Win 8.1 64 | Avastsvc.exe lastet CPU 100% aus

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2014
Ran by Zyrano at 2014-02-19 22:47:08
Running from C:\Users\Zyrano\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
AMD Accelerated Video Transcoding (Version: 13.30.100.40131 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0131.1535.27922 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2014.0131.1535.27922 - Ihr Firmenname) Hidden
Antec CC (x32 Version: 1.2.0000 - Antec Inc.)
Antec CC Driver x64 (x32 Version: 3.2.0100 - Antec Inc.)
Application Verifier x64 External Package (Version: 8.100.25984 - Microsoft) Hidden
avast! Free Antivirus (x32 Version: 9.0.2013 - Avast Software)
Battle.net (x32 Version:  - Blizzard Entertainment)
Battlefield 4™ (x32 Version: 1.1.0.1 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB)
Behaviors SDK (XAML) for Visual Studio (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 DEU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Build Tools - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Buildtools-Sprachressourcen - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Buildtools-Sprachressourcen - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0131.1535.27922 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0131.1535.27922 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0131.1535.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0131.1534.27922 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0131.1535.27922 - Advanced Micro Devices, Inc.) Hidden
Curse Client (HKCU Version: 5.1.1.792 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (x32 Version: 6.02.0001 - Microsoft Corporation)
Entity Framework Tools for Visual Studio 2013 (x32 Version: 12.0.20912.0 - Microsoft Corporation)
Erforderliche Komponenten für SSDT  (x32 Version: 11.1.3000.0 - Microsoft Corporation)
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
JavaScript Tooling (Version: 12.0.21005 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Kits Configuration Installer (x32 Version: 8.100.25984 - Microsoft) Hidden
Language Pack (DEU) für freigegebene Windows Azure-Komponenten für Microsoft Visual Studio 2013 - v1.0 (x32 Version: 1.0.10829.1601 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (x32 Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (x32 Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (x32 Version: 4.5.51641 - Microsoft Corporation)
Microsoft Advertising SDK for Windows 8.1 - ENU (x32 Version: 8.1.30809.0 - Microsoft Corporation) Hidden
Microsoft Advertising Service Extension for Visual Studio (x32 Version: 12.0.30809.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft C++ Azure Mobile SDK for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 Sprachpaket - DEU (x32 Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 Sprachpaket - DEU (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio Express 2013 for Windows (x32 Version: 2.7.40911.287 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL-Sprachdienst  (x32 Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Team Foundation Server 2013-Objektmodell Sprachpaket (x64) - DEU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x86 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 32bit Compilers - DEU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers - DEU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Express Prerequisites x64 - DEU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Profiling Tools (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell-(Mindest)-Ressourcen (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Team Explorer Sprachpaket - DEU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 VsGraphics Helper Dependencies (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013-Vorbereitung (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2013 for Windows (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2013 for Windows Desktop (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2013 für Windows - DEU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2013 für Windows - DEU (x32 Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005.13 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2013 XAML UI Designer deu Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.1.3366.16 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
MPC-HC 1.7.3 (64-bit) (Version: 1.7.3 - MPC-HC Team)
MSI Afterburner 3.0.0 Beta 18 (x32 Version: 3.0.0 Beta 18 - MSI Co., LTD)
MSI Development Tools (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Origin (x32 Version: 9.4.1.116 - Electronic Arts, Inc.)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (x32 Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (x32 Version: 8.24.1218.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 6.0.0 (x32 Version: 6.0.0 - Unwinder)
SDK Debuggers (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (Version: 3.0.13 - TeamSpeak Systems GmbH)
Update for  (KB2504637) (x32 Version: 1 - Microsoft Corporation)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9600.16408 - Microsoft Corporation) Hidden
Windows App Certification Kit Native Components (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Azure Mobile Services SDK (x32 Version: 1.0.10815.0 - Microsoft Corporation) Hidden
Windows Azure Mobile Services Tools for Visual Studio 2013 Preview - v1.0 (x32 Version: 1.0.60906.1602 - Microsoft Corporation) Hidden
Windows Azure Mobile Services Tools für Visual Studio 2013 Preview Language Pack - v1.0 (x32 Version: 1.0.60906.1602 - Microsoft Corporation) Hidden
Windows Azure Shared Components for Microsoft Visual Studio 2013 - v1.0 (x32 Version: 1.0.10829.1601 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - de-de (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit EULA (x32 Version: 8.100.25984 - Microsoft Corporations) Hidden
Windows Software Development Kit for Windows 8.1 (x32 Version: 8.100.25984 - Microsoft Corporation)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit Redistributables (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
WPT Redistributables (x32 Version: 8.100.25984 - Microsoft) Hidden
WPTx64 (x32 Version: 8.100.25984 - Microsoft) Hidden

==================== Restore Points  =========================

11-02-2014 12:53:03 Windows Modules Installer
12-02-2014 17:21:16 Adobe Photoshop CS2 wird installiert
17-02-2014 00:55:03 DirectX wurde installiert

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {26C9DE0B-1012-4CC8-87F2-62E9E549E07E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-11] (Adobe Systems Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {33337027-30D1-43D1-B706-AA58B9EC9552} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-11] (AVAST Software)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6D19578A-FF26-4077-96CD-B0A620F6106D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-12] (Microsoft Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-02-11 14:12 - 2014-02-11 14:12 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-31 15:38 - 2014-01-31 15:38 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-02-17 12:54 - 2014-02-17 09:23 - 02180608 _____ () C:\Program Files\AVAST Software\Avast\defs\14021700\algo.dll
2014-02-19 21:50 - 2014-02-19 09:01 - 02181120 _____ () C:\Program Files\AVAST Software\Avast\defs\14021900\algo.dll
2014-02-11 14:12 - 2014-02-11 14:12 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-02-16 16:45 - 2014-02-16 16:45 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Zyrano\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/19/2014 08:30:11 PM) (Source: Microsoft-Windows-AppModel-State) (User: PC)
Description: windows_ie_ac_0013

Error: (02/17/2014 04:59:34 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.1.0.1, Zeitstempel: 0x52f4ec9e
Name des fehlerhaften Moduls: mantle64.dll, Version: 9.1.10.8, Zeitstempel: 0x52ec0683
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000000000005262
ID des fehlerhaften Prozesses: 0x504
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3
Vollständiger Name des fehlerhaften Pakets: bf4.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: bf4.exe5

Error: (02/17/2014 01:37:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.1.0.1, Zeitstempel: 0x52f4ec9e
Name des fehlerhaften Moduls: bf4.exe, Version: 1.1.0.1, Zeitstempel: 0x52f4ec9e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000b80168
ID des fehlerhaften Prozesses: 0x150c
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3
Vollständiger Name des fehlerhaften Pakets: bf4.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: bf4.exe5

Error: (02/17/2014 02:34:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSSHooksLoader64.exe, Version: 1.0.0.0, Zeitstempel: 0x52ac1c91
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea1bbd
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000001e630
ID des fehlerhaften Prozesses: 0x10f4
Startzeit der fehlerhaften Anwendung: 0xRTSSHooksLoader64.exe0
Pfad der fehlerhaften Anwendung: RTSSHooksLoader64.exe1
Pfad des fehlerhaften Moduls: RTSSHooksLoader64.exe2
Berichtskennung: RTSSHooksLoader64.exe3
Vollständiger Name des fehlerhaften Pakets: RTSSHooksLoader64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSSHooksLoader64.exe5

Error: (02/17/2014 02:34:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSS.exe, Version: 6.0.0.6228, Zeitstempel: 0x52ac1c36
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00025e37
ID des fehlerhaften Prozesses: 0x13d8
Startzeit der fehlerhaften Anwendung: 0xRTSS.exe0
Pfad der fehlerhaften Anwendung: RTSS.exe1
Pfad des fehlerhaften Moduls: RTSS.exe2
Berichtskennung: RTSS.exe3
Vollständiger Name des fehlerhaften Pakets: RTSS.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSS.exe5

Error: (02/17/2014 02:33:59 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSSHooksLoader64.exe, Version: 1.0.0.0, Zeitstempel: 0x52ac1c91
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea1bbd
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001e630
ID des fehlerhaften Prozesses: 0x10f4
Startzeit der fehlerhaften Anwendung: 0xRTSSHooksLoader64.exe0
Pfad der fehlerhaften Anwendung: RTSSHooksLoader64.exe1
Pfad des fehlerhaften Moduls: RTSSHooksLoader64.exe2
Berichtskennung: RTSSHooksLoader64.exe3
Vollständiger Name des fehlerhaften Pakets: RTSSHooksLoader64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSSHooksLoader64.exe5

Error: (02/17/2014 02:33:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSSHooksLoader64.exe, Version: 1.0.0.0, Zeitstempel: 0x52ac1c91
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea1bbd
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000001e630
ID des fehlerhaften Prozesses: 0x1388
Startzeit der fehlerhaften Anwendung: 0xRTSSHooksLoader64.exe0
Pfad der fehlerhaften Anwendung: RTSSHooksLoader64.exe1
Pfad des fehlerhaften Moduls: RTSSHooksLoader64.exe2
Berichtskennung: RTSSHooksLoader64.exe3
Vollständiger Name des fehlerhaften Pakets: RTSSHooksLoader64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSSHooksLoader64.exe5

Error: (02/17/2014 02:33:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSS.exe, Version: 6.0.0.6228, Zeitstempel: 0x52ac1c36
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00025e37
ID des fehlerhaften Prozesses: 0x12e8
Startzeit der fehlerhaften Anwendung: 0xRTSS.exe0
Pfad der fehlerhaften Anwendung: RTSS.exe1
Pfad des fehlerhaften Moduls: RTSS.exe2
Berichtskennung: RTSS.exe3
Vollständiger Name des fehlerhaften Pakets: RTSS.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSS.exe5

Error: (02/17/2014 02:33:55 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSSHooksLoader64.exe, Version: 1.0.0.0, Zeitstempel: 0x52ac1c91
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea1bbd
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001e630
ID des fehlerhaften Prozesses: 0x1388
Startzeit der fehlerhaften Anwendung: 0xRTSSHooksLoader64.exe0
Pfad der fehlerhaften Anwendung: RTSSHooksLoader64.exe1
Pfad des fehlerhaften Moduls: RTSSHooksLoader64.exe2
Berichtskennung: RTSSHooksLoader64.exe3
Vollständiger Name des fehlerhaften Pakets: RTSSHooksLoader64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSSHooksLoader64.exe5

Error: (02/17/2014 02:33:53 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RTSSHooksLoader64.exe, Version: 1.0.0.0, Zeitstempel: 0x52ac1c91
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea1bbd
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000001e630
ID des fehlerhaften Prozesses: 0x11e0
Startzeit der fehlerhaften Anwendung: 0xRTSSHooksLoader64.exe0
Pfad der fehlerhaften Anwendung: RTSSHooksLoader64.exe1
Pfad des fehlerhaften Moduls: RTSSHooksLoader64.exe2
Berichtskennung: RTSSHooksLoader64.exe3
Vollständiger Name des fehlerhaften Pakets: RTSSHooksLoader64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RTSSHooksLoader64.exe5


System errors:
=============
Error: (02/19/2014 06:48:08 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (02/17/2014 04:00:25 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (02/17/2014 03:30:08 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (02/17/2014 02:51:59 PM) (Source: DCOM) (User: PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (02/17/2014 02:51:29 PM) (Source: DCOM) (User: PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (02/17/2014 01:57:48 PM) (Source: DCOM) (User: PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (02/17/2014 01:57:18 PM) (Source: DCOM) (User: PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (02/17/2014 11:15:37 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (02/17/2014 02:36:25 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (02/17/2014 01:38:27 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (02/19/2014 08:30:11 PM) (Source: Microsoft-Windows-AppModel-State)(User: PC)
Description: windows_ie_ac_0013

Error: (02/17/2014 04:59:34 PM) (Source: Application Error)(User: )
Description: bf4.exe1.1.0.152f4ec9emantle64.dll9.1.10.852ec068380000003000000000000526250401cf2bf115aec98cD:\Origin Games\Battlefield 4\bf4.exeC:\Windows\SYSTEM32\mantle64.dll7e086215-97ec-11e3-825c-00252244b9d8

Error: (02/17/2014 01:37:44 PM) (Source: Application Error)(User: )
Description: bf4.exe1.1.0.152f4ec9ebf4.exe1.1.0.152f4ec9ec00000050000000000b80168150c01cf2bcac6eb1b6aD:\Origin Games\Battlefield 4\bf4.exeD:\Origin Games\Battlefield 4\bf4.exe4bb1d502-97d0-11e3-825b-00252244b9d8

Error: (02/17/2014 02:34:00 AM) (Source: Application Error)(User: )
Description: RTSSHooksLoader64.exe1.0.0.052ac1c91MSVCR90.dll9.0.30729.838751ea1bbdc000041d000000000001e63010f401cf2b8054c73797C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exeC:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll9312ac45-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:34:00 AM) (Source: Application Error)(User: )
Description: RTSS.exe6.0.0.622852ac1c36MSVCR90.dll9.0.30729.838751ea24a5c000000500025e3713d801cf2b8054b8912fC:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exeC:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll92f0cbef-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:33:59 AM) (Source: Application Error)(User: )
Description: RTSSHooksLoader64.exe1.0.0.052ac1c91MSVCR90.dll9.0.30729.838751ea1bbdc0000005000000000001e63010f401cf2b8054c73797C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exeC:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll92800714-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:33:56 AM) (Source: Application Error)(User: )
Description: RTSSHooksLoader64.exe1.0.0.052ac1c91MSVCR90.dll9.0.30729.838751ea1bbdc000041d000000000001e630138801cf2b805264ad65C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exeC:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll90c000fd-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:33:56 AM) (Source: Application Error)(User: )
Description: RTSS.exe6.0.0.622852ac1c36MSVCR90.dll9.0.30729.838751ea24a5c000000500025e3712e801cf2b8052562e40C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exeC:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll90910116-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:33:55 AM) (Source: Application Error)(User: )
Description: RTSSHooksLoader64.exe1.0.0.052ac1c91MSVCR90.dll9.0.30729.838751ea1bbdc0000005000000000001e630138801cf2b805264ad65C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exeC:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll901d2f01-9773-11e3-825a-00252244b9d8

Error: (02/17/2014 02:33:53 AM) (Source: Application Error)(User: )
Description: RTSSHooksLoader64.exe1.0.0.052ac1c91MSVCR90.dll9.0.30729.838751ea1bbdc000041d000000000001e63011e001cf2b805002717eC:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exeC:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll8e98ac24-9773-11e3-825a-00252244b9d8


==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 16383.24 MB
Available physical RAM: 14647.82 MB
Total Pagefile: 19327.24 MB
Available Pagefile: 13962.05 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.45 GB) (Free:48.17 GB) NTFS
Drive d: (Dump) (Fixed) (Total:335.35 GB) (Free:134.72 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 92A15047)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 335 GB) (Disk ID: 997924B2)
Partition 1: (Not Active) - (Size=335 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-19 22:54:48
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 OCZ-AGILITY3 rev.2.25 111,79GB
Running: uxroomwq.exe; Driver: C:\Users\Zyrano\AppData\Local\Temp\pxldapow.sys


---- Kernel code sections - GMER 2.1 ----

.text   C:\Windows\System32\win32k.sys!W32pServiceTable                                                                                              fffff9600019ab00 15 bytes [00, 7E, 0F, 02, C0, 70, 70, ...]
.text   C:\Windows\System32\win32k.sys!W32pServiceTable + 16                                                                                         fffff9600019ab10 11 bytes [00, DB, FB, FF, 80, DC, DF, ...]

---- User code sections - GMER 2.1 ----

.text   C:\Windows\system32\wininit.exe[588] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\services.exe[644] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\lsass.exe[680] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                     00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[756] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[800] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\atiesrxx.exe[940] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\atiesrxx.exe[940] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                 00007ffa476b169a 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atiesrxx.exe[940] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                 00007ffa476b16a2 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atiesrxx.exe[940] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118                                                    00007ffa476b181a 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atiesrxx.exe[940] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142                                                    00007ffa476b1832 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\System32\svchost.exe[988] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[272] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[384] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\svchost.exe[728] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                   00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[1084] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\spoolsv.exe[1500] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[1620] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe[2012] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\dashost.exe[1280] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[1136] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                    00007ffa4714977d 1 byte [62]
.text   C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[1136] C:\Windows\system32\psapi.dll!GetModuleBaseNameA + 506                   00007ffa476b169a 4 bytes [6B, 47, FA, 7F]
.text   C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[1136] C:\Windows\system32\psapi.dll!GetModuleBaseNameA + 514                   00007ffa476b16a2 4 bytes [6B, 47, FA, 7F]
.text   C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[1136] C:\Windows\system32\psapi.dll!QueryWorkingSet + 118                      00007ffa476b181a 4 bytes [6B, 47, FA, 7F]
.text   C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[1136] C:\Windows\system32\psapi.dll!QueryWorkingSet + 142                      00007ffa476b1832 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\svchost.exe[2072] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\SearchIndexer.exe[2316] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                            00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[2388] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\WUDFHost.exe[2532] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                 00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\svchost.exe[2988] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\svchost.exe[1316] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\DllHost.exe[4060] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe[6740] C:\Windows\system32\KERNEL32.dll!GetBinaryTypeW + 165          00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\WinLogon.exe[7384] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                 00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\dwm.exe[3828] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                      00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\atieclxx.exe[4136] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                 00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\atieclxx.exe[4136] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                00007ffa476b169a 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atieclxx.exe[4136] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                00007ffa476b16a2 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atieclxx.exe[4136] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118                                                   00007ffa476b181a 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\system32\atieclxx.exe[4136] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142                                                   00007ffa476b1832 4 bytes [6B, 47, FA, 7F]
.text   C:\Windows\Explorer.EXE[4924] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                          00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\DllHost.exe[3568] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[8096] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                  00007ffa4714977d 1 byte [62]
.text   C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe[4148] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                00007ffa4714977d 1 byte [62]
.text   C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[1168] C:\Windows\system32\KERNEL32.dll!GetBinaryTypeW + 165              00007ffa4714977d 1 byte [62]
.text   C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[7412] C:\Windows\system32\KERNEL32.dll!GetBinaryTypeW + 165              00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\taskhostex.exe[7336] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                               00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\AUDIODG.EXE[7792] C:\Windows\SYSTEM32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\SettingSyncHost.exe[6108] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                          00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\skydrive.exe[8104] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                 00007ffa4714977d 1 byte [62]
.text   C:\Windows\System32\svchost.exe[1020] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]
.text   C:\Windows\system32\wwahost.exe[8156] C:\Windows\system32\KERNEL32.DLL!GetBinaryTypeW + 165                                                  00007ffa4714977d 1 byte [62]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [6224:1252]                                                                                                    fffff960008e24d0

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{E1ACE73A-8668-4F4D-99F9-5E670A0631D6}\Connection@Name  isatap.fritz.box
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                            -532679589
Reg     HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E1ACE73A-8668-4F4D-99F9-5E670A0631D6}@ReusableType                        0
Reg     HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{E1ACE73A-8668-4F4D-99F9-5E670A0631D6}@DefunctTimestamp                    0x49 0xEC 0x04 0x53 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                              934
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                             86
Reg     HKCU\Software\Microsoft\Windows\Windows Error Reporting@LastRateLimitedDumpGenerationTime                                                    0xF5 0x25 0x14 0xE7 ...
Reg     HKCU\Software\Microsoft\Windows\Windows Error Reporting\Debug@StoreLocation                                                                  C:\Users\Zyrano\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_bf4.exe_f8169766dd6d85e89fdeac80408da91f5bf55b_4de0aa58_076bfdb6
Reg     HKCU\Software\Microsoft\Windows\Windows Error Reporting\Debug\UIHandles@CheckingForSolutionDialog                                            0x8A 0x02 0x1B 0x00 ...

---- EOF - GMER 2.1 ----