GVU-Trojaner nichteinmal abgesicherter Modus

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2013 (ATTENTION: FRST version is 27 days old)
Ran by SYSTEM at 09-04-2013 22:18:22
Running from I:\
Windows 7 Home Premium   (X86) OS Language: German Standard 
The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [AVMWlanClient] C:\Program Files\avmwlanstick\FRITZWLANMini.exe [283136 2007-02-02] (AVM Berlin)
HKLM\...\Run: [FreePDF Assistant] C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)
HKLM\...\Run: [Marine Aquarium Lite Search Scope Monitor] "C:\PROGRA~1\MARINE~1\bar\1.bin\57srchmn.exe" /m=2 /w /h [42536 2012-05-09] (MindSpark)
HKLM\...\Run: [MarineAquarium3Free_57 Browser Plugin Loader] C:\PROGRA~1\MARINE~1\bar\1.bin\57brmon.exe [30096 2012-05-09] (VER_COMPANY_NAME)
HKLM\...\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-05-20] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] "C:\hamachi\hamachi-2-ui.exe" --auto-start [x]
HKLM\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM\...\Run: [SMSTray] C:\Program Files\Samsung\EmoDio\SMSTray.exe [479232 2009-10-08] (SAMSUNG ELECTRONICS)
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] "H:\Elias\Progamme\iTunes\iTunesHelper.exe" [x]
HKU\Elias\...\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent [x]
HKU\Elias\...\Run: [DAEMON Tools Lite] "H:\Elias\Progamme\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKU\Elias\...\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-19] ()
HKU\Elias\...\Run: [PlayNC Launcher]  [x]
HKU\Elias\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\Elias\...\Policies\system: [LogonHoursAction] 2
HKU\Elias\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Elias\...\Winlogon: [Shell] explorer.exe,C:\Users\Elias\AppData\Roaming\AltShell.dat [33280 2011-11-17] ()
HKU\Judith\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]
HKU\Judith\...\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background [3882312 2008-12-02] (Microsoft Corporation)
HKU\Judith\...\Run: [PlayNC Launcher]  [x]
HKU\Judith\...\Run: [NCsoft Launcher] C:\program files\ncsoft\launcher\NCLauncher.exe /Minimized [43304 2013-04-06] (NCSOFT)
HKU\Judith\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\Judith\...\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent [x]
HKU\Judith\...\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKU\Judith\...\Run: [Google Update] "C:\Users\Elias\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]
HKU\Judith\...\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun [x]
HKU\Judith\...\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil10o_Plugin.exe -update plugin [x]
HKU\Judith\...\Policies\system: [LogonHoursAction] 2
HKU\Judith\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\samuel\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\samuel\...\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent [x]
HKU\samuel\...\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKU\samuel\...\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun [x]
HKU\samuel\...\Policies\system: [LogonHoursAction] 2
HKU\samuel\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\tim\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]
HKU\tim\...\Run: [PlayNC Launcher]  [x]
HKU\tim\...\Run: [NCsoft Launcher] C:\program files\ncsoft\launcher\NCLauncher.exe /Minimized [43304 2013-04-06] (NCSOFT)
HKU\tim\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\tim\...\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent [x]
HKU\tim\...\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKU\tim\...\Run: [Google Update] "C:\Users\Elias\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]
HKU\tim\...\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun [x]
HKU\tim\...\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe [x]
HKU\tim\...\Policies\system: [LogonHoursAction] 2
HKU\tim\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62
Startup: C:\ProgramData\Start Menu\Programs\Startup\BumpTop.lnk
ShortcutTarget: BumpTop.lnk -> C:\Program Files\BumpTop\BumpTop.exe (No File)
Startup: C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\samuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) ===================

2 AntiVirSchedulerService; "C:\Program Files\Avira\AntiVir Desktop\sched.exe" [86224 2012-09-05] (Avira Operations GmbH & Co. KG)
2 AntiVirService; "C:\Program Files\Avira\AntiVir Desktop\avguard.exe" [110032 2012-09-05] (Avira Operations GmbH & Co. KG)
2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [364544 2008-09-05] (AVM Berlin)
2 Dnscache; C:\Windows\System32\svchost.exe -k NetworkService [20992 2009-07-14] (Microsoft Corporation)
2 Hamachi2Svc; C:\hamachi\hamachi-2.exe -s [1385896 2012-06-27] (LogMeIn Inc.)
2 iWinTrusted; C:\Program Files\iWin Games\iWinTrusted.exe [78104 2010-01-21] (iWin Inc.)
2 MarineAquarium3Free_57Service; C:\PROGRA~1\MARINE~1\bar\1.bin\57barsvc.exe [42504 2012-05-09] (COMPANYVERS_NAME)
3 MozillaMaintenance; "C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe" [115168 2013-03-02] (Mozilla Foundation)
2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2011-12-15] ()
2 PnkBstrB; C:\Windows\system32\PnkBstrB.exe [107832 2012-11-17] ()
2 TeamViewer5; "C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe" -service [172328 2010-02-11] (TeamViewer GmbH)
2 Update-Service; C:\Windows\System32\UpdSvc.dll [114000 2011-12-11] (Joosoft.com GmbH)
2 Video downloader Updater; C:\Program Files\Video downloader\ExtensionUpdaterService.exe [188760 2013-03-14] ()
2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2012-08-28] ()

==================== Drivers (Whitelisted) ====================

2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [83392 2012-09-05] (Avira GmbH)
1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137928 2012-09-05] (Avira GmbH)
1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36000 2012-09-05] (Avira GmbH)
3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2008-09-05] (AVM Berlin)
1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [232512 2011-10-28] (DT Soft Ltd)
3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2008-09-05] (AVM GmbH)
3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-09-05] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-04-09 22:18 - 2013-04-09 22:18 - 00000000 ____D C:\FRST
2013-04-09 19:11 - 2013-04-09 19:14 - 00000000 ____D C:\Users\samuel\Desktop\alees email nwts
2013-04-06 19:35 - 2013-04-06 19:35 - 00000000 ____D C:\Users\samuel\AppData\Roaming\Avira
2013-04-06 19:30 - 2013-04-06 19:30 - 00000000 ____D C:\Users\samuel\AppData\Local\Macromedia
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Roaming\Mozilla
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Roaming\ATI
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Local\Mozilla
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Local\ATI
2013-04-06 19:23 - 2013-04-09 18:24 - 00000004 ____A C:\Users\Elias\AppData\Roaming\AltShell.ini
2013-04-05 17:24 - 2013-04-05 17:26 - 00000000 ____D C:\Users\Elias\Desktop\Bildschirm aufräumaktion
2013-04-05 17:23 - 2013-04-05 17:26 - 00000000 ____D C:\Users\Elias\Desktop\AION Privatserver
2013-04-04 20:32 - 2013-04-04 20:33 - 00001350 ____A C:\Users\Elias\Desktop\hl.exe - Verknüpfung.lnk
2013-04-04 17:58 - 2013-04-05 17:47 - 00000000 ____D C:\Users\Elias\Desktop\BOGY 2013
2013-03-28 19:10 - 2013-03-28 19:26 - 00000000 ____D C:\Users\Elias\Documents\BotaniculaSaves
2013-03-28 19:10 - 2013-03-28 19:10 - 00001871 ____A C:\Users\Public\Desktop\Botanicula.lnk
2013-03-28 19:10 - 2013-03-28 19:10 - 00000000 ____D C:\Program Files\Botanicula
2013-03-24 21:00 - 2013-04-09 21:05 - 00000356 ____A C:\Windows\Tasks\AmiUpdXp.job
2013-03-24 21:00 - 2013-03-24 21:00 - 00000000 ____D C:\Users\Elias\AppData\Local\SwvUpdater
2013-03-24 21:00 - 2013-03-24 21:00 - 00000000 ____D C:\Program Files\Video downloader
2013-03-22 20:52 - 2013-03-22 20:56 - 00004457 ____A C:\Users\Elias\Desktop\systemcheck(1).jar
2013-03-15 16:20 - 2013-02-12 04:32 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-03-15 15:53 - 2013-03-28 13:29 - 00000000 ____D C:\Users\Elias\Desktop\NWT 10ac
2013-03-13 20:33 - 2013-02-02 05:09 - 12321792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-03-13 20:33 - 2013-02-02 04:38 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-03-13 20:33 - 2013-02-02 04:31 - 01103872 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-03-13 20:33 - 2013-02-02 04:30 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-03-13 20:33 - 2013-02-02 04:30 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-03-13 20:33 - 2013-02-02 04:29 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-03-13 20:33 - 2013-02-02 04:27 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-03-13 20:33 - 2013-02-02 04:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-03-13 20:33 - 2013-02-02 04:26 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-03-13 20:33 - 2013-02-02 04:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-03-13 20:33 - 2013-02-02 04:25 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-03-13 20:33 - 2013-02-02 04:23 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-03-13 20:33 - 2013-02-02 04:23 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-03-13 20:33 - 2013-02-02 04:23 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-03-13 20:33 - 2013-02-02 04:20 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-03-13 20:32 - 2013-02-02 04:42 - 09738240 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-03-12 13:50 - 2013-03-12 13:50 - 00001627 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-03-12 13:49 - 2013-03-12 13:50 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-03-12 13:49 - 2013-03-12 13:49 - 00000000 ____D C:\Program Files\iPod

==================== One Month Modified Files and Folders ========

2013-04-09 21:05 - 2013-03-24 21:00 - 00000356 ____A C:\Windows\Tasks\AmiUpdXp.job
2013-04-09 21:05 - 2009-07-14 05:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-04-09 21:05 - 2009-07-14 05:39 - 86258499 ____A C:\Windows\setupact.log
2013-04-09 21:03 - 2010-01-12 19:11 - 01560928 ____A C:\Windows\WindowsUpdate.log
2013-04-09 20:37 - 2012-08-14 12:21 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-04-09 20:25 - 2012-02-12 19:08 - 00000000 ____D C:\Users\samuel\AppData\Roaming\Skype
2013-04-09 19:14 - 2013-04-09 19:11 - 00000000 ____D C:\Users\samuel\Desktop\alees email nwts
2013-04-09 18:44 - 2010-01-12 18:55 - 00005984 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-04-09 18:44 - 2010-01-12 18:55 - 00005984 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-04-09 18:27 - 2012-08-14 12:21 - 00691592 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-04-09 18:27 - 2012-08-14 12:21 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-04-09 18:24 - 2013-04-06 19:23 - 00000004 ____A C:\Users\Elias\AppData\Roaming\AltShell.ini
2013-04-09 18:24 - 2010-10-08 16:52 - 00000000 ____D C:\Users\Elias\AppData\Local\PMB Files
2013-04-09 18:22 - 2010-01-12 19:18 - 00393270 ____A C:\Windows\System32\PerfStringBackup.INI
2013-04-09 18:15 - 2009-12-25 14:26 - 00000000 ____D C:\Users\Elias\AppData\Roaming\Skype
2013-04-06 19:35 - 2013-04-06 19:35 - 00000000 ____D C:\Users\samuel\AppData\Roaming\Avira
2013-04-06 19:30 - 2013-04-06 19:30 - 00000000 ____D C:\Users\samuel\AppData\Local\Macromedia
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Roaming\Mozilla
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Roaming\ATI
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Local\Mozilla
2013-04-06 19:29 - 2013-04-06 19:29 - 00000000 ____D C:\Users\samuel\AppData\Local\ATI
2013-04-06 19:29 - 2010-04-07 13:29 - 00102424 ____A C:\Users\samuel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-04-06 19:01 - 2013-02-13 19:50 - 00001088 ____A C:\Users\Elias\Desktop\TeamSpeak 3 Client.lnk
2013-04-05 17:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\NDF
2013-04-05 17:57 - 2010-01-12 18:54 - 00056020 ____A C:\Windows\avmfwlanci.log
2013-04-05 17:47 - 2013-04-04 17:58 - 00000000 ____D C:\Users\Elias\Desktop\BOGY 2013
2013-04-05 17:26 - 2013-04-05 17:24 - 00000000 ____D C:\Users\Elias\Desktop\Bildschirm aufräumaktion
2013-04-05 17:26 - 2013-04-05 17:23 - 00000000 ____D C:\Users\Elias\Desktop\AION Privatserver
2013-04-05 17:25 - 2012-08-02 20:57 - 00000000 ____D C:\Users\Elias\Desktop\gns-crys
2013-04-04 20:33 - 2013-04-04 20:32 - 00001350 ____A C:\Users\Elias\Desktop\hl.exe - Verknüpfung.lnk
2013-04-04 19:06 - 2011-06-28 13:35 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-03-28 19:26 - 2013-03-28 19:10 - 00000000 ____D C:\Users\Elias\Documents\BotaniculaSaves
2013-03-28 19:10 - 2013-03-28 19:10 - 00001871 ____A C:\Users\Public\Desktop\Botanicula.lnk
2013-03-28 19:10 - 2013-03-28 19:10 - 00000000 ____D C:\Program Files\Botanicula
2013-03-28 13:29 - 2013-03-15 15:53 - 00000000 ____D C:\Users\Elias\Desktop\NWT 10ac
2013-03-24 21:00 - 2013-03-24 21:00 - 00000000 ____D C:\Users\Elias\AppData\Local\SwvUpdater
2013-03-24 21:00 - 2013-03-24 21:00 - 00000000 ____D C:\Program Files\Video downloader
2013-03-22 20:56 - 2013-03-22 20:52 - 00004457 ____A C:\Users\Elias\Desktop\systemcheck(1).jar
2013-03-16 18:15 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-03-16 14:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\DriverStore
2013-03-14 17:37 - 2009-08-11 14:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-03-13 20:34 - 2012-03-17 16:37 - 69796088 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-03-12 13:50 - 2013-03-12 13:50 - 00001627 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-03-12 13:50 - 2013-03-12 13:49 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-03-12 13:49 - 2013-03-12 13:49 - 00000000 ____D C:\Program Files\iPod
2013-03-12 13:49 - 2010-02-07 15:42 - 00000000 ____D C:\Program Files\Common Files\Apple


==================== Known DLLs (Whitelisted) =================


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-03-13 20:32:15
Restore point made on: 2013-03-15 21:13:22
Restore point made on: 2013-03-17 19:01:25
Restore point made on: 2013-03-24 19:32:44
Restore point made on: 2013-03-31 19:12:45
Restore point made on: 2013-04-09 18:29:23

==================== Memory info =========================== 

Percentage of memory in use: 11%
Total physical RAM: 4087.11 MB
Available physical RAM: 3602.04 MB
Total Pagefile: 4085.39 MB
Available Pagefile: 3603.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1948.7 MB

==================== Partitions =============================

1 Drive c: (BOOT) (Fixed) (Total:911.5 GB) (Free:738.69 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
2 Drive d: (RECOVER) (Fixed) (Total:20 GB) (Free:0 GB) FAT32
3 Drive e: (NAPOLEON_DISC2) (CDROM) (Total:7.91 GB) (Free:0 GB) UDF
7 Drive i: (KINGSTON) (Removable) (Total:14.89 GB) (Free:13.65 GB) FAT32
8 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

  Datentr„ger ###  Status         Gr”áe    Frei     Dyn  GPT
  ---------------  -------------  -------  -------  ---  ---
  Datentr„ger 0    Online          931 GB  6144 KB         
  Datentr„ger 1    Kein Medium        0 B      0 B         
  Datentr„ger 2    Kein Medium        0 B      0 B         
  Datentr„ger 3    Kein Medium        0 B      0 B         
  Datentr„ger 4    Online           14 GB      0 B         

Partitions of Disk 0:
===============

Datentr„ger-ID: F98D6E74

  Partition ###  Typ               GrӇe    Offset
  -------------  ----------------  -------  -------
  Partition 1    Prim„r             911 GB  1024 KB
  Partition 0    Erweitert           20 GB   911 GB
  Partition 2    Logisch             20 GB   911 GB

=========================================================

Disk: 0
Partition 1
Typ      : 07
Versteckt: Nein
Aktiv    : Ja

  Volume ###  Bst  Bezeichnung  DS     Typ         GrӇe    Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 1     C   BOOT         NTFS   Partition    911 GB  Fehlerfre          

=========================================================

Disk: 0
Partition 2
Typ      : 0B
Versteckt: Nein
Aktiv    : Nein

  Volume ###  Bst  Bezeichnung  DS     Typ         GrӇe    Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 2     D   RECOVER      FAT32  Partition     20 GB  Fehlerfre          

=========================================================

Partitions of Disk 4:
===============

Datentr„ger-ID: 00000000

  Partition ###  Typ               GrӇe    Offset
  -------------  ----------------  -------  -------
  Partition 1    Prim„r              14 GB  4032 KB

=========================================================

Disk: 4
Partition 1
Typ      : 0C
Versteckt: Nein
Aktiv    : Nein

  Volume ###  Bst  Bezeichnung  DS     Typ         GrӇe    Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 6     I   KINGSTON     FAT32  Wechselmed    14 GB  Fehlerfre          

=========================================================
============================== MBR Partition Table ==================

==============================
Partitions of Disk 0:
===============
Disk ID: F98D6E74

Partition 1:
=========
Hex: 8020210007FEFFFF0008000000D8EF71
Active: YES
Type: 07 (NTFS)
Size: 911 GB

Partition 2:
=========
Hex: 00FEFFFF0FFEFFFF4E10F07173498002
Active: NO
Type: OF (Extended)
Size: 20 GB

==============================
Partitions of Disk 4:
===============
Disk ID: 00000000

Partition 1:
=========
Hex: 00010C0F0C04A060801F000080C0DC01
Active: NO
Type: 0C
Size: 15 GB


Last Boot: 2013-04-04 17:42

==================== End Of Log ============================