Internetseiten laden langsamer, Spiel disconnected

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.26.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Schwefel :: SCHWEFEL-MOTOR [Administrator]

26.08.2013 20:12:12
MBAM-log-2013-08-26 (21-12-49).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 442792
Laufzeit: 1 Stunde(n), 7 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Schwefel\AppData\Local\Temp\4EznIoJ5.exe.part (PUP.Optional.4Squared) -> Keine Aktion durchgeführt.
E:\Musikkk\dexpot_166_r2227.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
E:\Musikkk\winamp563_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
(Ende)
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Schwefel (administrator) on SCHWEFEL-MOTOR on 02-06-2014 17:37:04
Running from C:\Users\Schwefel\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Miranda IM) C:\Program Files (x86)\Miranda IM\miranda32.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Last.fm) C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
(Valve Corporation) E:\Games\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF2A5CEBB1007CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Schwefel\AppData\Roaming\Mozilla\Firefox\Profiles\a9a27afx.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LavaFox V2 - C:\Users\Schwefel\AppData\Roaming\Mozilla\Firefox\Profiles\a9a27afx.default\Extensions\info@djzig.com [2014-05-13]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Schwefel\AppData\Roaming\Mozilla\Firefox\Profiles\a9a27afx.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-06-29]
FF Extension: Adblock Plus - C:\Users\Schwefel\AppData\Roaming\Mozilla\Firefox\Profiles\a9a27afx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-02-10]
FF Extension: BetterPrivacy - C:\Users\Schwefel\AppData\Roaming\Mozilla\Firefox\Profiles\a9a27afx.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2013-02-10]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-27] (Avira Operations GmbH & Co. KG)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-04-07] ()
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
S3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
S3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-02 17:37 - 2014-06-02 17:37 - 00008176 _____ () C:\Users\Schwefel\Desktop\FRST.txt
2014-06-02 17:36 - 2014-06-02 17:37 - 00000000 ____D () C:\FRST
2014-06-02 17:33 - 2014-06-02 17:33 - 02067456 _____ (Farbar) C:\Users\Schwefel\Desktop\FRST64.exe
2014-06-02 17:13 - 2014-06-02 17:29 - 00020412 _____ () C:\Users\Schwefel\Desktop\hehe.odt
2014-06-02 17:04 - 2014-06-02 17:04 - 00001192 _____ () C:\Users\Schwefel\Desktop\OpenOffice 4.1.0.lnk
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ___SD () C:\Users\Schwefel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\OpenOffice
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-06-02 17:03 - 2014-06-02 17:03 - 00000000 ____D () C:\Users\Schwefel\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-05-31 16:13 - 2014-05-31 16:13 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-31 16:13 - 2014-05-31 16:13 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 16:39 - 2014-06-02 16:00 - 00070617 ____N () C:\Windows\WindowsUpdate.log
2014-05-30 16:33 - 2014-05-30 16:33 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-30 16:32 - 2014-05-30 16:32 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-30 16:32 - 2014-05-30 16:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-30 16:32 - 2014-05-30 16:32 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-30 16:30 - 2014-05-30 16:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-30 15:24 - 2014-05-30 15:24 - 00448512 _____ (OldTimer Tools) C:\Users\Schwefel\Desktop\TFC.exe
2014-05-30 12:48 - 2014-05-30 15:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-28 03:39 - 2014-05-30 16:31 - 00000085 _____ () C:\Windows\wininit.ini
2014-05-28 01:06 - 2014-06-02 15:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-28 01:05 - 2014-05-28 01:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-28 01:05 - 2014-05-28 01:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-28 01:05 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-28 01:05 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-17 17:39 - 2014-05-17 17:39 - 00000000 __SHD () C:\Users\Schwefel\AppData\Local\EmieUserList
2014-05-17 17:39 - 2014-05-17 17:39 - 00000000 __SHD () C:\Users\Schwefel\AppData\Local\EmieSiteList
2014-05-14 20:28 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 20:28 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 20:28 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 20:28 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 20:28 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 20:28 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 13:38 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 13:38 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 13:38 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 13:38 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 13:38 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 13:38 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 13:38 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 13:38 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 13:38 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 13:38 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 13:38 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 13:38 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 13:38 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 13:38 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 13:38 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 13:38 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 13:38 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 13:38 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 13:38 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 13:38 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 13:38 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 13:38 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 13:38 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 10:37 - 2014-05-10 10:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 02:35 - 2014-05-15 11:31 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-06-02 17:37 - 2014-06-02 17:37 - 00008176 _____ () C:\Users\Schwefel\Desktop\FRST.txt
2014-06-02 17:37 - 2014-06-02 17:36 - 00000000 ____D () C:\FRST
2014-06-02 17:37 - 2013-02-09 23:37 - 00000000 ____D () C:\Users\Schwefel\AppData\Local\Temp
2014-06-02 17:36 - 2013-03-29 15:02 - 00000000 ____D () C:\Users\Schwefel\AppData\Local\Last.fm
2014-06-02 17:33 - 2014-06-02 17:33 - 02067456 _____ (Farbar) C:\Users\Schwefel\Desktop\FRST64.exe
2014-06-02 17:29 - 2014-06-02 17:13 - 00020412 _____ () C:\Users\Schwefel\Desktop\hehe.odt
2014-06-02 17:22 - 2013-02-11 22:04 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\Xfire
2014-06-02 17:04 - 2014-06-02 17:04 - 00001192 _____ () C:\Users\Schwefel\Desktop\OpenOffice 4.1.0.lnk
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ___SD () C:\Users\Schwefel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\OpenOffice
2014-06-02 17:04 - 2014-06-02 17:04 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-06-02 17:03 - 2014-06-02 17:03 - 00000000 ____D () C:\Users\Schwefel\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-06-02 16:00 - 2014-05-30 16:39 - 00070617 ____N () C:\Windows\WindowsUpdate.log
2014-06-02 15:49 - 2014-05-28 01:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-02 14:47 - 2009-07-14 06:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-02 14:47 - 2009-07-14 06:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-02 14:44 - 2011-04-12 09:43 - 00771070 _____ () C:\Windows\system32\perfh007.dat
2014-06-02 14:44 - 2011-04-12 09:43 - 00174886 _____ () C:\Windows\system32\perfc007.dat
2014-06-02 14:44 - 2009-07-14 07:13 - 01801118 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-02 14:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 20:29 - 2014-02-18 13:26 - 00000000 ____D () C:\Users\Schwefel\AppData\Local\Battle.net
2014-05-31 16:13 - 2014-05-31 16:13 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-31 16:13 - 2014-05-31 16:13 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 16:36 - 2013-02-10 14:45 - 00000000 ____D () C:\Users\Schwefel\AppData\Local\CrashDumps
2014-05-30 16:36 - 2012-12-13 09:17 - 00000000 ____D () C:\Windows\Panther
2014-05-30 16:35 - 2014-05-30 16:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-30 16:33 - 2014-05-30 16:33 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-30 16:32 - 2014-05-30 16:32 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-30 16:32 - 2014-05-30 16:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-30 16:32 - 2014-05-30 16:32 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-30 16:31 - 2014-05-28 03:39 - 00000085 _____ () C:\Windows\wininit.ini
2014-05-30 16:31 - 2014-02-18 12:43 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-05-30 15:34 - 2013-07-21 02:04 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\TS3Client
2014-05-30 15:24 - 2014-05-30 15:24 - 00448512 _____ (OldTimer Tools) C:\Users\Schwefel\Desktop\TFC.exe
2014-05-30 15:14 - 2014-05-30 12:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-30 13:11 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-30 12:59 - 2013-04-07 14:34 - 00000000 ____D () C:\Users\Schwefel\Documents\My Games
2014-05-29 21:55 - 2013-04-22 00:56 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\Skype
2014-05-29 21:55 - 2013-04-22 00:56 - 00000000 ____D () C:\ProgramData\Skype
2014-05-29 21:01 - 2013-03-07 15:33 - 00000000 ___RD () C:\Users\Schwefel\Desktop\Programme
2014-05-28 03:37 - 2013-02-09 23:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-28 03:12 - 2013-09-13 13:34 - 00000000 ___RD () C:\Users\Schwefel\Desktop\Spiele
2014-05-28 01:05 - 2014-05-28 01:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-28 01:05 - 2014-05-28 01:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-28 01:05 - 2013-04-08 16:09 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\Malwarebytes
2014-05-28 01:05 - 2013-04-08 16:09 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-27 23:10 - 2013-03-06 02:01 - 01178624 _____ (CPUID) C:\Users\Schwefel\AppData\Roaming\siw_sdk.dll
2014-05-27 14:15 - 2013-08-27 15:03 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-27 14:15 - 2013-08-27 15:03 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-23 12:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-19 14:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-17 17:39 - 2014-05-17 17:39 - 00000000 __SHD () C:\Users\Schwefel\AppData\Local\EmieUserList
2014-05-17 17:39 - 2014-05-17 17:39 - 00000000 __SHD () C:\Users\Schwefel\AppData\Local\EmieSiteList
2014-05-15 11:32 - 2013-02-09 23:37 - 00000000 ___RD () C:\Users\Schwefel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 11:32 - 2013-02-09 23:37 - 00000000 ___RD () C:\Users\Schwefel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 11:31 - 2014-05-07 02:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 11:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 20:27 - 2013-08-26 22:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 20:27 - 2012-12-13 10:31 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 13:42 - 2013-02-11 16:15 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-12 07:26 - 2014-05-28 01:05 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-05-28 01:05 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2013-04-08 16:09 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-11 12:55 - 2013-02-10 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 10:37 - 2014-05-10 10:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 08:14 - 2014-05-14 13:38 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 13:38 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 06:40 - 2014-05-14 20:28 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 20:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 20:28 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 20:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 20:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 20:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 13:24 - 2013-04-21 18:02 - 00000000 ____D () C:\Users\Schwefel\AppData\Roaming\Mp3tag

Some content of TEMP:
====================
C:\Users\Schwefel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 14:20

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014 01
Ran by Schwefel at 2014-06-02 17:37:15
Running from C:\Users\Schwefel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.1.000 - Asmedia Technology)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
Day of Defeat: Source (HKLM-x32\...\Steam App 300) (Version:  - Valve)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - )
Geeks3D.com FurMark 1.10.4 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Miranda IM 0.10.21 (HKLM-x32\...\Miranda IM) (Version: 0.10.21 - Miranda IM Project)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Mp3tag v2.55 (HKLM-x32\...\Mp3tag) (Version: v2.55 - Florian Heidenreich)
NVIDIA PhysX (HKLM-x32\...\{8A809006-C25A-4A3A-9DAB-94659BCDB107}) (Version: 9.10.0224 - NVIDIA Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
SIW version 2011.10.29 (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2011.10.29 - Topala Software Solutions)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - )
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Xfire (HKLM-x32\...\Xfire) (Version:  - )

==================== Restore Points  =========================

28-05-2014 01:37:42 Entfernt League of Legends
29-05-2014 19:55:16 Removed Skype™ 6.3
30-05-2014 09:33:41 Windows Update
30-05-2014 10:49:14 Revo Uninstaller's restore point - Age of Empires II: HD Edition
02-06-2014 15:04:08 OpenOffice 4.1.0 wird installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {36AC3937-BB0D-4645-94D2-D0ABA0444765} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {3AD34379-BA56-467A-8180-5785D32741AC} - System32\Tasks\{C0A98ECD-4D1F-49B9-94FF-E31A96ED1CD1} => E:\LoL\LooL\League of Legends\lol.launcher.exe
Task: {992DA588-91A4-4784-A938-C32F83C200E5} - System32\Tasks\{AC9D83A4-3FB2-454F-9E17-C00FDDDB02BE} => E:\Games\LoL\Install\League of Legends\lol.launcher.exe

==================== Loaded Modules (whitelisted) =============

2013-04-07 14:33 - 2013-04-07 14:38 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-02-09 23:45 - 2012-09-17 10:23 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-09 23:50 - 2012-07-18 07:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00057432 _____ () C:\Program Files (x86)\Miranda IM\zlib.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00036961 _____ () C:\Program Files (x86)\Miranda IM\Plugins\dbx_mmap.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00061538 _____ () C:\Program Files (x86)\Miranda IM\Plugins\clist_classic.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00203357 _____ () C:\Program Files (x86)\Miranda IM\Plugins\aim.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00245848 _____ () C:\Program Files (x86)\Miranda IM\Plugins\chat.dll
2014-01-16 00:39 - 2014-01-16 00:39 - 00339550 _____ () C:\Program Files (x86)\Miranda IM\Plugins\icq.dll
2014-01-16 00:38 - 2014-01-16 00:38 - 00379993 _____ () C:\Program Files (x86)\Miranda IM\Plugins\irc.dll
2014-01-16 00:41 - 2014-01-16 00:41 - 00090200 _____ () C:\Program Files (x86)\Miranda IM\Plugins\srmm.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00417280 _____ () C:\Program Files (x86)\Winamp\nsutil.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00064512 _____ () C:\Program Files (x86)\Winamp\zlib.dll
2014-06-02 16:20 - 2014-06-02 16:20 - 00010752 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\auth.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00069120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\burnlib.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00013824 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\dsp_sps.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006656 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_fhgaac.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_flac.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005632 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_lame.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_vorbis.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_wav.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006144 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\enc_wma.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00023552 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_classicart.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00007168 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_crasher.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00023040 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_ff.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_find_on_disk.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00011776 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_hotkeys.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00041984 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_jumpex.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00041984 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_jumpex_original.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00021504 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_ml.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00009728 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_nopro.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00007168 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_orgler.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00014848 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_play_remove.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00011776 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_skinmanager.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00010240 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_timerestore.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00008192 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_tray.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00010752 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\gen_undo.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_avi.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00014336 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_cdda.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006656 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_dshow.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005632 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_flac.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_flv.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_linein.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00020480 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_midi.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004608 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_mkv.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00018944 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_mod.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00023040 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_mp3.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_mp4.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00011776 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_nsv.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_swf.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00011264 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_vorbis.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006656 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_wav.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005632 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_wave.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00015360 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_wm.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004608 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\in_wv.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_addons.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006656 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_autotag.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_bookmarks.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00008704 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_devices.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00047616 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_disc.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00009728 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_downloads.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004608 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_enqplay.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00008704 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_history.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_impex.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00056320 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_local.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_nowplaying.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00014336 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_online.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_orb.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00012800 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_playlists.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00034816 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_plg.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00047104 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_pmp.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00005120 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_rg.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00008192 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_transcode.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00014848 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ml_wire.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00036352 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\ombrowser.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006144 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\out_disk.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00016384 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\out_ds.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00007680 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\out_wave.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003072 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\playlist.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004608 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_activesync.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00020480 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_android.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00036864 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_ipod.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00003584 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_njb.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_p4s.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00011776 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_usb.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00039424 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\pmp_wifi.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00006144 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\tagz.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00088064 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\vis_avs.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00156160 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\vis_milk2.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00007680 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\vis_nsfs.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00206336 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\winamp.lng
2014-06-02 16:20 - 2014-06-02 16:20 - 00004096 _____ () C:\Users\Schwefel\AppData\Local\Temp\WLZCAEE.tmp\winampa.lng
2012-06-28 17:42 - 2013-03-29 15:28 - 00023552 _____ () C:\Program Files (x86)\Winamp\System\albumart.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\bmp.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00044544 _____ () C:\Program Files (x86)\Winamp\System\devices.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00016896 _____ () C:\Program Files (x86)\Winamp\System\dlmgr.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\gif.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00623616 _____ () C:\Program Files (x86)\Winamp\System\jnetlib.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00154624 _____ () C:\Program Files (x86)\Winamp\System\jpeg.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00084480 _____ () C:\Program Files (x86)\Winamp\System\playlist.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00087552 _____ () C:\Program Files (x86)\Winamp\System\png.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00021504 _____ () C:\Program Files (x86)\Winamp\System\tagz.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00091136 _____ () C:\Program Files (x86)\Winamp\System\xml.w5s
2012-06-28 17:42 - 2013-03-29 15:28 - 00290816 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00318976 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00083968 _____ () C:\Program Files (x86)\Winamp\tataki.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00249856 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_devices.dll
2012-06-28 17:42 - 2013-03-29 15:28 - 00240640 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll
2013-03-29 15:02 - 2013-09-03 14:01 - 00736768 _____ () C:\Program Files (x86)\Last.fm\unicorn.dll
2013-03-29 15:02 - 2013-09-03 14:01 - 00032768 _____ () C:\Program Files (x86)\Last.fm\logger.dll
2013-03-29 15:02 - 2013-09-03 10:54 - 00351232 _____ () C:\Program Files (x86)\Last.fm\lastfm.dll
2013-03-29 15:02 - 2013-09-03 14:01 - 00126976 _____ () C:\Program Files (x86)\Last.fm\listener.dll
2013-03-29 15:02 - 2013-01-18 12:39 - 00302592 _____ () C:\Program Files (x86)\Last.fm\phonon.dll
2013-09-04 13:19 - 2013-01-18 12:49 - 00182784 _____ () C:\Program Files (x86)\Last.fm\plugins\phonon_backend\phonon_vlc.dll
2013-03-29 15:02 - 2012-12-13 01:12 - 00111104 _____ () C:\Program Files (x86)\Last.fm\libvlc.dll
2013-03-29 15:02 - 2012-12-13 01:13 - 02286592 _____ () C:\Program Files (x86)\Last.fm\libvlccore.dll
2013-09-04 13:19 - 2012-12-13 01:13 - 00049664 _____ () C:\Program Files (x86)\Last.fm\plugins\audio_output\libaout_directx_plugin.dll
2014-05-22 21:59 - 2014-04-30 02:08 - 01135104 _____ () E:\Games\Steam\libavcodec-55.dll
2014-04-27 17:17 - 2014-04-30 02:08 - 00471552 _____ () E:\Games\Steam\libavutil-53.dll
2014-05-22 21:59 - 2014-04-30 02:08 - 00404992 _____ () E:\Games\Steam\libavformat-55.dll
2014-01-08 18:31 - 2014-04-30 02:08 - 00340992 _____ () E:\Games\Steam\libavresample-1.dll
2013-03-12 18:10 - 2014-05-17 03:36 - 00756224 _____ () E:\Games\Steam\SDL2.dll
2014-05-22 21:59 - 2014-05-29 19:37 - 02139840 _____ () E:\Games\Steam\video.dll
2014-05-22 21:59 - 2014-04-29 02:37 - 00519168 _____ () E:\Games\Steam\libswscale-2.dll
2013-02-10 15:53 - 2014-05-29 19:36 - 01116864 _____ () E:\Games\Steam\bin\chromehtml.DLL
2013-02-10 15:53 - 2014-05-02 01:35 - 20628160 _____ () E:\Games\Steam\bin\libcef.dll
2013-02-10 15:53 - 2013-06-15 01:49 - 01100800 _____ () E:\Games\Steam\bin\avcodec-53.dll
2013-02-10 15:53 - 2013-06-15 01:49 - 00124416 _____ () E:\Games\Steam\bin\avutil-51.dll
2013-02-10 15:53 - 2013-06-15 01:49 - 00192000 _____ () E:\Games\Steam\bin\avformat-53.dll
2014-05-31 16:13 - 2014-05-31 16:13 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
2013-02-10 15:53 - 2014-05-29 19:36 - 00131264 _____ () E:\Games\Steam\bin\audio.dll
2013-02-10 15:53 - 2013-06-15 01:49 - 00071680 _____ () E:\Games\Steam\bin\mssmp3.asi
2013-02-10 15:53 - 2013-06-15 01:49 - 00153088 _____ () E:\Games\Steam\bin\mssvoice.asi

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/02/2014 02:41:45 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (06/01/2014 02:39:17 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (05/31/2014 01:55:05 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (05/30/2014 04:39:13 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (05/30/2014 04:38:14 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (05/30/2014 04:37:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/30/2014 04:37:44 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (05/30/2014 04:35:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (06/02/2014 02:41:45 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/01/2014 02:39:17 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/31/2014 01:55:05 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2014 04:39:13 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (05/30/2014 04:37:44 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore


CodeIntegrity Errors:
===================================
  Date: 2013-03-06 00:56:08.128
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Schwefel\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-06 00:56:08.112
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Schwefel\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-06 00:56:08.034
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-06 00:56:08.003
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-13 10:29:15.841
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-13 10:23:12.616
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-13 10:23:12.257
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-13 10:23:12.148
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-13 10:23:12.023
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-13 10:20:10.908
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\DisplaySwitch.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 20%
Total physical RAM: 8076.43 MB
Available physical RAM: 6386.26 MB
Total Pagefile: 16151.03 MB
Available Pagefile: 14174.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:76.54 GB) NTFS
Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:809.82 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 5781F311)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: EAF7DABA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

==================== End Of Log ============================