegen handelt es sich u.a. auch bei mir

E9:EB:B3:A6:DB:3C
E1:6C:D6:AE:52:90
         

Dahinter steckt der Hauseigene ISCSI-Dienst

Man und ich dachte schon die vom NSA wären an mir dran


Hast Du denn irgenwas gefunden, was man bei mir machen sollte?

Trotzdem danke für deine mühe

gruß Gora

Nö alles gut