FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 01
Ran by Philipp Bartsch (administrator) on PHILIPPBARTSCH on 16-09-2013 09:33:28
Running from C:\Users\Philipp Bartsch\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\windows\SysWOW64\svchost.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Users\PHILIP~1\AppData\Local\Temp\RarSFX6\AutoInstallEJCDSVC.exe
() C:\Users\PHILIP~1\AppData\Local\Temp\RarSFX6\AutoEJCD.exe
() C:\windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\windows\system32\viakaraokesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Akamai Technologies, Inc.) C:\Users\Philipp Bartsch\AppData\Local\Akamai\netsession_win.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Spotify Ltd) C:\Users\Philipp Bartsch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Microsoft Corporation) C:\windows\System32\WScript.exe
(Akamai Technologies, Inc.) C:\Users\Philipp Bartsch\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Philipp Bartsch\AppData\Roaming\Windows Net Data\net.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
() C:\Program Files (x86)\Homelink 1202 WLAN\WpsCenterV.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Philipp Bartsch\AppData\Roaming\Spotify\spotify.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Philipp Bartsch\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-03-09] (AMD)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Philipp Bartsch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35256 2013-08-22] (Overwolf)
MountPoints2: E - E:\Setup.exe
MountPoints2: {3d700129-7301-11e2-b7e2-a2a253b0d7a2} - E:\Autorun.exe
MountPoints2: {8dac0c65-e6d9-11e1-95bf-806e6f6e6963} - F:\Setup.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5028464 2012-01-12] (VIA)
HKLM-x32\...\Run: [ZDWLan_Utility] - [x]
HKLM-x32\...\Run: [Homelink 1202 WLAN Software] - C:\Program Files (x86)\Homelink 1202 WLAN\WpsCenterV.exe [970752 2009-02-18] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll [ ] ()
Startup: C:\Users\Philipp Bartsch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Philipp Bartsch\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nmd.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&st=chrome&q=
SearchScopes: HKLM - DefaultScope {E8E51D67-4FFA-44E4-A01E-C5F3FE4FA8A3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {E8E51D67-4FFA-44E4-A01E-C5F3FE4FA8A3} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {E8E51D67-4FFA-44E4-A01E-C5F3FE4FA8A3} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1365948145943&tguid=43169-3580-1365948124600-484503&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://blekko.com/ws/?source=6a1885c1&tbp=rbox&toolbarid=blekkotb_002&u=41CE917D6626034D1020A04FE31D6813&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=1472f39c0000000000000019701ac8c4
SearchScopes: HKCU - {E8E51D67-4FFA-44E4-A01E-C5F3FE4FA8A3} URL =
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Philipp Bartsch\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Philipp Bartsch\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HomeTab - {96edaac7-6183-4cb5-8823-b8b12d94f967} - C:\Users\Philipp Bartsch\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.)
BHO-x32: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com)
Toolbar: HKLM-x32 - HomeTab - {96edaac7-6183-4cb5-8823-b8b12d94f967} - C:\Users\Philipp Bartsch\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default
FF NewTab: hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=1472f39c0000000000000019701ac8c4
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: Delta Search
FF Homepage: about:home
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Philipp Bartsch\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Delta Toolbar - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\ffxtlbr@delta.com
FF Extension: GutscheinCodes.de GutscheinFinder - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\jid0-hjoQNmABq6jg91jHpQyvgJUouUPjetpack
FF Extension: Complitly - Speed up your search with your personal search suggestions tool - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
FF Extension: FT DeepDark - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
FF Extension: HomeTab - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\{aa9cc3fa-a5e4-449b-aab5-1ebdbc7314ee}
FF Extension: DealPly - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
FF Extension: No Name - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\WTB_GLOBAL.sqlite
FF Extension: No Name - C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
==================== Services (Whitelisted) =================
R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AutoInstallEJCD; C:\Users\PHILIP~1\AppData\Local\Temp\RarSFX6\AutoInstallEJCDSVC.exe [16384 2009-02-18] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-05-26] ()
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-29] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-01-10] (VIA Technologies, Inc.)
==================== Drivers (Whitelisted) ====================
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-03] (Advanced Micro Devices Inc.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2013-02-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-10] (DT Soft Ltd)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2013-02-10] ()
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
R3 XN720V64; C:\Windows\System32\DRIVERS\WLANUHN.sys [558080 2012-08-16] (Atheros Communications, Inc.)
S3 ZDCNDIS6a64; C:\windows\system32\ZDCNDIS6a64.sys [41280 2012-08-16] (Printing Communications Assoc., Inc. (PCAUSA))
S3 ZDCNDIS6a64; C:\windows\system32\ZDCNDIS6a64.sys [41280 2012-08-16] (Printing Communications Assoc., Inc. (PCAUSA))
S3 X6va008; \??\C:\windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va010; \??\C:\windows\SysWOW64\Drivers\X6va010 [x]
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va012; \??\C:\windows\SysWOW64\Drivers\X6va012 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-16 09:33 - 2013-09-16 09:33 - 01951150 _____ (Farbar) C:\Users\Philipp Bartsch\Downloads\FRST64.exe
2013-09-16 09:27 - 2013-09-16 09:27 - 00000000 ____D C:\FRST
2013-09-16 08:30 - 2013-09-16 08:30 - 00000056 _____ C:\windows\setupact.log
2013-09-16 08:30 - 2013-09-16 08:30 - 00000000 _____ C:\windows\setuperr.log
2013-09-15 19:08 - 2012-08-28 07:27 - 00058536 _____ (Advanced Micro Devices) C:\windows\system32\Drivers\usbfilter.sys
2013-09-15 19:06 - 2013-09-15 19:06 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-15 19:06 - 2013-06-14 14:14 - 09890008 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsUStoricon.dll
2013-09-15 19:06 - 2013-06-14 14:14 - 00423640 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtsUStor.dll
2013-09-15 19:06 - 2013-06-14 14:14 - 00262872 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RtsUStor.sys
2013-09-15 19:04 - 2013-09-15 19:04 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\WinBatch
2013-09-15 18:45 - 2013-09-15 18:45 - 00004146 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\Freemium Driver Utilities
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-15 18:44 - 2013-09-16 08:35 - 00004244 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-09-15 18:44 - 2013-09-15 19:12 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Windows Net Data
2013-09-15 18:43 - 2013-09-16 08:37 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-09-15 18:43 - 2013-09-16 08:35 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-09-15 18:43 - 2013-09-15 19:26 - 00000000 ____D C:\Program Files (x86)\Web Check
2013-09-15 18:41 - 2013-09-15 18:42 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\DownloadGuide
2013-09-15 18:37 - 2013-09-15 18:37 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\DriverTuner
2013-09-15 16:12 - 2013-09-15 16:12 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Chromium
2013-09-13 16:46 - 2013-09-13 16:50 - 00000000 ____D C:\Users\Philipp Bartsch\Desktop\Neuer Ordner (2)
2013-09-12 15:54 - 2013-09-12 15:54 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-12 15:54 - 2013-09-12 15:54 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-12 03:12 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-12 03:12 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-12 03:12 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-12 03:12 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-12 03:12 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-12 03:12 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-12 03:12 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-12 03:12 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 03:11 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-12 03:11 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-12 03:11 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-12 03:11 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-12 03:11 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-12 03:11 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-12 03:11 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-12 03:11 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-12 03:11 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-12 03:11 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-12 03:11 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-12 03:11 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-12 02:05 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 02:05 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 02:05 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 02:05 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 02:05 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 02:05 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 02:05 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 02:05 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 02:05 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 02:05 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 02:05 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 02:05 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 02:05 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 02:05 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 02:05 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 02:05 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 02:05 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 02:05 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 02:05 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 02:05 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 02:05 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 02:05 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 02:05 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 02:05 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 02:05 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 02:05 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 02:05 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-09 15:24 - 2013-09-16 08:31 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Overwolf
2013-09-05 02:50 - 2013-09-15 22:28 - 00000000 ____D C:\Users\Philipp Bartsch\Desktop\Neuer Ordner
2013-08-31 11:13 - 2013-09-01 23:26 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand
2013-08-31 11:13 - 2013-08-31 11:13 - 00000000 __RHD C:\Users\Philipp Bartsch\AppData\Roaming\SecuROM
2013-08-29 20:24 - 2013-08-29 20:55 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\ESN Sonar
2013-08-29 19:41 - 2013-08-29 19:42 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\Battlefield 3
2013-08-29 19:34 - 2013-08-29 19:34 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\ESN
2013-08-29 19:34 - 2013-08-29 19:34 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-08-29 19:30 - 2013-08-29 19:30 - 00000000 ____D C:\ProgramData\EA Core
2013-08-29 19:29 - 2013-09-15 20:07 - 00283032 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-08-29 19:29 - 2013-08-29 19:46 - 00076888 _____ C:\windows\SysWOW64\PnkBstrA.exe
2013-08-28 20:16 - 2013-08-28 20:53 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-08-28 20:12 - 2013-08-30 16:15 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Origin
2013-08-28 20:12 - 2013-08-29 19:29 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Origin
2013-08-28 20:09 - 2013-09-01 23:22 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-28 20:09 - 2013-08-28 20:19 - 00000000 ____D C:\ProgramData\Origin
2013-08-22 21:42 - 2013-08-23 12:52 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\dragoon
2013-08-19 12:59 - 2013-08-19 12:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-09-16 09:33 - 2013-09-16 09:33 - 01951150 _____ (Farbar) C:\Users\Philipp Bartsch\Downloads\FRST64.exe
2013-09-16 09:31 - 2013-06-23 02:04 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Spotify
2013-09-16 09:27 - 2013-09-16 09:27 - 00000000 ____D C:\FRST
2013-09-16 09:23 - 2012-04-27 15:42 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Skype
2013-09-16 08:46 - 2012-04-27 17:26 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-16 08:38 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-16 08:38 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-16 08:37 - 2013-09-15 18:43 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-09-16 08:35 - 2013-09-15 18:44 - 00004244 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-09-16 08:35 - 2013-09-15 18:43 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-09-16 08:34 - 2013-05-05 13:54 - 01104045 _____ C:\windows\WindowsUpdate.log
2013-09-16 08:33 - 2012-04-27 14:44 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\TS3Client
2013-09-16 08:31 - 2013-09-09 15:24 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Overwolf
2013-09-16 08:30 - 2013-09-16 08:30 - 00000056 _____ C:\windows\setupact.log
2013-09-16 08:30 - 2013-09-16 08:30 - 00000000 _____ C:\windows\setuperr.log
2013-09-16 08:30 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-16 02:37 - 2012-04-29 14:16 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-15 22:55 - 2013-02-09 23:55 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-09-15 22:28 - 2013-09-05 02:50 - 00000000 ____D C:\Users\Philipp Bartsch\Desktop\Neuer Ordner
2013-09-15 21:03 - 2012-04-27 15:03 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\PMB Files
2013-09-15 21:03 - 2012-04-27 15:03 - 00000000 ____D C:\ProgramData\PMB Files
2013-09-15 20:07 - 2013-08-29 19:29 - 00283032 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-15 20:07 - 2012-07-07 15:46 - 00283032 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-09-15 19:38 - 2012-07-07 15:39 - 00283032 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-09-15 19:37 - 2013-04-19 23:20 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Winamp
2013-09-15 19:37 - 2012-04-28 15:33 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\CrashDumps
2013-09-15 19:37 - 2012-04-18 11:23 - 00000000 ____D C:\windows\Panther
2013-09-15 19:26 - 2013-09-15 18:43 - 00000000 ____D C:\Program Files (x86)\Web Check
2013-09-15 19:17 - 2011-04-12 09:43 - 00699868 _____ C:\windows\system32\perfh007.dat
2013-09-15 19:17 - 2011-04-12 09:43 - 00149750 _____ C:\windows\system32\perfc007.dat
2013-09-15 19:17 - 2009-07-14 07:13 - 01622164 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-15 19:12 - 2013-09-15 18:44 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Windows Net Data
2013-09-15 19:06 - 2013-09-15 19:06 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-15 19:06 - 2012-04-18 12:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-15 19:04 - 2013-09-15 19:04 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\WinBatch
2013-09-15 18:45 - 2013-09-15 18:45 - 00004146 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\Freemium Driver Utilities
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-09-15 18:45 - 2013-09-15 18:45 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-15 18:44 - 2012-04-27 14:23 - 00000000 ___RD C:\Users\Philipp Bartsch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-15 18:42 - 2013-09-15 18:41 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\DownloadGuide
2013-09-15 18:37 - 2013-09-15 18:37 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\DriverTuner
2013-09-15 16:12 - 2013-09-15 16:12 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Chromium
2013-09-14 00:46 - 2012-04-27 17:26 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 00:46 - 2012-04-27 17:26 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 00:46 - 2012-04-27 17:26 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 16:50 - 2013-09-13 16:46 - 00000000 ____D C:\Users\Philipp Bartsch\Desktop\Neuer Ordner (2)
2013-09-12 15:54 - 2013-09-12 15:54 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-12 15:54 - 2013-09-12 15:54 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-12 12:14 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-12 11:27 - 2012-04-27 14:23 - 00000000 ___RD C:\Users\Philipp Bartsch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 11:25 - 2009-07-14 06:45 - 00294880 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-12 03:11 - 2013-08-14 23:01 - 00000000 ____D C:\windows\system32\MRT
2013-09-12 03:11 - 2012-08-23 16:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-12 03:11 - 2012-07-07 15:42 - 01648846 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-09-12 03:08 - 2012-04-18 14:36 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-11 23:23 - 2013-06-23 02:05 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Spotify
2013-09-09 20:25 - 2012-04-29 03:40 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\vlc
2013-09-09 15:23 - 2012-04-27 14:43 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-09-08 16:30 - 2012-12-28 09:30 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\ArmA 2 OA
2013-09-03 11:04 - 2013-08-06 11:13 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-09-03 11:04 - 2013-08-06 11:01 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-09-03 11:04 - 2013-08-06 11:01 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-09-01 23:55 - 2013-02-24 18:55 - 00221696 ___SH C:\Users\Philipp Bartsch\Thumbs.db
2013-09-01 23:26 - 2013-08-31 11:13 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand
2013-09-01 23:22 - 2013-08-28 20:09 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-31 11:13 - 2013-08-31 11:13 - 00000000 __RHD C:\Users\Philipp Bartsch\AppData\Roaming\SecuROM
2013-08-30 16:15 - 2013-08-28 20:12 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Roaming\Origin
2013-08-29 21:00 - 2013-02-04 01:37 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-29 20:55 - 2013-08-29 20:24 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\ESN Sonar
2013-08-29 19:46 - 2013-08-29 19:29 - 00076888 _____ C:\windows\SysWOW64\PnkBstrA.exe
2013-08-29 19:42 - 2013-08-29 19:41 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\Battlefield 3
2013-08-29 19:41 - 2012-07-07 15:46 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\PunkBuster
2013-08-29 19:34 - 2013-08-29 19:34 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\ESN
2013-08-29 19:34 - 2013-08-29 19:34 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-08-29 19:30 - 2013-08-29 19:30 - 00000000 ____D C:\ProgramData\EA Core
2013-08-29 19:29 - 2013-08-28 20:12 - 00000000 ____D C:\Users\Philipp Bartsch\AppData\Local\Origin
2013-08-28 20:53 - 2013-08-28 20:16 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-08-28 20:19 - 2013-08-28 20:09 - 00000000 ____D C:\ProgramData\Origin
2013-08-24 13:45 - 2012-06-13 16:34 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\Fiesta
2013-08-23 12:52 - 2013-08-22 21:42 - 00000000 ____D C:\Users\Philipp Bartsch\Documents\dragoon
2013-08-20 17:27 - 2012-04-27 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-19 12:59 - 2013-08-19 12:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
Files to move or delete:
====================
C:\ProgramData\winiml.dat
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-12 12:07
==================== End Of Log ============================
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 01
Ran by Philipp Bartsch at 2013-09-16 09:38:05
Running from C:\Users\Philipp Bartsch\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Akamai NetSession Interface (HKCU)
Akamai NetSession Interface Service (x32)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD AVIVO64 Codecs (Version: 12.3.103.20309)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2012.1219.1521.27485)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
AMD Steady Video Plug-In (Version: 2.06.0000)
AMD VISION Engine Control Center (x32 Version: 2012.1219.1521.27485)
Anno 1701 (x32 Version: 1.00)
ARMA 2 (x32)
Arma 2: Operation Arrowhead (x32)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Battlefield 3™ (x32 Version: 1.6.0.0)
Battlelog Web Plugins (x32 Version: 2.1.7)
BattlEye for OA Uninstall (x32)
Bing Bar (x32 Version: 7.0.610.0)
Blacklight: Retribution (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
CCleaner (Version: 3.18)
Command & Conquer™ Alarmstufe Rot 3 Der Aufstand (x32 Version: 1.0.1.0)
Command and Conquer 3: Kane's Wrath (x32)
Command and Conquer 3: Tiberium Wars (x32)
Complitly (x32)
Counter-Strike: Global Offensive (x32)
Counter-Strike: Source (x32)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.46.1.0327)
DayZ Commander (x32 Version: 0.9.115)
DealPly (HKCU)
DealPly (x32 Version: )
Delta Chrome Toolbar (x32 Version: 1.0.0.0)
Delta toolbar (x32 Version: 1.8.10.0)
ESN Sonar (x32 Version: 0.70.4)
Fiesta Online DE 1.04.053 (x32 Version: 1.04.053)
Final Fantasy VII - Ultima Edition (x32)
Fraps (x32)
Free YouTube to MP3 Converter version 3.11.34.1015 (x32 Version: 3.11.34.1015)
Game Booster 3 (x32 Version: 3.4)
GIMP 2.6.12 (Version: 2.6.12)
HomeTab 2.7 (x32 Version: 2.7)
HydraVision (x32 Version: 4.2.230.0)
IM Lock (x32)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
League of Legends (x32 Version: 1.02.0000)
LOLReplay (x32 Version: 0.7.9.27)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
NVIDIA PhysX (x32 Version: 9.10.0513)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Origin (x32 Version: 9.3.2.2730)
Overwolf (x32 Version: 0.44.256)
Pando Media Booster (x32 Version: 2.6.0.7)
Platform (x32 Version: 1.39)
PunkBuster Services (x32 Version: 0.991)
Screenshot Captor 3.07.01 (x32)
SIW version 2011.10.29 (x32 Version: 2011.10.29)
Skype™ 6.6 (x32 Version: 6.6.106)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (Version: 3.0.12)
TeamViewer 8 (x32 Version: 8.0.19617)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VIA Plattform-Geräte-Manager (x32 Version: 1.39)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Winamp (x32 Version: 5.5 )
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
10-09-2013 15:03:30 Geplanter Prüfpunkt
12-09-2013 01:00:19 Windows Update
15-09-2013 16:42:45 Free Driver Scout
15-09-2013 17:03:57 DriverUtilities
15-09-2013 17:06:47 Installiert Realtek Card Reader
15-09-2013 17:15:03 Free Driver Scout
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {03861C1B-4E35-4B33-8607-BCFE794B1511} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0A9AF9A0-0F2B-45E9-B06B-929BDB129965} - System32\Tasks\DealPly => C:\Users\Philipp Bartsch\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-03-10] ()
Task: {230935F5-BA1B-4840-ADB2-E912713FA1BB} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-06-08] ()
Task: {3C367556-5966-4D95-96A8-7E87591E7E7F} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2013-01-16] (DealPly)
Task: {46E9C938-8BFC-4BF9-B846-63475CED2827} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-08-16] ()
Task: {52F52939-6A87-44F8-A023-2BA59D0ABA8C} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe
Task: {728F8486-7530-40AD-ACBC-8308F7988ACF} - System32\Tasks\{C3DB02D9-3F51-4043-84E5-833F5851D766} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.114.259/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {823964B2-54FD-49BA-86C6-6097B08F4179} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-09-15] ()
Task: {8D38614C-9C43-4516-96CB-C42CE828C49F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {A6BA21BA-3423-4346-BD63-9CD37F4C3259} - System32\Tasks\{5E89DBD2-82F7-4E86-AB16-9B6EBD84FDD1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.114.259/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {BEB20BD5-D3DE-4B0A-86B0-5684DE944BBA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {EE2DB935-3977-4292-B499-C8252823C30C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-14] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2012-03-09 00:19 - 2012-03-09 00:19 - 00242688 _____ (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll
2012-05-12 01:08 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2012-04-18 12:03 - 2012-01-12 15:21 - 00078448 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2012-04-18 12:03 - 2012-01-12 15:21 - 00386160 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2012-04-18 12:03 - 2012-01-12 15:21 - 02792560 _____ (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2012-04-18 12:03 - 2012-01-12 15:21 - 03820144 _____ (TODO: <Company name>) C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin1.dll
2012-12-19 16:16 - 2012-12-19 16:16 - 00327680 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2012-12-19 16:16 - 2012-12-19 16:16 - 00208896 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2012-12-19 16:32 - 2012-12-19 16:32 - 00037376 _____ (AMD) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\FUEL.ImplementationNet4.dll
2012-12-19 16:32 - 2012-12-19 16:32 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-12-19 16:19 - 2012-12-19 16:19 - 00028672 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2012-04-20 11:18 - 2013-09-09 15:23 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2012-04-20 11:18 - 2013-09-09 15:23 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2012-04-20 11:18 - 2013-09-09 15:23 - 00186344 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2012-04-20 11:18 - 2013-09-09 15:23 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-09-09 15:23 - 2013-09-09 15:23 - 00700904 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01435648 _____ (Microsoft Corporation) C:\windows\System32\Speech\Common\sapi.dll
2012-03-09 00:19 - 2012-03-09 00:19 - 00217088 _____ (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH.dll
2012-03-09 00:18 - 2012-03-09 00:18 - 00094208 _____ (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDeu.dll
2012-08-16 10:36 - 2009-02-18 08:50 - 00425984 _____ () C:\Program Files (x86)\Homelink 1202 WLAN\NICDLLV.dll
2012-08-16 10:36 - 2009-02-18 08:50 - 00921600 _____ (ZCOM) C:\Program Files (x86)\Homelink 1202 WLAN\Supplicant.dll
2012-08-15 15:05 - 2012-08-16 10:36 - 00094208 _____ (ZDC., Inc. (ZDC)) C:\windows\system32\ZDCN50.dll
2010-05-21 03:50 - 2010-05-21 03:50 - 00069632 _____ (Softwarebuero Jollans) C:\Windows\SysWow64\MLRUNT~1.DLL
2010-05-21 03:50 - 2010-05-21 03:50 - 01069984 _____ (Chilkat Software, Inc.) C:\Windows\SysWow64\ChilkatXml.dll
2010-05-21 03:50 - 2010-05-21 03:50 - 00888832 _____ (Chilkat Software, Inc.) C:\Windows\SysWow64\ChilkatCrypt2.dll
2013-06-21 09:53 - 2013-06-21 09:53 - 00088680 ____R (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.dll
2013-09-14 00:46 - 2013-09-14 00:46 - 16244616 ____R (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_174.ocx
2013-06-23 02:05 - 2013-07-09 17:38 - 24985600 _____ () C:\Users\Philipp Bartsch\AppData\Roaming\Spotify\Data\libcef.dll
2013-06-23 02:05 - 2013-07-09 17:38 - 09964032 _____ (The ICU Project) C:\Users\Philipp Bartsch\AppData\Roaming\Spotify\Data\icudt.dll
2013-08-19 12:59 - 2013-08-19 12:59 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-04-14 16:02 - 2012-10-31 00:37 - 01184768 _____ (Widdit) C:\Users\Philipp Bartsch\AppData\Roaming\Mozilla\Firefox\Profiles\qilpdmvz.default\extensions\{aa9cc3fa-a5e4-449b-aab5-1ebdbc7314ee}\plugins\npwiddit.dll
2013-04-14 16:02 - 2013-02-26 06:44 - 00144456 _____ (SimplyGen) C:\Users\Philipp Bartsch\AppData\Roaming\Complitly\Complitly.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/16/2013 08:32:06 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 07:30:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 07:11:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 02:24:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/14/2013 07:05:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 23.0.1.4974, Zeitstempel: 0x520bc252
Name des fehlerhaften Moduls: xul.dll, Version: 23.0.1.4974, Zeitstempel: 0x520bc166
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017af08
ID des fehlerhaften Prozesses: 0xdc4
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (09/14/2013 01:33:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/13/2013 10:25:14 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/12/2013 05:05:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Dwm.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc541
Name des fehlerhaften Moduls: uDWM.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5be06f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000014a5
ID des fehlerhaften Prozesses: 0xcbc
Startzeit der fehlerhaften Anwendung: 0xDwm.exe0
Pfad der fehlerhaften Anwendung: Dwm.exe1
Pfad des fehlerhaften Moduls: Dwm.exe2
Berichtskennung: Dwm.exe3
Error: (09/12/2013 11:26:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/11/2013 02:17:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (09/16/2013 08:30:48 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lirsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/16/2013 08:30:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/15/2013 07:29:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lirsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/15/2013 07:29:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/15/2013 07:10:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lirsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/15/2013 07:10:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (09/15/2013 07:08:44 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (09/15/2013 02:48:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/15/2013 02:48:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (09/15/2013 02:23:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lirsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Microsoft Office Sessions:
=========================
Error: (09/16/2013 08:32:06 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 07:30:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 07:11:32 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/15/2013 02:24:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/14/2013 07:05:35 PM) (Source: Application Error)(User: )
Description: firefox.exe23.0.1.4974520bc252xul.dll23.0.1.4974520bc166c00000050017af08dc401ceb16c739feb64C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dlldebad3b8-1d5f-11e3-b74f-fda92b21b8ae
Error: (09/14/2013 01:33:32 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/13/2013 10:25:14 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/12/2013 05:05:10 PM) (Source: Application Error)(User: )
Description: Dwm.exe6.1.7600.163854a5bc541uDWM.dll6.1.7600.163854a5be06fc000000500000000000014a5cbc01ceaf9a42e8ee8aC:\windows\system32\Dwm.exeC:\windows\system32\uDWM.dllb72003b0-1bbc-11e3-ae86-ec3fffef40ac
Error: (09/12/2013 11:26:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/11/2013 02:17:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-09-16 08:30:48.270
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-16 08:30:48.174
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-16 08:30:47.899
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-16 08:30:47.803
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:29:22.702
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:29:22.592
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:29:21.578
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:29:21.500
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:10:39.291
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-15 19:10:39.213
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 38%
Total physical RAM: 7677.41 MB
Available physical RAM: 4710.26 MB
Total Pagefile: 15353.01 MB
Available Pagefile: 12188.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:455.66 GB) (Free:227.03 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 5ED07466)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)
==================== End Of Log ============================
So korrekt? |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
