Vorsatz

Guten Tag Trojaner-Board,
Ich habe ein kleines Problem mit meinem Internet, wobei ich fest davon überzeugt bin,
dass es ein Virus sein könnte. So ein Thema haben schon mehrere hier gestellt, doch ich habe nichts auf eigene Faust unternommen, da es sich ja bei mir um ein anderes Problem handeln könnte.


Informationen über den PC

Betriebssystem: Windows 8 64BIT
RAM: 16GB
Festplatte: 916GB
Grafikkarte: NVIDIA GeForce GTX 760 (192-bit)
Prozessoren: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Laufwerke: ST1000DM003-1CH162
Viruspogramm: Avira (Check noch nicht gemacht)

Was für Fehler aufgetreten sind
Ich habe schon seit mehreren Tagen einen High-Ping im Internet/
Teamspeak3 und auch im GTA-San Andreas Multiplayer. Manchmal ist der Ping auch normal.
34 ms sind es meistens, doch wie schon gesagt geht der Ping meist auch auf 400-500 Rekord 700 bei GTA und im Teamspeak habe ich wenn es soweit ist, auch einen Ping von 400 bis 500, jedoch ist der Paketverlust nicht gerade hoch. Wenn sich die Internetseiten langsam laden lassen, merke ich schon das ich wiedermal Highping habe. Ich habe ein paar Screens für den Anhang, da ich das Problem endlich mal lösen möchte.

Seid wann mir das Problem aufgefallen ist
Ich habe begonnen mir einen GTA-Server zu Scripten, dafür habe ich mir
XAMP für MySQL angeschafft und Hamachi, sodass auch meine Teammitglieder meinen Server testen können, und seitdem an glaube ich das dass Internet schlechter läuft.
Ich habe jetzt nichts Illegales gemacht oder mir irgendetwas illegales runtergeladen oder so.
Ein weiterer Punkt könnte vielleicht sein, dass ich mir gerne Richter Alexander Hold bei RTL-NOW anschaue und Paranormal Activity bei Kinox.to, jedoch ist das nach meinem Wissen nicht illegal, weil ich mir die Filme nicht runterlade nur anschaue, das macht aber denke ich jeder, aber ich denke daher kann es nicht kommen.



Ich hoffe ihr könnt helfen danke
LG SuNPeter

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo schraube, danke für deine Hilfe, das du dich hier um mein Problem kümmerst.
Ich habe hier die beiden LOG's nun für dich. Ich warte nun auf neue Anweisungen.

FRST-Log

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by Steffen (administrator) on BESTMACHINE on 02-07-2014 21:29:02
Running from C:\Users\Steffen\Downloads
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
() C:\Users\Steffen\Desktop\Selfmade\pawno\pawno.exe
() C:\XMAPP\xampp-control.exe
(Apache Software Foundation) C:\XMAPP\apache\bin\httpd.exe
() C:\XMAPP\mysql\bin\mysqld.exe
(Apache Software Foundation) C:\XMAPP\apache\bin\httpd.exe
() C:\Program Files\Rockstar Games\GTA - San Andreas\samp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
() C:\Users\Steffen\Desktop\FileZilla-3.7.3\Aimbot.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-08-23] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-11-13] (IDT, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)
HKU\S-1-5-21-1169862649-1461260550-3866536277-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1169862649-1461260550-3866536277-1001\...\Run: [Skype] => C:\Program Files (x86)\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM - {FF5C8AEB-47F9-4DBF-BB73-DA924AFCF5B8} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM-x32 - {FF5C8AEB-47F9-4DBF-BB73-DA924AFCF5B8} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\65koy8pi.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Savings Advisor - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\65koy8pi.default\Extensions\ciuvo-extension@avira.de [2014-03-31]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-26] (Avira Operations GmbH & Co. KG)
R2 CLHNServiceForPowerDVD12; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-06-10] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-06-10] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-06-10] (CyberLink)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-06-07] (Hewlett-Packard Company) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-31] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.)
S2 SkypeUpdate; C:\Program Files (x86)\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-11-13] (IDT, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-15] (CyberLink)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-06-23] (LogMeIn Inc.)
R2 ntk_PowerDVD12; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [84168 2013-03-12] (Cyberlink Corp.)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-02 21:29 - 2014-07-02 21:29 - 00011873 _____ () C:\Users\Steffen\Downloads\FRST.txt
2014-07-02 21:28 - 2014-07-02 21:29 - 00000000 ____D () C:\FRST
2014-07-02 21:27 - 2014-07-02 21:27 - 02083840 _____ (Farbar) C:\Users\Steffen\Downloads\FRST64.exe
2014-07-01 20:11 - 2014-07-02 01:09 - 00006580 _____ () C:\Users\Steffen\Desktop\SAPD Innen.pwn
2014-06-26 14:50 - 2014-06-26 14:50 - 00296008 _____ () C:\windows\Minidump\062614-16578-01.dmp
2014-06-26 12:16 - 2014-06-26 12:16 - 00000893 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-06-26 12:16 - 2014-06-26 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-06-26 12:16 - 2014-06-26 12:16 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-06-26 12:13 - 2014-06-26 12:13 - 00296376 _____ () C:\windows\Minidump\062614-26750-01.dmp
2014-06-25 21:11 - 2014-06-25 21:11 - 00002115 _____ () C:\Users\Steffen\Downloads\Zivispawn.rar
2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\windows\system32\Drivers\Hamdrv.sys
2014-06-21 11:13 - 2014-06-21 11:13 - 00296376 _____ () C:\windows\Minidump\062114-21312-01.dmp
2014-06-20 13:59 - 2014-05-24 04:48 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-06-20 13:59 - 2014-05-24 04:47 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-06-20 13:59 - 2014-05-24 04:47 - 01366016 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-06-20 13:59 - 2014-05-24 04:47 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-06-20 13:59 - 2014-05-24 04:47 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 19290112 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 15368704 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 02650112 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-06-20 13:59 - 2014-05-24 04:46 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-06-20 13:59 - 2014-05-24 04:45 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-06-20 13:59 - 2014-05-24 04:45 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-06-20 13:59 - 2014-05-24 04:45 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 14365696 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-06-20 13:59 - 2014-05-24 03:26 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 13731328 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 02862080 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-06-20 13:59 - 2014-05-24 03:25 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-06-20 13:59 - 2014-05-24 03:25 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-06-20 13:59 - 2014-05-24 03:09 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-06-20 13:59 - 2014-05-24 03:03 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-06-20 13:59 - 2014-05-24 00:37 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-06-20 13:55 - 2014-04-03 13:19 - 00328024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2014-06-20 13:55 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-06-20 13:55 - 2014-04-01 00:08 - 00387268 _____ () C:\windows\system32\ApnDatabase.xml
2014-06-20 13:55 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
2014-06-20 13:55 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
2014-06-20 13:44 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-06-20 13:22 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-06-20 13:22 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-06-20 12:57 - 2014-04-30 00:32 - 01301504 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-06-20 12:57 - 2014-04-30 00:22 - 01023488 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-06-20 12:57 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-06-20 12:57 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-06-20 11:42 - 2014-06-20 11:42 - 00296376 _____ () C:\windows\Minidump\062014-18546-01.dmp
2014-06-19 21:14 - 2014-06-20 00:18 - 00003356 _____ () C:\Users\Steffen\Desktop\Für dich KaeseDipp.txt
2014-06-19 13:21 - 2014-06-19 13:21 - 00296376 _____ () C:\windows\Minidump\061914-17703-01.dmp
2014-06-18 18:59 - 2014-06-18 18:59 - 03848020 _____ () C:\Users\Steffen\Desktop\mrm_selfmade.amx
2014-06-18 14:04 - 2014-06-18 14:04 - 00000000 _____ () C:\Users\Steffen\Desktop\Maps von Kaesedip.txt
2014-06-18 12:57 - 2014-06-18 12:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 12:18 - 2014-06-18 12:18 - 00296376 _____ () C:\windows\Minidump\061814-23312-01.dmp
2014-06-18 01:01 - 2014-06-18 01:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2014-06-18 00:59 - 2014-06-18 03:07 - 00000000 ____D () C:\XMAPP
2014-06-18 00:39 - 2014-06-18 00:46 - 131161168 _____ (Bitnami) C:\Users\Steffen\Downloads\xampp-win32-1.8.3-4-vc11-installer.exe
2014-06-17 22:07 - 2014-06-18 02:41 - 00030818 _____ () C:\selfmade.amx
2014-06-17 20:25 - 2014-06-17 20:25 - 01975133 _____ () C:\Users\Steffen\Downloads\samp03z_svr_R1_win32(2).zip
2014-06-17 20:23 - 2014-07-01 22:18 - 00000000 ____D () C:\Users\Steffen\Desktop\Selfmade
2014-06-15 21:39 - 2014-06-15 21:39 - 00036532 _____ () C:\Users\Steffen\Desktop\Medic Base.txt
2014-06-15 16:28 - 2014-06-15 16:28 - 00012640 _____ () C:\Users\Steffen\Desktop\Recruitment center.txt
2014-06-15 00:19 - 2014-06-15 00:19 - 00000000 _____ () C:\Users\Steffen\Desktop\Neues Textdokument.txt
2014-06-13 23:52 - 2014-06-18 23:33 - 00002041 _____ () C:\Users\Steffen\Desktop\Bank by Batista.txt
2014-06-13 18:20 - 2014-06-13 18:21 - 00296376 _____ () C:\windows\Minidump\061314-17437-01.dmp
2014-06-10 23:10 - 2014-06-10 23:10 - 00011450 _____ () C:\Users\Steffen\Desktop\Campingplatz.txt
2014-06-10 23:10 - 2014-06-10 23:10 - 00002315 _____ () C:\Users\Steffen\Desktop\FeuerCampingplatz.txt
2014-06-10 21:11 - 2014-06-10 21:11 - 00296320 _____ () C:\windows\Minidump\061014-13453-01.dmp
2014-06-10 11:42 - 2014-06-10 11:43 - 00296320 _____ () C:\windows\Minidump\061014-18218-01.dmp
2014-06-09 01:00 - 2014-06-09 01:00 - 00001930 _____ () C:\Users\Steffen\Desktop\gangjail.txt
2014-06-08 23:13 - 2014-06-08 23:13 - 00011249 _____ () C:\Users\Steffen\Desktop\Bibiliothek.txt
2014-06-05 22:48 - 2014-06-05 22:48 - 00001353 _____ () C:\Users\Steffen\Desktop\mafiabase.txt

==================== One Month Modified Files and Folders =======

2014-07-02 21:29 - 2014-07-02 21:29 - 00011873 _____ () C:\Users\Steffen\Downloads\FRST.txt
2014-07-02 21:29 - 2014-07-02 21:28 - 00000000 ____D () C:\FRST
2014-07-02 21:28 - 2014-02-05 19:00 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Skype
2014-07-02 21:27 - 2014-07-02 21:27 - 02083840 _____ (Farbar) C:\Users\Steffen\Downloads\FRST64.exe
2014-07-02 21:25 - 2014-02-08 13:06 - 00000000 ____D () C:\Users\Steffen\Desktop\Servermaps
2014-07-02 21:20 - 2014-02-09 14:34 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2014-07-02 21:02 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-07-02 20:37 - 2014-02-09 15:13 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-02 17:54 - 2014-02-05 19:56 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TS3Client
2014-07-02 17:23 - 2014-01-30 14:47 - 01738380 _____ () C:\windows\WindowsUpdate.log
2014-07-02 17:13 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-07-02 01:09 - 2014-07-01 20:11 - 00006580 _____ () C:\Users\Steffen\Desktop\SAPD Innen.pwn
2014-07-01 22:18 - 2014-06-17 20:23 - 00000000 ____D () C:\Users\Steffen\Desktop\Selfmade
2014-06-27 17:33 - 2013-12-06 08:50 - 00745562 _____ () C:\windows\system32\perfh007.dat
2014-06-27 17:33 - 2013-12-06 08:50 - 00169488 _____ () C:\windows\system32\perfc007.dat
2014-06-27 17:33 - 2012-07-26 09:28 - 01752720 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-27 14:37 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-26 16:20 - 2014-02-07 15:47 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TeamViewer
2014-06-26 14:50 - 2014-06-26 14:50 - 00296008 _____ () C:\windows\Minidump\062614-16578-01.dmp
2014-06-26 14:50 - 2014-02-10 12:19 - 541118514 _____ () C:\windows\MEMORY.DMP
2014-06-26 14:50 - 2014-02-10 12:19 - 00000000 ____D () C:\windows\Minidump
2014-06-26 12:19 - 2014-03-31 22:57 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2014-06-26 12:16 - 2014-06-26 12:16 - 00000893 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-06-26 12:16 - 2014-06-26 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-06-26 12:16 - 2014-06-26 12:16 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-06-26 12:13 - 2014-06-26 12:13 - 00296376 _____ () C:\windows\Minidump\062614-26750-01.dmp
2014-06-26 02:22 - 2014-05-19 11:55 - 00000182 _____ () C:\Users\Steffen\Desktop\Zwichenspischer.txt
2014-06-25 21:11 - 2014-06-25 21:11 - 00002115 _____ () C:\Users\Steffen\Downloads\Zivispawn.rar
2014-06-24 20:44 - 2014-05-19 18:20 - 00021699 _____ () C:\Users\Steffen\Desktop\Stadthalle.pwn
2014-06-24 20:32 - 2014-02-06 15:22 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\FileZilla
2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\windows\system32\Drivers\Hamdrv.sys
2014-06-21 11:40 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-06-21 11:13 - 2014-06-21 11:13 - 00296376 _____ () C:\windows\Minidump\062114-21312-01.dmp
2014-06-21 01:29 - 2014-01-30 14:47 - 00000000 ____D () C:\Users\Steffen\AppData\Local\VirtualStore
2014-06-20 14:22 - 2012-07-26 09:59 - 00000000 ____D () C:\windows\CbsTemp
2014-06-20 14:21 - 2014-02-08 13:31 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-20 14:21 - 2014-02-06 13:17 - 00000000 ____D () C:\windows\system32\MRT
2014-06-20 11:42 - 2014-06-20 11:42 - 00296376 _____ () C:\windows\Minidump\062014-18546-01.dmp
2014-06-20 00:18 - 2014-06-19 21:14 - 00003356 _____ () C:\Users\Steffen\Desktop\Für dich KaeseDipp.txt
2014-06-19 13:21 - 2014-06-19 13:21 - 00296376 _____ () C:\windows\Minidump\061914-17703-01.dmp
2014-06-19 13:21 - 2014-02-09 12:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 23:33 - 2014-06-13 23:52 - 00002041 _____ () C:\Users\Steffen\Desktop\Bank by Batista.txt
2014-06-18 18:59 - 2014-06-18 18:59 - 03848020 _____ () C:\Users\Steffen\Desktop\mrm_selfmade.amx
2014-06-18 14:04 - 2014-06-18 14:04 - 00000000 _____ () C:\Users\Steffen\Desktop\Maps von Kaesedip.txt
2014-06-18 12:57 - 2014-06-18 12:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 12:18 - 2014-06-18 12:18 - 00296376 _____ () C:\windows\Minidump\061814-23312-01.dmp
2014-06-18 03:07 - 2014-06-18 00:59 - 00000000 ____D () C:\XMAPP
2014-06-18 02:41 - 2014-06-17 22:07 - 00030818 _____ () C:\selfmade.amx
2014-06-18 01:01 - 2014-06-18 01:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2014-06-18 00:46 - 2014-06-18 00:39 - 131161168 _____ (Bitnami) C:\Users\Steffen\Downloads\xampp-win32-1.8.3-4-vc11-installer.exe
2014-06-17 20:25 - 2014-06-17 20:25 - 01975133 _____ () C:\Users\Steffen\Downloads\samp03z_svr_R1_win32(2).zip
2014-06-16 20:21 - 2014-02-16 22:40 - 00562176 ___SH () C:\Users\Steffen\Desktop\Thumbs.db
2014-06-15 21:39 - 2014-06-15 21:39 - 00036532 _____ () C:\Users\Steffen\Desktop\Medic Base.txt
2014-06-15 16:28 - 2014-06-15 16:28 - 00012640 _____ () C:\Users\Steffen\Desktop\Recruitment center.txt
2014-06-15 00:20 - 2014-05-19 11:54 - 00017596 _____ () C:\Users\Steffen\Desktop\Regelwerk geordnet.txt
2014-06-15 00:19 - 2014-06-15 00:19 - 00000000 _____ () C:\Users\Steffen\Desktop\Neues Textdokument.txt
2014-06-13 18:21 - 2014-06-13 18:20 - 00296376 _____ () C:\windows\Minidump\061314-17437-01.dmp
2014-06-12 11:36 - 2014-02-09 15:13 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-06-10 23:10 - 2014-06-10 23:10 - 00011450 _____ () C:\Users\Steffen\Desktop\Campingplatz.txt
2014-06-10 23:10 - 2014-06-10 23:10 - 00002315 _____ () C:\Users\Steffen\Desktop\FeuerCampingplatz.txt
2014-06-10 21:11 - 2014-06-10 21:11 - 00296320 _____ () C:\windows\Minidump\061014-13453-01.dmp
2014-06-10 11:43 - 2014-06-10 11:42 - 00296320 _____ () C:\windows\Minidump\061014-18218-01.dmp
2014-06-09 01:20 - 2014-04-30 03:07 - 00000000 ____D () C:\Users\Steffen\Desktop\Pure Roleplay relased von Samet
2014-06-09 01:00 - 2014-06-09 01:00 - 00001930 _____ () C:\Users\Steffen\Desktop\gangjail.txt
2014-06-08 23:13 - 2014-06-08 23:13 - 00011249 _____ () C:\Users\Steffen\Desktop\Bibiliothek.txt
2014-06-08 12:27 - 2014-02-07 21:46 - 00000000 ____D () C:\Program Files (x86)\Phone
2014-06-08 12:27 - 2014-02-06 17:06 - 00000000 ____D () C:\ProgramData\Skype
2014-06-05 23:01 - 2014-02-06 02:25 - 00142336 ___SH () C:\Users\Steffen\Downloads\Thumbs.db
2014-06-05 22:48 - 2014-06-05 22:48 - 00001353 _____ () C:\Users\Steffen\Desktop\mafiabase.txt

Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\AutoRun.exe
C:\Users\Steffen\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Steffen\AppData\Local\Temp\avgnt.exe
C:\Users\Steffen\AppData\Local\Temp\eauninstall.exe
C:\Users\Steffen\AppData\Local\Temp\EReg2HWDetect.dll
C:\Users\Steffen\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Steffen\AppData\Local\Temp\Need for Speed Most Wanted_uninst.exe
C:\Users\Steffen\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Steffen\AppData\Local\Temp\UpdateCheckerSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-01 23:19

==================== End Of Log ============================
         

--- --- ---


Und zu guter letzt noch die Addition-Log

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-07-2014
Ran by Steffen at 2014-07-02 21:29:22
Running from C:\Users\Steffen\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader Driver  (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Alcor Micro USB Card Reader Driver  (x32 Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
AtlantisQuest (HKLM-x32\...\{1D619FC4-4F88-406C-9E78-B948BFC998FA}) (Version: 1.00.0000 - Ihr Firmenname)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.450 - Avira)
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira) <==== ATTENTION
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.4.6522 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.4.3003 - CyberLink Corp.) Hidden
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
Cyberlink PhotoDirector (x32 Version: 3.0.2.4016 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.2921 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.4.2921 - CyberLink Corp.) Hidden
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.4.3007 - CyberLink Corp.)
CyberLink PowerDirector 10 (x32 Version: 10.0.4.3007 - CyberLink Corp.) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3007 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.1.3007 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Hewlett-Packard ACLM.NET v1.2.2.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKCU\...\HPConnectedMusic) (Version: 1.1 (build 96) hp - Meridian Audio Ltd)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Postscript Converter (Version: 4.0.4100 - Hewlett-Packard) Hidden
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{C88F84E5-AE23-44BD-922C-2ABEACACAF7A}) (Version: 7.2.23.56 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.214 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.214 - LogMeIn, Inc.) Hidden
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4029.0217 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Need for Speed™ Most Wanted (HKLM-x32\...\{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}) (Version:  - )
NVIDIA Control Panel 311.70 (Version: 311.70 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 311.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.70 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.124.810 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.0.6208 - CyberLink Corp.) Hidden
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-4 - Bitnami)

==================== Restore Points  =========================

15-06-2014 12:27:23 Geplanter Prüfpunkt
20-06-2014 12:20:59 Windows Update
02-07-2014 13:06:32 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {316AC840-3A87-43E9-B3AF-268B386A992F} - System32\Tasks\CLVDLauncher => c:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
Task: {4EE10BB4-924E-49B7-8DCF-35BDCB6FFAEC} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-12] (Adobe Systems Incorporated)
Task: {5C37EF71-16EB-4216-9C86-6BCD3B42FFEE} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {6A2A409B-6DE5-4B3E-96E1-F5F9568A9143} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-06-06] (Hewlett-Packard)
Task: {973F3541-9DAC-4B18-A16B-4E32047B41B8} - System32\Tasks\aviraSWU => Cscript.exe "C:\Program Files (x86)\avira\Internet Explorer\swu.vbs"
Task: {9CF3067C-46E2-4297-98D8-172F6632F5B7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {AB193073-9F54-4A13-BA50-1B0C99C2EB0A} - System32\Tasks\CLMLSvc_P2G8 => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-03-12] (CyberLink)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C7403753-1839-4428-9BA8-478DC1250597} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {D44419BF-2EFD-414D-99AB-CD577D6195B2} - System32\Tasks\HPGenoobeReminder => C:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HP GenOOBE\HPGenOOBE.exe [2013-05-21] ()
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F36065FB-C2F1-4A35-B52F-67101474C84B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company)
Task: {FC01D228-BB1C-4348-8C3F-55F4A28BC8EA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2014-06-20] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-10-23 14:15 - 2013-10-23 14:15 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-10-23 14:15 - 2013-10-23 14:15 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2013-10-23 14:15 - 2013-10-23 14:15 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-10-23 14:15 - 2013-10-23 14:15 - 00700904 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2007-04-14 20:23 - 2014-06-17 20:25 - 00304128 _____ () C:\Users\Steffen\Desktop\Selfmade\pawno\pawno.exe
2014-06-18 00:59 - 2013-06-17 11:42 - 02569216 _____ () C:\XMAPP\xampp-control.exe
2014-06-18 00:59 - 2014-01-14 17:54 - 10966528 _____ () c:\xmapp\mysql\bin\mysqld.exe
2014-02-10 13:40 - 2014-02-10 13:40 - 00412672 _____ () C:\Program Files\Rockstar Games\GTA - San Andreas\samp.exe
2014-03-08 21:34 - 2012-02-25 22:57 - 00032256 _____ () C:\Users\Steffen\Desktop\FileZilla-3.7.3\Aimbot.exe
2013-12-06 00:02 - 2013-01-24 01:57 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-12-06 00:06 - 2013-03-12 16:51 - 00626240 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-03-13 00:53 - 2013-03-13 00:53 - 00015424 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-06-18 00:59 - 2014-03-11 22:01 - 00217600 _____ () c:\xmapp\apache\bin\pcre.dll
2014-06-18 00:59 - 2014-04-09 01:21 - 00128512 _____ () C:\XMAPP\php\libpq.dll
2014-06-18 00:59 - 2014-03-11 22:01 - 00217600 _____ () C:\xmapp\apache\bin\pcre.dll
2013-12-11 16:49 - 2013-12-11 16:49 - 00184400 _____ () C:\Program Files (x86)\avira\Internet Explorer\avira32.dll
2014-06-18 12:57 - 2014-06-18 12:57 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\Users\Steffen\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Steffen\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Steffen\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Steffen\AppData\Roaming:NT2

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/02/2014 03:11:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (06/27/2014 02:56:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (06/27/2014 02:38:25 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/27/2014 02:38:24 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/27/2014 02:38:24 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (06/26/2014 10:34:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16921, Zeitstempel: 0x537fc9dc
Name des fehlerhaften Moduls: Flash.ocx, Version: 14.0.0.125, Zeitstempel: 0x53864f23
Ausnahmecode: 0xc0000005
Fehleroffset: 0x004bd2f7
ID des fehlerhaften Prozesses: 0x1428
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (06/26/2014 01:04:09 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.


System errors:
=============
Error: (07/02/2014 01:29:50 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (06/27/2014 05:58:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/27/2014 02:37:27 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎27.‎06.‎2014 um 03:30:51 unerwartet heruntergefahren.

Error: (06/26/2014 02:50:55 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000133 (0x0000000000000000, 0x0000000000000501, 0x0000000000000500, 0x0000000000000000)C:\windows\MEMORY.DMP062614-16578-01

Error: (06/26/2014 02:50:51 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎06.‎2014 um 13:02:59 unerwartet heruntergefahren.

Error: (06/26/2014 01:02:59 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎06.‎2014 um 12:53:26 unerwartet heruntergefahren.

Error: (06/26/2014 00:16:17 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/26/2014 00:13:28 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000133 (0x0000000000000000, 0x0000000000000501, 0x0000000000000500, 0x0000000000000000)C:\windows\MEMORY.DMP062614-26750-01

Error: (06/26/2014 00:13:26 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎06.‎2014 um 02:36:59 unerwartet heruntergefahren.

Error: (06/25/2014 03:10:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 5 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (07/02/2014 03:11:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (06/27/2014 02:56:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (06/27/2014 02:38:25 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet.   0x0

Error: (06/27/2014 02:38:24 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog

Error: (06/27/2014 02:38:24 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: 

Error: (06/26/2014 10:34:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE10.0.9200.16921537fc9dcFlash.ocx14.0.0.12553864f23c0000005004bd2f7142801cf917c510a4a25C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\Macromed\Flash\Flash.ocx37358346-fd71-11e3-bec7-78e3b5889cd2

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet.   0x0

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog

Error: (06/26/2014 02:51:54 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: 

Error: (06/26/2014 01:04:09 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet.   0x0


==================== Memory info =========================== 

Percentage of memory in use: 14%
Total physical RAM: 16337.14 MB
Available physical RAM: 14003.22 MB
Total Pagefile: 32721.14 MB
Available Pagefile: 29621.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:916.6 GB) (Free:840.23 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.43 GB) (Free:1.65 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D226B906)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Ist da irgendwas falsch dran oder ist an den Logs alles in Ordnung ?
Liebe Grüße

sieht gut aus.

Ich habe begonnen mir einen GTA-Server zu Scripten, dafür habe ich mir
XAMP für MySQL angeschafft und Hamachi, sodass auch meine Teammitglieder meinen Server testen können, und seitdem an glaube ich das dass Internet schlechter läuft.

haste den Kram mal komplett abgeschaltet/beendet, reboot, und nochmal getestet?

Hallo, schrauber
Ja ich habe das alles gemacht und es hat nichts gebracht. Die Logs sagen aber das alles in Ordnung ist oder ?

Malwaretechnisch ja, aber du sagst ja es ist erst so seit du das eingerichtet hast, also würde ich mal alles richtig abschalten/deinstallieren.