Computer "laggt" phasenweise!

Gigi-T · 16.11.2012, 18:02

Hallo,

Ich habe folgendes problem:
Seit ca 2 monaten habe ich immer wieder laggs und standbilder die sie auf den kompletten Pc auswirken, alles wird langsamer. (Fenster öffenen, seiten öffnen / schließen und in spielen bekomme ich standbilder und textur fehler hxxp://i.imgur.com/NNBjz.jpg). Wie lange sowas dauert ist unterschiedlich jedoch am ende werden alle ausgeführten aktionen (töne) auf einmal ausgeführt. Es passiert auch wenn ich keine games spiele und nur im i-net surfe. Malewarebytes und AVG konnten nichts entdecken ich hoffe ihr könnt mir weiter helfen.
MFG

Code:

ATTFilter

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Datenbank Version: v2012.11.15.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Gian Luca :: GIANLUCA-PC [Administrator]

16.11.2012 17:42:31
mbam-log-2012-11-16 (17-42-31).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 207807
Laufzeit: 5 Minute(n), 38 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Ich bin nicht sicher ob das etwas mit der sache zu tun hat aber immer wenn ich mit Malewarebytes einen kompletten scan machen will hängt sich das programm bei dem ordner Realtek auf...

schrauber · 19.11.2012, 08:00

Hi,

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. ( Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

ATTFilter

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
%windir%\installer\*. /5
%localappdata%\*. /5
CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Gigi-T · 25.11.2012, 11:30

Sorry das ich erst so spät antworte

aswMBR:

Code:

ATTFilter

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-11-25 11:09:49
-----------------------------
11:09:49.478    OS Version: Windows x64 6.1.7601 Service Pack 1
11:09:49.478    Number of processors: 4 586 0x403
11:09:49.478    ComputerName: GIANNI-PC  UserName: Gianni
11:09:52.284    Initialize success
11:09:52.392    AVAST engine defs: 12112500
11:10:47.459    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000005d
11:10:47.465    Disk 0 Vendor: ST1000DM 1AJ1 Size: 953869MB BusType: 11
11:10:47.488    Disk 0 MBR read successfully
11:10:47.493    Disk 0 MBR scan
11:10:47.500    Disk 0 Windows 7 default MBR code
11:10:47.509    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS       953868 MB offset 2048
11:10:47.528    Disk 0 scanning C:\Windows\system32\drivers
11:10:53.402    Service scanning
11:11:09.991    Modules scanning
11:11:09.996    Disk 0 trace - called modules:
11:11:10.073    ntoskrnl.exe CLASSPNP.SYS disk.sys amdxata.sys ACPI.sys storport.sys hal.dll amdsata.sys 
11:11:10.082    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ad8060]
11:11:10.090    3 CLASSPNP.SYS[fffff8800160143f] -> nt!IofCallDriver -> [0xfffffa8006b1cb80]
11:11:10.424    5 amdxata.sys[fffff880011557a8] -> nt!IofCallDriver -> [0xfffffa8006b1ed00]
11:11:10.428    7 ACPI.sys[fffff88000f407a1] -> nt!IofCallDriver -> \Device\0000005d[0xfffffa8006b1b420]
11:11:11.761    AVAST engine scan C:\Windows
11:11:16.224    AVAST engine scan C:\Windows\system32
11:13:09.922    AVAST engine scan C:\Windows\system32\drivers
11:13:39.489    AVAST engine scan C:\Users\Gianni
11:15:39.769    AVAST engine scan C:\ProgramData
11:16:04.341    Scan finished successfully
11:17:25.815    Disk 0 MBR has been saved successfully to "C:\Users\Gianni\Desktop\MBR.dat"
11:17:25.818    The log file has been saved successfully to "C:\Users\Gianni\Desktop\log1.txt"

OTL:

Code:

ATTFilter

OTL logfile created on: 25.11.2012 11:21:13 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Gianni\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 6,33 Gb Available Physical Memory | 79,19% Memory free
15,99 Gb Paging File | 14,05 Gb Available in Paging File | 87,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,51 Gb Total Space | 866,80 Gb Free Space | 93,05% Space Free | Partition Type: NTFS
 
Computer Name: GIANNI-PC | User Name: Gianni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.11.25 11:08:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
PRC - [2012.11.19 21:48:16 | 002,254,768 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
PRC - [2009.01.26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2012.09.28 15:43:40 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012.09.28 02:38:16 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2012.11.19 21:48:16 | 002,462,128 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.11.09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.09.28 03:21:20 | 010,697,216 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.09.28 02:12:52 | 000,460,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.02 10:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2011.08.23 14:57:24 | 000,565,352 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.07.29 04:40:00 | 000,079,104 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011.07.29 04:40:00 | 000,056,960 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011.07.06 11:12:50 | 000,367,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.12.22 02:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.10.07 11:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.10.07 11:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.06 08:01:12 | 000,015,872 | ---- | M] (ROCCAT Development, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ArvoFltr.sys -- (ArvoFltr)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2012.11.25 11:06:06 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2012.11.17 16:11:13 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2012.04.09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV - [2010.03.12 05:40:48 | 000,052,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys -- (AODDriver)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 75 6B 79 5F C2 C4 CD 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {2D0922E9-70CC-4fe9-8233-FE8AE66B61A1}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{2D0922E9-70CC-4fe9-8233-FE8AE66B61A1}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
IE - HKCU\..\SearchScopes\{6E16EA4D-F005-4cb2-A033-9E5B323CC839}: "URL" = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
IE - HKCU\..\SearchScopes\{BDBC1C92-F2B0-4211-BC17-9D6A3598CACF}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
 
 
========== Chrome  ==========
 
CHR - homepage: 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: 
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - Extension: Click to activate/deactivate ProxTube = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.5_0\
CHR - Extension: Google Drive = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: Google Mail = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - Startup: C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B14880B-2D53-48DA-8ADC-74E2CC5D30C8}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.25 11:08:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
[2012.11.25 11:08:45 | 004,732,416 | ---- | C] (AVAST Software) -- C:\Users\Gianni\Desktop\aswMBR.exe
[2012.11.20 12:51:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.11.20 12:51:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2012.11.17 23:36:04 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\hamachi.sys
[2012.11.17 23:35:32 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\LogMeIn Hamachi
[2012.11.17 23:28:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\.minecraft
[2012.11.17 23:00:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012.11.17 23:00:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.11.17 22:59:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012.11.17 22:56:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mojang
[2012.11.17 18:52:02 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\TS3Client
[2012.11.17 18:50:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012.11.17 18:23:04 | 000,000,000 | ---D | C] -- C:\Users\Gianni\Documents\My Curse
[2012.11.17 18:22:55 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
[2012.11.17 18:13:42 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Skype
[2012.11.17 18:13:34 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2012.11.17 18:13:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.11.17 18:13:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012.11.17 18:13:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2012.11.17 18:04:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2012.11.17 18:04:26 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2012.11.17 16:53:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2012.11.17 16:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net
[2012.11.17 16:36:32 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.11.17 16:36:31 | 000,370,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.11.17 16:36:28 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.11.17 16:36:27 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.11.17 16:36:26 | 000,984,144 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.11.17 16:36:20 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.11.17 16:36:20 | 000,071,600 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.11.17 16:35:11 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.11.17 16:35:10 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.11.17 16:35:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012.11.17 16:35:02 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.11.17 16:34:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.11.17 16:34:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.11.17 16:34:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2012.11.17 16:11:28 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\AMD
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\ATI
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\ATI
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012.11.17 14:48:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2012.11.17 14:48:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.11.17 14:48:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2012.11.17 14:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2012.11.17 14:48:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012.11.17 14:47:31 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2012.11.17 14:46:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2012.11.17 14:07:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Microsoft Games
[2012.11.17 14:07:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\World of Warcraft
[2012.11.17 14:01:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2012.11.17 13:59:56 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012.11.17 13:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.11.17 13:53:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012.11.17 13:53:11 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Google
[2012.11.17 13:52:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Deployment
[2012.11.17 13:52:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Apps
[2012.11.17 13:47:33 | 000,000,000 | ---D | C] -- C:\Program Files\GIGABYTE
[2012.11.17 13:47:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Etron Technology
[2012.11.17 13:46:20 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2012.11.17 13:46:17 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2012.11.17 13:46:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2012.11.17 13:46:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2012.11.17 13:44:32 | 000,565,352 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2012.11.17 13:43:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Splashtop
[2012.11.17 13:41:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2012.11.17 13:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012.11.17 13:41:26 | 000,372,056 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64H.dll
[2012.11.17 13:41:26 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll
[2012.11.17 13:41:26 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll
[2012.11.17 13:41:26 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64H.dll
[2012.11.17 13:41:26 | 000,097,624 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64H.dll
[2012.11.17 13:41:26 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64H.dll
[2012.11.17 13:41:25 | 003,308,376 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64H.dll
[2012.11.17 13:41:25 | 000,426,328 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64H.dll
[2012.11.17 13:41:25 | 000,136,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64H.dll
[2012.11.17 13:41:25 | 000,118,104 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64H.dll
[2012.11.17 13:41:25 | 000,074,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64H.dll
[2012.11.17 13:41:21 | 002,604,376 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2012.11.17 13:41:20 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2012.11.17 13:41:20 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2012.11.17 13:41:20 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2012.11.17 13:41:20 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2012.11.17 13:41:14 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2012.11.17 13:41:14 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2012.11.17 13:41:14 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2012.11.17 13:41:14 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2012.11.17 13:41:14 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2012.11.17 13:41:13 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2012.11.17 13:41:07 | 002,132,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2012.11.17 13:41:07 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2012.11.17 13:41:00 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2012.11.17 13:40:55 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2012.11.17 13:40:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2012.11.17 13:40:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
[2012.11.17 13:39:59 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Splashtop
[2012.11.17 13:38:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
[2012.11.17 13:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gigabyte
[2012.11.17 13:38:54 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2012.11.17 13:38:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2012.11.17 13:35:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Searches
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012.11.17 13:34:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Identities
[2012.11.17 13:34:47 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Contacts
[2012.11.17 13:34:46 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012.11.17 13:34:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\VirtualStore
[2012.11.17 13:34:22 | 000,000,000 | --SD | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Videos
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Saved Games
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Pictures
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Music
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Links
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Favorites
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Downloads
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Documents
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Desktop
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Vorlagen
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Verlauf
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Temporary Internet Files
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Startmenü
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\SendTo
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Recent
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Netzwerkumgebung
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Lokale Einstellungen
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Videos
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Musik
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Eigene Dateien
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Bilder
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Druckumgebung
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Cookies
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Anwendungsdaten
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Anwendungsdaten
[2012.11.17 13:34:22 | 000,000,000 | -H-D | C] -- C:\Users\Gianni\AppData
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Temp
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Microsoft
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Media Center Programs
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.11.17 13:22:04 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012.11.17 13:19:22 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012.11.17 13:17:18 | 000,000,000 | ---D | C] -- C:\Program Files\INTERNET_EXPLORER
[2012.11.17 13:17:17 | 000,000,000 | ---D | C] -- C:\Windows\PANTHER
 
========== Files - Modified Within 30 Days ==========
 
[2012.11.25 11:17:25 | 000,000,512 | ---- | M] () -- C:\Users\Gianni\Desktop\MBR.dat
[2012.11.25 11:14:10 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 11:14:10 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 11:09:26 | 004,732,416 | ---- | M] (AVAST Software) -- C:\Users\Gianni\Desktop\aswMBR.exe
[2012.11.25 11:08:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
[2012.11.25 11:06:28 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.25 11:05:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.25 11:05:51 | 2145,296,383 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.25 00:58:10 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.20 07:07:20 | 003,974,166 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.20 07:07:20 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.20 07:07:20 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.20 07:07:20 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.20 07:07:20 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.19 00:11:18 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.11.19 00:11:18 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2012.11.18 11:26:06 | 000,275,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.11.17 18:50:20 | 000,001,967 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.17 18:50:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.11.17 18:23:02 | 000,000,000 | ---- | M] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012.11.17 18:22:55 | 000,000,318 | ---- | M] () -- C:\Users\Gianni\Desktop\Curse Client.appref-ms
[2012.11.17 18:13:34 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.11.17 18:04:28 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.11.17 16:34:39 | 000,001,267 | ---- | M] () -- C:\Users\Gianni\Desktop\Spybot - Search & Destroy.lnk
[2012.11.17 16:11:13 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys
[2012.11.17 16:11:13 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref
[2012.11.17 15:40:01 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2012.11.17 13:54:19 | 000,002,290 | ---- | M] () -- C:\Users\Gianni\Desktop\Google Chrome.lnk
[2012.11.17 13:52:26 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\ET6.lnk
[2012.11.17 13:43:37 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2012.11.17 13:24:11 | 000,207,887 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.11.17 13:24:11 | 000,207,887 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.11.17 13:17:49 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.10.30 23:51:07 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.10.30 23:50:59 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.10.30 23:50:30 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
 
========== Files Created - No Company Name ==========
 
[2012.11.25 11:17:25 | 000,000,512 | ---- | C] () -- C:\Users\Gianni\Desktop\MBR.dat
[2012.11.19 00:11:18 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.11.19 00:11:18 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2012.11.18 03:45:36 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012.11.18 03:37:42 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012.11.17 18:23:02 | 000,000,000 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012.11.17 18:22:55 | 000,000,318 | ---- | C] () -- C:\Users\Gianni\Desktop\Curse Client.appref-ms
[2012.11.17 18:13:34 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.11.17 18:04:28 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.11.17 16:36:33 | 000,001,967 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.17 16:36:20 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012.11.17 16:34:39 | 000,001,267 | ---- | C] () -- C:\Users\Gianni\Desktop\Spybot - Search & Destroy.lnk
[2012.11.17 15:40:01 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.11.17 14:50:11 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2012.11.17 14:50:11 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref
[2012.11.17 13:54:19 | 000,002,290 | ---- | C] () -- C:\Users\Gianni\Desktop\Google Chrome.lnk
[2012.11.17 13:53:18 | 000,001,110 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.17 13:53:16 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.17 13:52:26 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\ET6.lnk
[2012.11.17 13:47:34 | 000,031,272 | ---- | C] () -- C:\Windows\SysNative\AppleChargerSrv.exe
[2012.11.17 13:47:33 | 000,021,616 | ---- | C] () -- C:\Windows\SysNative\drivers\AppleCharger.sys
[2012.11.17 13:44:32 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2012.11.17 13:41:14 | 000,150,996 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2012.11.17 13:38:11 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2012.11.17 13:35:45 | 000,002,435 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
[2012.11.17 13:35:15 | 000,001,414 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.11.17 13:35:08 | 000,001,448 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.11.17 13:23:46 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.11.17 13:23:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.09.28 02:29:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.09.28 02:29:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.05.02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.11.19 17:00:02 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\.minecraft
[2012.11.17 13:55:05 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\Splashtop
[2012.11.25 01:36:27 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\TS3Client
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2012.07.31 16:46:28 | 000,000,000 | -H-D | M] -- C:\$AVG
[2012.11.17 13:34:46 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012.11.17 14:02:37 | 000,000,000 | ---D | M] -- C:\AMD
[2012.08.05 15:01:58 | 000,000,000 | ---D | M] -- C:\ATI
[2012.11.17 13:17:46 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012.07.31 16:03:07 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2012.09.13 17:59:52 | 000,000,000 | ---D | M] -- C:\Ka was der mist ist
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.11.17 18:04:26 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.11.20 12:51:01 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.11.17 23:00:25 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.07.31 16:03:07 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.11.17 13:34:12 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.11.25 11:22:34 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012.11.17 13:34:21 | 000,000,000 | R--D | M] -- C:\Users
[2012.11.19 06:15:35 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< %windir%\installer\*. /5 >
[2012.11.20 12:51:01 | 000,000,000 | ---D | M] -- C:\Windows\installer\{CAE017F8-C238-4397-879B-7FBB915D9457}
 
< %localappdata%\*. /5 >
[2012.11.25 11:08:50 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\Deployment
[2012.11.25 11:20:52 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\LogMeIn Hamachi
[2012.11.25 11:20:48 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\Temp

< End of report >

Extras:

Code:

ATTFilter

OTL Extras logfile created on: 25.11.2012 11:21:13 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Gianni\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 6,33 Gb Available Physical Memory | 79,19% Memory free
15,99 Gb Paging File | 14,05 Gb Available in Paging File | 87,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,51 Gb Total Space | 866,80 Gb Free Space | 93,05% Space Free | Partition Type: NTFS
 
Computer Name: GIANNI-PC | User Name: Gianni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{044E2629-E48B-4AC8-9A23-D93E1DBDF4F6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{08D020DC-88C5-4094-8977-47DA5C659781}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{1268852B-AFAB-4D94-B272-505D3F6CB1B8}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1BB86A31-23F7-450E-84F0-F81746AADB53}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{24CF12AC-412F-4CCE-847D-6AB15B828733}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{2FA47885-3192-46CA-BA67-E2C4DED2F56B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{336226F7-AC7B-4D1C-AC29-34BC62A80DD1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{4286BC9F-B07B-4B6C-B2DD-314212856CF7}" = rport=137 | protocol=17 | dir=out | app=system | 
"{4B38E97A-87D8-47F6-BC74-9693F040757C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{5AB6DF97-5A17-4A76-AF92-F0ED0D7E754F}" = rport=139 | protocol=6 | dir=out | app=system | 
"{7EE92416-1044-4355-A675-F56405CB986A}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{949403B6-E150-4BD9-AFAD-5912F9A47306}" = lport=445 | protocol=6 | dir=in | app=system | 
"{9F272ACB-9954-4FCC-8AD2-88D114CD9FC9}" = lport=138 | protocol=17 | dir=in | app=system | 
"{A1AFAC52-6B87-4AEB-9ACF-A075EBAB97E7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{A3AC83E6-71E2-4A6C-855B-24925D450654}" = lport=139 | protocol=6 | dir=in | app=system | 
"{A63096C0-6942-41E8-A089-D5C356DE07C8}" = lport=137 | protocol=17 | dir=in | app=system | 
"{B7EFA817-C913-431D-9F68-B14B4572262D}" = rport=445 | protocol=6 | dir=out | app=system | 
"{C26BA906-06AC-4F16-A11D-99C94D7FEE83}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E8A045C1-7083-4EEC-A245-0CB6E62FE5EA}" = rport=138 | protocol=17 | dir=out | app=system | 
"{E9428AB1-4DFE-43E3-A6BF-727AF348AB60}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{EC106D1E-77D4-4CEF-B748-D335919E6BF4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{F523C5D7-4056-48FF-AEDB-AB107B970DA5}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{F663E512-3FD0-4A0E-AAFA-7CD1BE289810}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0375A27C-ED03-4FBC-9777-A58D8481F9FA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{0DC909A9-53DE-4AD0-8E5D-081E9277B782}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{1E263E3E-F655-4013-8E77-9841C404EF6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{215A554A-298A-4AFE-AFE2-FB7219D3BE3E}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{32CD4055-1430-4CA4-BF4A-E8D2F39448AE}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{3636A916-E60C-4576-9574-E645B74CDE1D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{38BF1345-7301-4AF8-AE68-2D6DA1FCF814}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{427456A6-792E-49E2-8B54-60FEC47178FA}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{44BEDAD2-B455-4729-8BFB-B3EFE8AA5197}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{4E11072C-13E9-4D78-BEC2-E7D3CB28BECA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{5457E747-D1DF-4B20-94C6-6F7AE25DC2A7}" = protocol=6 | dir=out | app=system | 
"{5F3F106F-5965-4571-AF78-BE82BA7DCE87}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{6A34616A-0387-4A6F-B594-86522D832E17}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{752EA464-DAA2-4347-BE92-F669E728E63C}" = protocol=58 | dir=in | app=system | 
"{7AFF48DC-6100-4C05-B594-BE2EEA9F6693}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{8199C8D0-17D5-49F1-A70A-2380BA61DC5E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9D4BEF4E-69E9-409C-A012-C69A5CB581DE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{A0A2FDD7-4059-44FF-8D4E-CA5900B7CE86}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{A95D5F42-090A-4BA4-A233-510EADBF34A8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B835A3A3-196C-47D5-A7F4-9D7302BC46AF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{BD8BA983-F916-4756-93F0-9A13CF78BBFD}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{D626133D-11E0-416A-B9E6-6E5B3941F95E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{D812FCF9-B795-4C09-942D-99240377C8AA}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | 
"{DA9AA5C6-ED10-4555-AFEC-C37B573B3E84}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E3425EDE-1833-4CA1-826B-B1D1AE5904EF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FEE4E232-B315-4053-81E5-0842C1DE5127}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"TCP Query User{19E61260-C6F6-42BD-A174-7902F3C1AC26}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"TCP Query User{A79A8C4F-EA16-4880-A38B-5DDC8F4C2BD0}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"UDP Query User{60359492-5B78-4591-AF13-2A17DE9BE456}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"UDP Query User{D41AE460-EA92-4A79-BAFB-26E8C717BA23}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0407893F-352C-B182-E04A-A8C3333DA29B}" = AMD Drag and Drop Transcoding
"{042B10AA-8233-A9E0-4DEB-B7253C686DBB}" = AMD Fuel
"{0DCAB5DD-CC69-271A-CF03-F2BD6B60BD8A}" = AMD Media Foundation Decoders
"{46DA7FD9-8BC1-7BA8-98D1-27F46647871B}" = AMD Catalyst Install Manager
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{504184A2-1B0E-5D93-603A-517E93E7EDB3}" = AMD Accelerated Video Transcoding
"{57580625-C673-7FEA-8791-E84B7AAF5069}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1 
"{0F7A6FD0-87F5-FB5D-973C-CF604DE1BC6B}" = CCC Help Polish
"{1A9BE3D6-4D53-2C9D-B77D-562D85936B91}" = CCC Help Norwegian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{210DFA65-F805-1A2B-4F83-8E27279AE385}" = Catalyst Control Center Graphics Previews Common
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{29822CAD-C76A-0BEE-55F5-AAA524DA814F}" = CCC Help Greek
"{3A1293DF-7D09-BB0F-9576-EC47EE4A9362}" = CCC Help Italian
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.1102.1
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.1124.1
"{47416F0B-6589-591E-C6F8-4235D2230B14}" = Catalyst Control Center InstallProxy
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{625FC7D1-656D-1BEC-F86F-3EACAFDAA8FE}" = CCC Help English
"{7351EEF8-9D6C-5F46-5A19-F2C7456CE132}" = CCC Help German
"{7F172E34-4107-8964-6AEA-5051FFD265FF}" = CCC Help Portuguese
"{86095E92-1959-8364-920E-82E81F64F8FB}" = AMD VISION Engine Control Center
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89D05F35-933A-89C0-B935-C92BEE4229BD}" = CCC Help French
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{959E4378-CCA1-E4E4-2425-793DA92E8D95}" = CCC Help Czech
"{96BB3C67-4EB4-9757-E0C2-C0D2FE9053B1}" = CCC Help Turkish
"{974F4B73-2017-E174-9070-3F58F01B341F}" = CCC Help Danish
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{98E20A18-3C29-86FA-50B4-918C2B34A082}" = CCC Help Hungarian
"{9E2E5EB3-DC6E-9277-E9DB-13175E7DDA39}" = CCC Help Dutch
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAACC0A5-4382-04D0-C75E-0669C7B949B6}" = CCC Help Japanese
"{ACEF4078-9B86-2455-E18D-34D52D37D9D5}" = CCC Help Chinese Standard
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B55FB422-B803-11F5-5582-B3666EA1B9AC}" = Catalyst Control Center Localization All
"{B8010864-15F8-613B-20EF-AC35B14B3E0D}" = CCC Help Russian
"{C1342411-5A98-DE8A-5629-D0C518E1C280}" = CCC Help Finnish
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{CAE017F8-C238-4397-879B-7FBB915D9457}" = LogMeIn Hamachi
"{D08B4177-5160-6B66-8934-2F9012134D61}" = CCC Help Thai
"{D34A6029-FB1A-9EA8-A938-5393F82A3A00}" = CCC Help Korean
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3A09D13-4D40-3CF8-7D32-8BD55F8D1533}" = CCC Help Spanish
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2C35491-9323-3AE7-6023-6B4128045153}" = CCC Help Swedish
"{FC66A32F-1A57-AC5C-4F12-DAC2F4CB77A0}" = CCC Help Chinese Traditional
"avast" = avast! Free Antivirus
"Google Chrome" = Google Chrome
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.1124.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"LogMeIn Hamachi" = LogMeIn Hamachi
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"101a9f93b8f0bb6f" = Curse Client
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 23.11.2012 08:40:22 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.11.2012 09:26:20 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 23.11.2012 15:14:37 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.11.2012 16:07:35 | Computer Name = Gianni-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\spybot - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der
 Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 23.11.2012 16:07:52 | Computer Name = Gianni-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Spybot - Search & Destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files (x86)\Spybot - Search & Destroy\DelZip179.dll" in Zeile 8.  Der
 Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 24.11.2012 09:37:49 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.11.2012 09:50:56 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 24.11.2012 14:06:33 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 24.11.2012 17:47:50 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 25.11.2012 06:06:29 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 18.11.2012 06:24:47 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Skype Updater" wurde unerwartet beendet. Dies ist bereits 
1 Mal passiert.
 
Error - 18.11.2012 06:24:49 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "SBSD Security Center Service" wurde unerwartet beendet. Dies
 ist bereits 1 Mal passiert.
 
Error - 18.11.2012 06:24:50 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7038
Description = Der Dienst "avast! Antivirus" konnte sich nicht als "NT AUTHORITY\SYSTEM"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%50    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 18.11.2012 06:24:50 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "avast! Antivirus" wurde aufgrund folgenden Fehlers nicht
 gestartet:   %%1069
 
Error - 18.11.2012 06:51:53 | Computer Name = Gianni-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?18.?11.?2012 um 11:50:43 unerwartet heruntergefahren.
 
Error - 19.11.2012 01:19:27 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler 
beendet:   %%16405
 
Error - 20.11.2012 07:51:08 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7030
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver
 Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive
 Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
Error - 20.11.2012 07:51:13 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 LogMeIn Hamachi Tunneling Engine erreicht.
 
Error - 20.11.2012 07:51:13 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 24.11.2012 17:47:06 | Computer Name = Gianni-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?24.?11.?2012 um 22:42:13 unerwartet heruntergefahren.
 
 
< End of report >

schrauber · 25.11.2012, 13:59

Hi,

Logs sind unauffällig. Wann laggt der PC?

Gigi-T · 25.11.2012, 19:28

Das passiert ganz unterschiedlich, aber du solltest wissen das ich vor 1 woche meinen rechner neu aufgesetzt habe und seitdem war das problem weg nur gestern hat sich windows erneut aufgehängt deswegen habe ich nochmal gepostet

schrauber · 26.11.2012, 08:28

Downloade dir bitte Farbar's Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Gigi-T · 26.11.2012, 13:49

Code:

ATTFilter

Farbar Service Scanner Version: 09-11-2012
Ran by Gianni (administrator) on 26-11-2012 at 13:48:46
Running from "C:\Users\Gianni\Downloads"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2012-11-18 03:31] - [2012-10-03 18:56] - 1914248 ____A (Microsoft Corporation) 37608401DFDB388CAF66917F6B2D6FB0

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

schrauber · 26.11.2012, 16:14

Hardware kannst Du ausschliessen?
ISt es nur beim Online spielen oder auch so?

25.11.2012, 13:59	#4
schrauber /// the machine /// TB-Ausbilder	Computer "laggt" phasenweise! Hi, Logs sind unauffällig. Wann laggt der PC? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

26.11.2012, 16:14	#8
schrauber /// the machine /// TB-Ausbilder	Computer "laggt" phasenweise! Hardware kannst Du ausschliessen? ISt es nur beim Online spielen oder auch so? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Computer "laggt" phasenweise!

Plagegeister aller Art und deren Bekämpfung: Computer "laggt" phasenweise!