"Dieses Programm wurde durch eine Gruppenrichtlinie blockiert." (AVAST)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01
Ran by Jan (administrator) on JAN-PC on 16-07-2014 10:58:01
Running from C:\Users\Jan\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\AMD\amdacpusrsvc.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(TomTom) D:\Programme\TomTomHome\TomTom HOME 2\TomTomHOMEService.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(OpenOffice.org) D:\Programme\OpenOffice\program\soffice.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(OpenOffice.org) D:\Programme\OpenOffice\program\soffice.bin
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2000-01-01] (VIA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-07-06] (AVAST Software)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-12-14] (Microsoft Corporation)
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\Run: [DAEMON Tools Lite] => D:\Programme\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-07] (Samsung)
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD)
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\Run: [TomTomHOME.exe] => D:\Programme\TomTomHome\\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\Run: [OwloNupl] => regsvr32.exe "C:\ProgramData\OwloNupl\OwloNupl.dat"
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\MountPoints2: {00959b0e-02b8-11e4-879d-902b345d99e5} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\MountPoints2: {3415b77f-eab7-11e3-9afe-902b345d99e5} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\MountPoints2: {953c9dcb-86c1-11e2-93bf-806e6f6e6963} - E:\autorun.exe
HKU\S-1-5-21-2223811541-1802606264-3549960530-1000\...\MountPoints2: {d7555970-8a39-11e2-aa95-902b345d99e5} - G:\raf-fc3.exe
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> D:\Programme\OpenOffice\program\quickstart.exe ()
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x75FB6959889FCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites03_14_29_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEyD0Dzyzy0EyDyC0B0BzytN0D0Tzu0SzytByBtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyB0AyE0B0A0BtDtGtDzztDyDtGtCzztAyCtGzz0CyEyDtGtCyByB0A0CyCyC0E0D0EyD0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0E0D0B0CyEtD0BtGyD0Fzz0AtG0AtBtCyDtG0CzztAzytGyCyE0C0EyByC0DtCyC0F0CtC2Q&cr=261415494&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites03_14_29_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEyD0Dzyzy0EyDyC0B0BzytN0D0Tzu0SzytByBtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyB0AyE0B0A0BtDtGtDzztDyDtGtCzztAyCtGzz0CyEyDtGtCyByB0A0CyCyC0E0D0EyD0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0E0D0B0CyEtD0BtGyD0Fzz0AtG0AtBtCyDtG0CzztAzytGyCyE0C0EyByC0DtCyC0F0CtC2Q&cr=261415494&ir=
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites03_14_29_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEyD0Dzyzy0EyDyC0B0BzytN0D0Tzu0SzytByBtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyB0AyE0B0A0BtDtGtDzztDyDtGtCzztAyCtGzz0CyEyDtGtCyByB0A0CyCyC0E0D0EyD0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0E0D0B0CyEtD0BtGyD0Fzz0AtG0AtBtCyDtG0CzztAzytGyCyE0C0EyByC0DtCyC0F0CtC2Q&cr=261415494&ir=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites03_14_29_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEyD0Dzyzy0EyDyC0B0BzytN0D0Tzu0SzytByBtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyB0AyE0B0A0BtDtGtDzztDyDtGtCzztAyCtGzz0CyEyDtGtCyByB0A0CyCyC0E0D0EyD0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0E0D0B0CyEtD0BtGyD0Fzz0AtG0AtBtCyDtG0CzztAzytGyCyE0C0EyByC0DtCyC0F0CtC2Q&cr=261415494&ir=
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ny0myoz3.default-1405368031801
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF user.js: detected! => C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ny0myoz3.default-1405368031801\user.js
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash and Video Download - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ny0myoz3.default-1405368031801\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-07-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-07]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-13]
CHR Extension: (Google-Suche) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-13]
CHR Extension: (Google Mail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-13]

==================== Services (Whitelisted) =================

R2 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [82432 2014-04-17] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-30] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-03] () [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-20] ()
S2 SkypeUpdate; D:\Programme\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 TomTomHOMEService; D:\Programme\TomTomHome\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-08-27] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [274656 2014-04-18] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-17] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-30] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-11] (DT Soft Ltd)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2013-11-15] (Razer Inc)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-07-16] ()
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [205312 2012-01-20] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [254464 2012-01-20] (VIA Technologies, Inc.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-16 10:58 - 2014-07-16 10:58 - 00015474 _____ () C:\Users\Jan\Desktop\FRST.txt
2014-07-16 10:57 - 2014-07-16 10:58 - 00000000 ____D () C:\FRST
2014-07-16 10:56 - 2014-07-16 10:56 - 02086912 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2014-07-16 10:50 - 2014-07-16 10:50 - 00000209 _____ () C:\Users\Jan\Desktop\TrackMania Stadium.url
2014-07-16 02:03 - 2014-07-16 02:03 - 00000000 ____D () C:\ProgramData\OwloNupl
2014-07-16 00:47 - 2014-07-16 00:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-16 00:47 - 2014-07-16 00:47 - 00000735 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-16 00:47 - 2014-07-16 00:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-16 00:47 - 2014-07-16 00:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 00:47 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-16 00:47 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-16 00:47 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-16 00:46 - 2014-07-16 00:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jan\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-16 00:45 - 2014-07-16 00:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-16 00:28 - 2014-07-16 10:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-16 00:28 - 2014-07-16 02:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-16 00:28 - 2014-07-16 02:00 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-16 00:28 - 2014-07-16 02:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-16 00:19 - 2014-07-16 02:19 - 00000284 _____ () C:\Windows\Tasks\Rocket Updater.job
2014-07-16 00:19 - 2014-07-16 00:56 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\RocketUpdater
2014-07-16 00:19 - 2014-07-16 00:19 - 00003216 _____ () C:\Windows\System32\Tasks\Rocket Updater
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\LavFilters
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\DivX
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDXReader
2014-07-16 00:18 - 2014-07-16 00:56 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Systweak
2014-07-16 00:18 - 2014-07-16 00:25 - 00000000 ____D () C:\ProgramData\DivX
2014-07-16 00:18 - 2014-07-16 00:23 - 00000000 ____D () C:\Program Files (x86)\DSP-worx
2014-07-16 00:18 - 2014-06-30 17:55 - 00020328 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-07-15 02:53 - 2014-07-15 02:53 - 00276768 _____ () C:\Windows\Minidump\071514-5912-01.dmp
2014-07-14 22:02 - 2014-07-14 22:03 - 32050448 _____ () C:\Users\Jan\Downloads\Firefox_Setup_de31.0b9.exe
2014-07-11 19:31 - 2014-07-16 00:56 - 00000000 ____D () C:\ProgramData\AwwoZelv
2014-07-11 14:27 - 2014-07-11 14:27 - 00003584 _____ () C:\Users\Jan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-07 17:24 - 2014-07-14 22:13 - 00000869 _____ () C:\Users\Public\Desktop\Battlefield 4.lnk
2014-07-04 03:29 - 2014-07-04 03:33 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\WinMPG
2014-07-04 03:28 - 2014-07-04 03:28 - 00000751 _____ () C:\Users\Jan\Desktop\WinMPG Video Convert.lnk
2014-07-04 03:28 - 2014-07-04 03:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMPG VideoConvert
2014-07-04 03:28 - 2002-06-08 20:00 - 00466944 _____ (InterVideo Inc.) C:\Windows\SysWOW64\iviaudio.ax
2014-07-04 00:52 - 2014-07-04 00:52 - 00000679 _____ () C:\Users\Jan\Desktop\IrfanView.lnk
2014-07-04 00:52 - 2014-07-04 00:52 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-03 22:02 - 2014-07-03 22:02 - 00276712 _____ () C:\Windows\Minidump\070314-5085-01.dmp
2014-06-30 17:11 - 2014-06-30 17:11 - 00000000 ____D () C:\ProgramData\AbixCapdu
2014-06-30 16:36 - 2014-06-30 16:36 - 00000000 ____D () C:\Users\Jan\Documents\Games for Windows - LIVE Demos
2014-06-30 16:35 - 2014-06-30 16:35 - 00001338 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2014-06-30 16:35 - 2014-06-30 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-06-29 21:58 - 2014-06-29 21:58 - 00000209 _____ () C:\Users\Jan\Desktop\Castle Crashers.url
2014-06-28 00:42 - 2014-06-28 00:42 - 00000000 ____D () C:\Users\Jan\Documents\Paradox Interactive
2014-06-27 13:17 - 2014-06-27 13:17 - 00000209 _____ () C:\Users\Jan\Desktop\Europa Universalis IV.url
2014-06-26 02:50 - 2014-06-26 02:50 - 00276712 _____ () C:\Windows\Minidump\062614-6208-01.dmp
2014-06-22 18:07 - 2014-06-22 18:45 - 00000000 ____D () C:\Users\Jan\AppData\Local\Skyrim
2014-06-22 17:10 - 2014-06-22 17:10 - 00000000 ____D () C:\Users\Jan\Documents\Rockstar Games
2014-06-22 17:06 - 2014-06-22 17:06 - 00000000 __SHD () C:\ProgramData\SecuROM
2014-06-22 17:05 - 2014-06-30 16:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-06-22 17:05 - 2014-06-22 17:05 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 __RHD () C:\Users\Jan\AppData\Roaming\SecuROM
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 ____D () C:\Users\Jan\AppData\Local\Rockstar Games
2014-06-20 14:18 - 2014-06-20 14:18 - 00000000 ____D () C:\Users\Jan\AppData\Local\My Games
2014-06-20 13:45 - 2014-06-20 13:45 - 00001205 _____ () C:\Users\Jan\Desktop\Uplay.lnk
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

==================== One Month Modified Files and Folders =======

2014-07-16 10:58 - 2014-07-16 10:58 - 00015474 _____ () C:\Users\Jan\Desktop\FRST.txt
2014-07-16 10:58 - 2014-07-16 10:57 - 00000000 ____D () C:\FRST
2014-07-16 10:56 - 2014-07-16 10:56 - 02086912 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2014-07-16 10:56 - 2014-02-13 13:59 - 00000000 ____D () C:\Users\Jan\AppData\Local\Battle.net
2014-07-16 10:50 - 2014-07-16 10:50 - 00000209 _____ () C:\Users\Jan\Desktop\TrackMania Stadium.url
2014-07-16 10:50 - 2013-03-07 13:57 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-16 10:45 - 2014-07-16 00:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-16 10:31 - 2009-07-14 06:45 - 00018816 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-16 10:31 - 2009-07-14 06:45 - 00018816 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-16 10:28 - 2009-07-14 19:58 - 01002328 _____ () C:\Windows\system32\perfh007.dat
2014-07-16 10:28 - 2009-07-14 19:58 - 00242656 _____ () C:\Windows\system32\perfc007.dat
2014-07-16 10:28 - 2009-07-14 07:13 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-16 10:27 - 2013-03-07 03:00 - 01474117 _____ () C:\Windows\WindowsUpdate.log
2014-07-16 10:26 - 2013-03-06 20:06 - 00000000 ____D () C:\Users\Jan
2014-07-16 10:24 - 2014-03-08 14:52 - 00242142 _____ () C:\Windows\PFRO.log
2014-07-16 10:24 - 2014-02-19 12:56 - 00026599 _____ () C:\Windows\setupact.log
2014-07-16 10:24 - 2013-11-03 03:34 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-07-16 10:24 - 2013-11-03 03:34 - 00002828 _____ () C:\Windows\System32\Tasks\SlimDrivers Startup
2014-07-16 10:24 - 2013-11-03 03:34 - 00000406 _____ () C:\Windows\Tasks\SlimDrivers Startup.job
2014-07-16 10:24 - 2013-03-07 13:33 - 00000000 ____D () C:\ProgramData\Kodak
2014-07-16 10:24 - 2013-03-06 23:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-16 10:24 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-16 02:20 - 2014-03-07 19:19 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-07-16 02:20 - 2013-09-15 14:36 - 00000000 ____D () C:\ProgramData\Origin
2014-07-16 02:19 - 2014-07-16 00:19 - 00000284 _____ () C:\Windows\Tasks\Rocket Updater.job
2014-07-16 02:03 - 2014-07-16 02:03 - 00000000 ____D () C:\ProgramData\OwloNupl
2014-07-16 02:01 - 2014-07-16 00:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-16 02:00 - 2014-07-16 00:28 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-16 02:00 - 2014-07-16 00:28 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-16 01:58 - 2013-11-24 23:22 - 00000000 ____D () C:\Users\Jan\Documents\FIFA 14
2014-07-16 00:58 - 2014-07-16 00:47 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-16 00:56 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\RocketUpdater
2014-07-16 00:56 - 2014-07-16 00:18 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Systweak
2014-07-16 00:56 - 2014-07-11 19:31 - 00000000 ____D () C:\ProgramData\AwwoZelv
2014-07-16 00:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Registration
2014-07-16 00:47 - 2014-07-16 00:47 - 00000735 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-16 00:47 - 2014-07-16 00:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-16 00:47 - 2014-07-16 00:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 00:46 - 2014-07-16 00:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jan\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-16 00:45 - 2014-07-16 00:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-16 00:40 - 2013-03-07 13:20 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Skype
2014-07-16 00:25 - 2014-07-16 00:18 - 00000000 ____D () C:\ProgramData\DivX
2014-07-16 00:23 - 2014-07-16 00:18 - 00000000 ____D () C:\Program Files (x86)\DSP-worx
2014-07-16 00:19 - 2014-07-16 00:19 - 00003216 _____ () C:\Windows\System32\Tasks\Rocket Updater
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\LavFilters
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\DivX
2014-07-16 00:19 - 2014-07-16 00:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDXReader
2014-07-16 00:18 - 2013-03-06 23:09 - 00001139 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-15 02:53 - 2014-07-15 02:53 - 00276768 _____ () C:\Windows\Minidump\071514-5912-01.dmp
2014-07-15 02:53 - 2014-04-30 01:34 - 1385863589 _____ () C:\Windows\MEMORY.DMP
2014-07-15 02:53 - 2013-11-05 18:50 - 00000000 ____D () C:\Windows\Minidump
2014-07-14 22:13 - 2014-07-07 17:24 - 00000869 _____ () C:\Users\Public\Desktop\Battlefield 4.lnk
2014-07-14 22:13 - 2013-10-28 15:55 - 00000853 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-07-14 22:04 - 2013-03-06 23:09 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-14 22:03 - 2014-07-14 22:02 - 32050448 _____ () C:\Users\Jan\Downloads\Firefox_Setup_de31.0b9.exe
2014-07-11 14:27 - 2014-07-11 14:27 - 00003584 _____ () C:\Users\Jan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-10 20:06 - 2013-04-23 15:57 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\TS3Client
2014-07-09 15:35 - 2013-07-07 15:07 - 00000000 ____D () C:\Users\Jan\AppData\Local\PMB Files
2014-07-09 15:35 - 2013-07-07 15:07 - 00000000 ____D () C:\ProgramData\PMB Files
2014-07-07 23:54 - 2013-03-11 13:12 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-07-07 23:54 - 2013-03-11 13:12 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-07 17:25 - 2013-11-24 23:21 - 00000925 _____ () C:\Users\Public\Desktop\FIFA 14.lnk
2014-07-04 03:33 - 2014-07-04 03:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\WinMPG
2014-07-04 03:28 - 2014-07-04 03:28 - 00000751 _____ () C:\Users\Jan\Desktop\WinMPG Video Convert.lnk
2014-07-04 03:28 - 2014-07-04 03:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMPG VideoConvert
2014-07-04 00:52 - 2014-07-04 00:52 - 00000679 _____ () C:\Users\Jan\Desktop\IrfanView.lnk
2014-07-04 00:52 - 2014-07-04 00:52 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-03 22:16 - 2013-07-07 16:09 - 00000000 ____D () C:\Users\Jan\Desktop\Bodytransformation
2014-07-03 22:13 - 2013-08-04 02:56 - 00000000 ____D () C:\Users\Jan\.gimp-2.8
2014-07-03 22:02 - 2014-07-03 22:02 - 00276712 _____ () C:\Windows\Minidump\070314-5085-01.dmp
2014-06-30 17:55 - 2014-07-16 00:18 - 00020328 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-06-30 17:11 - 2014-06-30 17:11 - 00000000 ____D () C:\ProgramData\AbixCapdu
2014-06-30 17:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-30 16:36 - 2014-06-30 16:36 - 00000000 ____D () C:\Users\Jan\Documents\Games for Windows - LIVE Demos
2014-06-30 16:35 - 2014-06-30 16:35 - 00001338 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2014-06-30 16:35 - 2014-06-30 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-06-30 16:35 - 2014-06-22 17:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-06-30 16:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-29 22:02 - 2014-05-29 19:49 - 00091985 _____ () C:\Windows\DirectX.log
2014-06-29 21:58 - 2014-06-29 21:58 - 00000209 _____ () C:\Users\Jan\Desktop\Castle Crashers.url
2014-06-29 20:12 - 2013-03-07 13:20 - 00000000 ____D () C:\ProgramData\Skype
2014-06-28 00:42 - 2014-06-28 00:42 - 00000000 ____D () C:\Users\Jan\Documents\Paradox Interactive
2014-06-28 00:39 - 2013-03-07 11:08 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-27 13:17 - 2014-06-27 13:17 - 00000209 _____ () C:\Users\Jan\Desktop\Europa Universalis IV.url
2014-06-26 02:50 - 2014-06-26 02:50 - 00276712 _____ () C:\Windows\Minidump\062614-6208-01.dmp
2014-06-22 18:45 - 2014-06-22 18:07 - 00000000 ____D () C:\Users\Jan\AppData\Local\Skyrim
2014-06-22 18:07 - 2013-03-11 13:12 - 00000000 ____D () C:\Users\Jan\Documents\My Games
2014-06-22 17:52 - 2014-04-29 23:04 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-06-22 17:48 - 2013-03-07 13:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-06-22 17:21 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-22 17:10 - 2014-06-22 17:10 - 00000000 ____D () C:\Users\Jan\Documents\Rockstar Games
2014-06-22 17:06 - 2014-06-22 17:06 - 00000000 __SHD () C:\ProgramData\SecuROM
2014-06-22 17:05 - 2014-06-22 17:05 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 __RHD () C:\Users\Jan\AppData\Roaming\SecuROM
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-06-22 17:05 - 2014-06-22 17:05 - 00000000 ____D () C:\Users\Jan\AppData\Local\Rockstar Games
2014-06-20 18:40 - 2013-03-11 13:12 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-20 14:18 - 2014-06-20 14:18 - 00000000 ____D () C:\Users\Jan\AppData\Local\My Games
2014-06-20 14:09 - 2014-05-29 20:12 - 00000000 ____D () C:\Users\Jan\AppData\Local\Ubisoft Game Launcher
2014-06-20 13:45 - 2014-06-20 13:45 - 00001205 _____ () C:\Users\Jan\Desktop\Uplay.lnk
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-06-20 13:45 - 2013-03-11 13:10 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

Some content of TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Jan\AppData\Local\Temp\raptrpatch.exe
C:\Users\Jan\AppData\Local\Temp\raptr_stub.exe
C:\Users\Jan\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-10 16:45

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-07-2014 01
Ran by Jan at 2014-07-16 10:58:19
Running from C:\Users\Jan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

ACP Application (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden
aioscnnr (x32 Version: 5.7.5.30 - Your Company Name) Hidden
aioscnnr (x32 Version: 7.6.11.10 - Your Company Name) Hidden
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (HKLM-x32\...\Steam App 219540) (Version:  - )
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.15.16 - Atheros Communications Inc.)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.3825 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
center (x32 Version: 6.2.5.0 - Eastman Kodak Company) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{D7ECDD70-EBAB-42AD-8BE3-2F4D1CEC70A7}) (Version: 0.92.79 - Dotjosh Studios)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Die Siedler 7 (HKLM-x32\...\{9C916142-C18C-429D-BFED-40094A7E0BEB}) (Version: 1.12.1396 - Ubisoft)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve )
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
essentials (x32 Version: 6.0.14.0 - Eastman Kodak Company) Hidden
Europa Universalis IV (HKLM-x32\...\Steam App 236850) (Version:  - Paradox Development Studio)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.2.430 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.2.430 - DVDVideoSoft Ltd.)
GhostMouse (HKLM-x32\...\GhostMouse_is1) (Version: Free V3.2.1 - ghost-mouse.com)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
GPS Master 2.0.14 (HKLM-x32\...\GPS Master_is1) (Version: 1.0 - GPS Master)
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar North)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Kodak AIO Printer (Version: 7.0.3.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.6.12.20 - Eastman Kodak Company)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.8 - Thibaut Lauziere)
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1010 - Marvell)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ Run Time  Lib Setup (HKLM-x32\...\{AAF4238F-7C29-451D-9925-C753271A5728}) (Version: 1.0.0 - Microsoft)
mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Port Royale 3 (HKLM-x32\...\{68DED384-1F74-4AEE-8B8E-95AF15572FE3}) (Version: 1.3.2.0 - Gaming Minds Studios GmbH)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.16.6 - Razer Inc.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.10 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
TomTom HOME (HKLM-x32\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version:  - Nadeo)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinMPG VideoConvert 9.2.2.0 (HKLM-x32\...\WinMPG VideoConvert_is1) (Version: 9.2.2.0 - Direct-Soft Inc.)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

20-06-2014 11:44:59 DirectX wurde installiert
22-06-2014 15:05:01 DirectX wurde installiert
22-06-2014 15:05:24 DirectX wurde installiert
22-06-2014 15:05:38 DirectX wurde installiert
22-06-2014 15:29:06 Installed Windows Live ID Sign-in Assistant
22-06-2014 15:29:31 Installed Microsoft Games for Windows - LIVE Redistributable
22-06-2014 15:47:48 Removed Windows Live ID Sign-in Assistant
22-06-2014 16:07:04 DirectX wurde installiert
29-06-2014 20:01:38 DirectX wurde installiert
10-07-2014 14:52:27 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4F41A7FD-4041-42A3-8134-C7C033EE1274} - System32\Tasks\SlimDrivers Startup => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24] (SlimWare Utilities, Inc.)
Task: {564564E4-8457-476D-9E23-D62A18BA7EBC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {78181057-8597-4347-91ED-ABFA303596F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-16] (Adobe Systems Incorporated)
Task: {8FD32EEB-DBCD-436F-A0E6-A65EC5FD5D3D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-30] (AVAST Software)
Task: {AEE57FE9-BF1C-426E-8994-7FD65CCB7113} - System32\Tasks\Rocket Updater => C:\Users\Jan\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Rocket Updater.job => C:\Users\Jan\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe

==================== Loaded Modules (whitelisted) =============

2014-04-17 21:55 - 2014-04-17 21:55 - 00082432 _____ () C:\AMD\amdacpusrsvc.exe
2013-03-11 13:10 - 2014-06-20 13:45 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-11-03 03:36 - 2000-01-01 02:00 - 00078456 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-11-03 03:36 - 2000-01-01 02:00 - 00386168 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-07-15 23:57 - 2014-07-15 23:57 - 02793472 _____ () C:\Program Files\AVAST Software\Avast\defs\14071501\algo.dll
2012-08-10 17:51 - 2012-08-10 17:51 - 00985088 _____ () D:\Programme\OpenOffice\program\libxml2.dll
2014-07-16 00:45 - 2014-07-16 00:45 - 03803760 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-06-15 15:38 - 2014-07-12 02:53 - 01116672 _____ () D:\Spiele\Steam\libavcodec-55.dll
2014-04-29 20:55 - 2014-07-12 02:53 - 00438784 _____ () D:\Spiele\Steam\libavutil-53.dll
2014-06-15 15:38 - 2014-07-12 02:53 - 00399360 _____ () D:\Spiele\Steam\libavformat-55.dll
2014-01-12 17:38 - 2014-07-12 02:53 - 00331264 _____ () D:\Spiele\Steam\libavresample-1.dll
2013-03-25 14:23 - 2014-06-27 00:40 - 00764416 _____ () D:\Spiele\Steam\SDL2.dll
2014-06-15 15:38 - 2014-07-12 02:53 - 02139328 _____ () D:\Spiele\Steam\video.dll
2014-06-15 15:38 - 2014-04-29 02:37 - 00519168 _____ () D:\Spiele\Steam\libswscale-2.dll
2013-02-25 08:39 - 2014-07-12 02:53 - 01116864 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2013-02-19 12:48 - 2014-05-02 01:35 - 20628160 _____ () D:\Spiele\Steam\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/16/2014 02:10:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16476, Zeitstempel: 0x5126e7ac
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0d3958f3
ID des fehlerhaften Prozesses: 0xeb4
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (07/16/2014 10:24:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
StarOpen

Error: (07/16/2014 10:24:11 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (07/16/2014 00:57:04 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
StarOpen

Error: (07/16/2014 00:56:58 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (07/16/2014 00:25:42 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
StarOpen

Error: (07/16/2014 00:25:36 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (07/16/2014 00:22:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "RBClientService" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 15000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/16/2014 00:22:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Update Deal Keeper" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/15/2014 11:56:23 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
StarOpen

Error: (07/15/2014 11:56:17 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.


Microsoft Office Sessions:
=========================
Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (07/16/2014 10:28:25 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (07/16/2014 02:10:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe9.0.8112.164765126e7acunknown0.0.0.000000000c00000050d3958f3eb401cfa088c3ea2771C:\Program Files (x86)\Internet Explorer\iexplore.exeunknowna2eed28e-0c7d-11e4-8344-902b345d99e5

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (07/16/2014 01:02:10 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (07/16/2014 00:30:19 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 16344.09 MB
Available physical RAM: 13789.53 MB
Total Pagefile: 32686.36 MB
Available Pagefile: 29851.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:49.52 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:678.73 GB) NTFS
Drive e: (The Settlers 7) (CDROM) (Total:5.18 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: CB0ED0BB)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: CB0ED0BF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

==================== End Of Log ============================