Hallo,

seit einiger Zeit habe ich ein Problem mit meinem Laptop. Er beginnt aus dem nicht heraus langsam zu werden und "müllt" sich so zu sagen selbst zu. Das Problem tritt vermehrt auf, wenn ich im Internet surfe und z.B. Videos anschaue. Mittlerweile passiert es aber auch, dass der Rechner ohne Fremdeinwirkung anfängt irgendwas im Hintergrund zu tun.

Nach einiger Recherche hatte ich zunächst den Flash Player unter Verdacht. Das kann ich aber nun in soweit ausschließen als dass der Rechner eben auch im Ruhezustand nicht "zur Ruhe" kommt.

Virenscanner (Antivir und Avast - beide in der kostenlosen Version) finden nichts.

Auf dieses Forum bin ich gekommen nachdem ich einen genaueren Blick in meinen Taskmanager bzw. die Prozesse geworfen habe. Dort ist vor allem der dwm.exe Prozesse sehr auffällig. Dieser erzeugt nämlich auch das "zumüllen". Scheinbar kann in diesem Prozess ein Virus sitzen, den die Virenscanner nicht finden?
Ich bin ziemlich ratlos und hoffe, dass ihr mir weiterhelfen könnt.

Gut, nun bin ich eure Checkliste durchgegangen:

1) Defogger steht auf Disable.

2) OTL-Logfiles

OTL logfile created on: 26.06.2013 20:17:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\***\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16618)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,87 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 59,46% Memory free
7,73 Gb Paging File | 5,93 Gb Available in Paging File | 76,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,56 Gb Total Space | 400,28 Gb Free Space | 88,45% Space Free | Partition Type: NTFS
Drive D: | 12,90 Gb Total Space | 2,14 Gb Free Space | 16,56% Space Free | Partition Type: NTFS
Drive E: | 99,02 Mb Total Space | 77,22 Mb Free Space | 77,98% Space Free | Partition Type: FAT32
 
Computer Name: FRITZ-PC | User Name: Fritz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Users\***\Downloads\Defogger.exe ()
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programme\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
PRC - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Fritz\Downloads\Defogger.exe ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (ST2012_Svc) -- C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (Crawler.com)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe (Andrea Electronics Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (sp_rsdrv2) -- C:\Windows\SysNative\drivers\stflt.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (gfibto) -- C:\Windows\SysNative\drivers\gfibto.sys (GFI Software)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (SSPORT) -- C:\Windows\SysNative\drivers\SSPORT.sys (Samsung Electronics)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV - (RSUSBSTOR) -- C:\Windows\SysWOW64\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {8D087CA0-F198-41BC-964A-518F5E779CD3}
IE:64bit: - HKLM\..\SearchScopes\{8D087CA0-F198-41BC-964A-518F5E779CD3}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {8D087CA0-F198-41BC-964A-518F5E779CD3}
IE - HKLM\..\SearchScopes\{8D087CA0-F198-41BC-964A-518F5E779CD3}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {8D087CA0-F198-41BC-964A-518F5E779CD3}
IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_1&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={sear
IE - HKCU\..\SearchScopes\{8D087CA0-F198-41BC-964A-518F5E779CD3}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{F684C3EA-3C75-4EDB-9CDA-043778899E81}: "URL" = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
FF - prefs.js..extensions.enabledAddons: adblockpopups%40jessehakanen.net:0.7
FF - prefs.js..extensions.enabledAddons: https-everywhere%40eff.org:3.2.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.24 18:34:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.06.25 11:36:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.06.15 17:45:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.06.15 17:45:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.06.25 11:36:41 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.06.15 17:45:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.06.15 17:45:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2013.02.07 20:15:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2010.10.29 18:22:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2013.06.25 13:51:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\f0m4t8xb.default\extensions
[2013.05.29 10:21:59 | 000,000,000 | ---D | M] (HTTPS-Everywhere) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\f0m4t8xb.default\extensions\https-everywhere@eff.org
[2013.03.04 20:02:18 | 000,134,804 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\f0m4t8xb.default\extensions\adblockpopups@jessehakanen.net.xpi
[2013.05.09 11:11:40 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\f0m4t8xb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.05.18 21:41:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013.05.18 21:41:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.05.18 21:41:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013.05.18 21:41:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013.05.18 21:41:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.05.18 21:41:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U39 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Live® Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll
CHR - plugin: Java Deployment Toolkit 6.0.390.4 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Mail = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:64bit: - HKLM..\Run: [CDAServer] C:\Programme\Common Files\Common Desktop Agent\CDASrv.exe ()
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe (Realtek Semiconductor Corp.)
O4:64bit: - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4:64bit: - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O8:64bit: - Extra context menu item: add to &BOM - C:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta ()
O8 - Extra context menu item: add to &BOM - C:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta ()
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe File not found
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01E7D21B-1646-40FD-BA28-BFE985FADF45}: DhcpNameServer = 40.5.1.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{08412DBA-FBC3-4676-9204-0C710179EB18}: DhcpNameServer = 141.75.149.1 141.75.149.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2D9EBC35-C38B-452E-B8BA-7D290803DCBD}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.25 19:02:37 | 000,051,496 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\stflt.sys
[2013.06.25 19:02:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Spyware Terminator
[2013.06.25 19:02:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2013.06.25 19:02:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
[2013.06.25 19:02:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spyware Terminator
[2013.06.25 19:01:58 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.06.25 19:01:58 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.06.25 19:01:58 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.06.25 19:01:58 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.06.25 19:01:58 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.06.25 19:01:58 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.06.25 19:01:58 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.06.25 19:01:58 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.06.25 19:01:58 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.06.25 19:01:58 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.06.25 19:01:58 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.06.25 19:01:58 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.06.25 19:01:58 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.06.25 19:01:58 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.06.25 19:01:58 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.06.25 19:01:58 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.06.25 19:01:58 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.06.25 19:01:58 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.06.25 19:01:58 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.06.25 19:01:58 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.06.25 19:01:58 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.06.25 19:01:58 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.06.25 19:01:58 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.06.25 19:01:58 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.06.25 19:01:58 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.06.25 19:01:58 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.06.25 19:01:58 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.06.25 19:01:58 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.06.25 19:01:58 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.06.25 19:01:58 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.06.25 19:01:58 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.06.25 19:01:58 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.06.25 19:01:58 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.06.25 19:01:58 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.06.25 19:01:58 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.06.25 19:01:58 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.06.25 19:01:58 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.06.25 19:01:58 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.06.25 19:01:58 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.06.25 19:01:58 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.06.25 19:01:58 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.06.25 19:01:58 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.06.25 19:01:58 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.06.25 19:01:58 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.06.25 19:01:58 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.06.25 19:01:58 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.06.25 19:01:58 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.06.25 19:01:58 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.06.25 19:01:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.06.25 19:01:58 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.06.25 19:01:58 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.06.25 19:01:58 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.06.25 19:01:58 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.06.25 19:01:58 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.06.25 19:01:57 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.06.25 19:01:57 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.06.25 19:01:57 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.06.25 19:01:57 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.06.25 19:01:57 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.06.25 19:01:57 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.06.25 19:01:57 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.06.25 19:01:57 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.06.25 19:01:57 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.06.25 19:01:57 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.06.25 19:01:57 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.06.25 19:01:57 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.06.25 19:01:57 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.06.25 19:01:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.06.25 12:45:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Antivirus
[2013.06.25 11:37:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2013.06.25 11:37:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Aware Antivirus
[2013.06.25 11:36:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2013.06.25 11:36:39 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\adawarebp
[2013.06.25 11:36:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Browsing Protection
[2013.06.25 11:36:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\SecureSearch
[2013.06.25 11:35:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\LavasoftStatistics
[2013.06.25 11:34:10 | 000,014,456 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys
[2013.06.25 11:34:09 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Ad-Aware Antivirus
[2013.06.24 18:35:38 | 000,033,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013.06.24 18:35:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2013.06.24 18:35:37 | 000,378,432 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013.06.24 18:35:36 | 000,072,016 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2013.06.24 18:35:35 | 001,025,808 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013.06.24 18:35:35 | 000,064,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013.06.24 18:35:33 | 000,080,816 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013.06.24 18:35:32 | 000,287,840 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013.06.24 18:31:41 | 000,041,664 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2013.06.24 18:26:49 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013.06.24 18:22:27 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013.06.24 18:06:22 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe
[2013.06.24 11:48:20 | 000,021,984 | ---- | C] (Licensed for Gebhard Software) -- C:\Windows\SysNative\drivers\DRHARD64.sys
[2013.06.24 11:48:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dr. Hardware 2013
[2013.06.24 11:33:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\FreshDiagnose
[2013.06.23 10:16:03 | 149,029,376 | ---- | C] (COMODO) -- C:\Users\***\Desktop\cav_installer_3264_29.exe
[2013.06.15 17:45:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2013.06.12 14:54:59 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2013.06.12 14:54:59 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2013.06.12 14:54:54 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
[2013.06.12 14:54:54 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2013.06.12 14:54:45 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.06.12 14:54:37 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013.06.12 14:54:37 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2013.06.12 14:54:37 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013.06.12 14:54:36 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013.06.12 14:54:36 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2013.06.12 14:54:36 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2013.06.12 14:54:32 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.06.12 14:54:32 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.26 20:38:03 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.06.26 20:26:05 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.06.26 20:15:31 | 000,000,000 | ---- | M] () -- C:\Users\***\defogger_reenable
[2013.06.26 08:38:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.06.26 03:47:58 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.26 03:47:58 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.26 03:27:57 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.06.26 03:27:57 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.06.26 03:27:57 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.06.26 03:27:57 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.06.26 03:27:57 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.06.26 03:22:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.06.26 03:22:30 | 3112,587,264 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.25 19:02:37 | 000,051,496 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\stflt.sys
[2013.06.25 19:02:34 | 000,000,998 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
[2013.06.25 19:01:58 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.06.25 19:01:58 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.06.25 19:01:58 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.06.25 19:01:58 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.06.25 19:01:58 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.06.25 19:01:58 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.06.25 19:01:58 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.06.25 19:01:58 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.06.25 19:01:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.06.25 19:01:58 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.06.25 19:01:58 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.06.25 19:01:58 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.06.25 19:01:58 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.06.25 19:01:58 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.06.25 19:01:58 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.06.25 19:01:58 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.06.25 19:01:58 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.06.25 19:01:58 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.06.25 19:01:58 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.06.25 19:01:58 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.06.25 19:01:58 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.06.25 19:01:58 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.06.25 19:01:58 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.06.25 19:01:58 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.06.25 19:01:58 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.06.25 19:01:58 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.06.25 19:01:58 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.06.25 19:01:58 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.06.25 19:01:58 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.06.25 19:01:58 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.06.25 19:01:58 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.06.25 19:01:58 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.06.25 19:01:58 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.06.25 19:01:58 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.06.25 19:01:58 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.06.25 19:01:58 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.06.25 19:01:58 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.06.25 19:01:58 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.06.25 19:01:58 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.06.25 19:01:58 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.06.25 19:01:58 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.06.25 19:01:58 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.06.25 19:01:58 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.06.25 19:01:58 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.06.25 19:01:58 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.06.25 19:01:58 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.06.25 19:01:58 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.06.25 19:01:58 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.06.25 19:01:58 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.06.25 19:01:58 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.06.25 19:01:58 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.06.25 19:01:58 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.06.25 19:01:58 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.06.25 19:01:58 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013.06.25 19:01:58 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.06.25 19:01:58 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.06.25 19:01:57 | 003,958,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.06.25 19:01:57 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.06.25 19:01:57 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.06.25 19:01:57 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.06.25 19:01:57 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.06.25 19:01:57 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.06.25 19:01:57 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.06.25 19:01:57 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.06.25 19:01:57 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.06.25 19:01:57 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.06.25 19:01:57 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.06.25 19:01:57 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.06.25 19:01:57 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.06.25 19:01:57 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.06.25 11:34:32 | 000,014,456 | ---- | M] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys
[2013.06.24 22:00:01 | 000,000,298 | ---- | M] () -- C:\Windows\tasks\Synology Data Replicator 3-***-PC-***.job
[2013.06.24 18:35:38 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013.06.24 18:35:33 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013.06.24 18:02:42 | 000,387,872 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.06.23 10:22:03 | 149,029,376 | ---- | M] (COMODO) -- C:\Users\***\Desktop\cav_installer_3264_29.exe
[2013.06.23 10:19:59 | 117,478,104 | ---- | M] () -- C:\Users\***\Desktop\avast_free_antivirus_setup.exe
[2013.06.23 10:11:09 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll
[2013.06.23 10:11:09 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2013.06.12 04:26:25 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.06.12 04:26:25 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2013.06.26 20:15:31 | 000,000,000 | ---- | C] () -- C:\Users\***\defogger_reenable
[2013.06.25 19:02:34 | 000,000,998 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
[2013.06.25 19:01:58 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.06.25 19:01:58 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013.06.24 18:35:38 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013.06.24 18:35:34 | 000,189,936 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013.06.24 18:35:34 | 000,065,336 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013.06.24 18:35:33 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2013.06.24 11:48:20 | 000,014,760 | ---- | C] () -- C:\Windows\SysNative\drivers\DRHMSR64.sys
[2013.06.23 10:14:49 | 117,478,104 | ---- | C] () -- C:\Users\***\Desktop\avast_free_antivirus_setup.exe
[2013.06.03 19:20:40 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.13 18:06:15 | 000,002,846 | ---- | C] () -- C:\Users\***\.recently-used.xbel
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >
         

Extra

OTL Extras logfile created on: 26.06.2013 20:17:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\***\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16618)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,87 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 59,46% Memory free
7,73 Gb Paging File | 5,93 Gb Available in Paging File | 76,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,56 Gb Total Space | 400,28 Gb Free Space | 88,45% Space Free | Partition Type: NTFS
Drive D: | 12,90 Gb Total Space | 2,14 Gb Free Space | 16,56% Space Free | Partition Type: NTFS
Drive E: | 99,02 Mb Total Space | 77,22 Mb Free Space | 77,98% Space Free | Partition Type: FAT32
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A84B6FC2-15F0-418D-9C43-6AC8C73A3A4A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{F73DB563-7353-45F8-977D-AEF75A112EB4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01A854CF-1A76-415B-9B44-7B8EF6C14607}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ids.application.exe | 
"{09B02C73-9F39-483C-A9A7-C534C4AEC917}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ids.application.exe | 
"{0FEE6A00-D5AE-4AEB-B64A-C82062CC6BA4}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\idsalert.exe | 
"{19625F80-8049-4F11-B074-0E2056D3BE0C}" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe | 
"{3BFF0635-EA4A-4CCE-B0CC-39617DD4DB40}" = protocol=17 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe | 
"{494DF864-61CD-4A71-B90F-9FB81909B120}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ordersupplies.exe | 
"{4EC8AF01-3229-486E-A7F9-36BC7EA246F2}" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe | 
"{5A1D5AA1-2066-4DC4-B82D-7E9207A846C0}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\cdas2pc\cdas2pc.exe | 
"{80850D5F-9BAF-4981-808B-4EF730D50908}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd8\powerdvd8.exe | 
"{8A36CF00-FD25-4924-A6D1-A37CFBF5F77A}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\cdas2pc\cdas2pc.exe | 
"{9856FD26-C228-4270-B162-CF94131EC99E}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\idsalert.exe | 
"{A21E01D0-BD22-439E-8ED9-9B9C10890E75}" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminator.exe | 
"{A3EAEBAB-86DB-46E1-B430-5149755515DF}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe | 
"{AB41D48B-06F4-40BD-8F37-940CA8843A1E}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ordersupplies.exe | 
"{B04504E4-276D-4101-BE6D-7D6747A222D7}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 
"{B6996356-E04B-4776-8499-1A18F0BF509D}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe | 
"{BA1884D4-CCA2-4BAE-8399-D785D73BDAE6}" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminator.exe | 
"{DC7BAFD3-57F8-48FD-87E2-337C69B8CF47}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | 
"{FA9F819A-4BAA-4760-A23D-CCA43E83053A}" = protocol=6 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe | 
"TCP Query User{2DB4C08F-65C3-4873-B145-2C1C6F173DC2}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe | 
"TCP Query User{6EC1104A-7EB6-49DA-90FE-A94D640F123F}C:\program files (x86)\synology data replicator  3\backup.exe" = protocol=6 | dir=in | app=c:\program files (x86)\synology data replicator  3\backup.exe | 
"UDP Query User{0B15D634-82DD-4126-94F2-FFBF311F1471}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe | 
"UDP Query User{3AE25EE4-F4AA-4B22-B047-1383B99EF5D6}C:\program files (x86)\synology data replicator  3\backup.exe" = protocol=17 | dir=in | app=c:\program files (x86)\synology data replicator  3\backup.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{031A0E14-0413-4C97-9772-2639B782F46F}" = Common Desktop Agent
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FBBDC2C-0ED4-A201-7EA3-EE6A848F76D5}" = ccc-utility64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{68201122-5B1D-70CF-6B4B-AB7732A782A5}" = ATI Catalyst Install Manager
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0893F6E8-D9F5-6225-6C08-F05E509BB84A}" = CCC Help French
"{109F3C58-CC58-777F-B937-3347F0A6A5E5}" = CCC Help Danish
"{114B6A6A-3B55-7796-3250-AA3FC23743A9}" = CCC Help Czech
"{11D0053C-4160-6257-91F6-0EDBAD10B66B}" = CCC Help Spanish
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{24D188C8-4071-5F61-42AF-F45115DEC4AA}" = CCC Help Thai
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{28C70D19-6DE9-43EF-BFA3-342F4A11B727}" = LibreOffice 3.5
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"{32D95703-A0EC-C75C-1D49-542887F73B89}" = Catalyst Control Center Localization All
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{3718C4EC-BF5C-79FF-87FF-C08E8D21E052}" = CCC Help Chinese Standard
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3A057951-7CF8-BB44-C823-3E6E8AF6BFB7}" = CCC Help Chinese Traditional
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3BD8D466-E5ED-AE3D-A089-BBDDA1EA2AB5}" = CCC Help Greek
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{49404BCA-BC5F-519A-9822-07F4C0711C75}" = Catalyst Control Center Graphics Previews Vista
"{4C6C8AA5-24BD-6AEA-1091-7056CEC7E7C0}" = Catalyst Control Center Graphics Light
"{4D3D893B-51CF-E89A-D536-0A658AE46140}" = CCC Help Swedish
"{51119170-3D3F-B137-E735-AE9D315B5CF4}" = Catalyst Control Center Graphics Full Existing
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant
"{56736259-613E-4A3B-B428-6235F2E76F44}_is1" = Spyware Terminator 2012
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{68A0F54D-DB64-0ED9-C563-CE85C26CEE15}" = Catalyst Control Center Graphics Full New
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{75053DEE-4BE5-3C4B-3FFC-3DA37ADE0347}" = CCC Help Hungarian
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{77973724-A5B7-4A2A-CAB5-D6EEE02C06FC}" = CCC Help Korean
"{7A852BDE-016A-CDAC-1401-E99317CB956C}" = CCC Help Italian
"{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"{8132E9B3-7B40-8577-9CFE-8CB2DD0F21B3}" = ccc-core-static
"{84CE8562-9563-DEDA-FA31-F3BCF58B670B}" = CCC Help Polish
"{85E15059-42E9-4EAF-3CE9-17374870BA85}" = CCC Help German
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{935BEAF7-6AAC-18BA-A8FF-8198602502DA}" = CCC Help Portuguese
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9AA66F70-CCBB-8E9E-0D8D-59E23EF770A4}" = Catalyst Control Center Core Implementation
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A8F4F0BB-0A1C-3A5A-97B8-F7150725C173}" = CCC Help Turkish
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Deutsch
"{AE6FD3D5-6302-815B-B27D-61A2D296BD94}" = CCC Help Finnish
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C93CFC00-267B-3564-273A-E2061DCF0DD1}" = CCC Help Norwegian
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{D668BFA1-12CA-0692-D3BA-15CED8E126D2}" = CCC Help English
"{D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}" = Adobe Shockwave Player
"{E0897770-46C9-4322-AD44-8BFA6BE217B2}" = Catalyst Control Center - Branding
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E5D5AC01-2095-566B-D92F-759DA0CB382B}" = Catalyst Control Center Graphics Previews Common
"{E8CF5CE7-02DC-042B-70B8-4A47F394663A}" = Catalyst Control Center InstallProxy
"{EF15B806-FF50-B61F-490D-29373E8C0623}" = CCC Help Japanese
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FAEE8E0C-4D05-7079-2E05-23BB831BBA73}" = CCC Help Dutch
"{FDAB5C9C-76E1-E1D9-9CD6-9DAEFF8B9ECB}" = CCC Help Russian
"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.0
"avast" = avast! Free Antivirus
"Biet-O-Matic v2.14.8" = Biet-O-Matic v2.14.8
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"Mozilla Firefox 21.0 (x86 de)" = Mozilla Firefox 21.0 (x86 de)
"Mozilla Thunderbird 17.0.6 (x86 de)" = Mozilla Thunderbird 17.0.6 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Samsung CLP-410 Series" = Samsung CLP-410 Series
"Samsung Easy Printer Manager" = Samsung Easy Printer Manager
"Samsung Printer Live Update" = Samsung Printer Live Update
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.05.2013 18:39:04 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 02.05.2013 18:50:21 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 03.05.2013 18:34:39 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 03.05.2013 18:35:27 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 07.05.2013 18:34:44 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 07.05.2013 18:35:35 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 08.05.2013 22:17:02 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 08.05.2013 22:23:17 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 10.05.2013 18:34:35 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 10.05.2013 18:35:31 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 11.05.2013 18:34:06 | Computer Name = ***-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 11.05.2013 18:34:25 | Computer Name = ***-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
[ Hewlett-Packard Events ]
Error - 13.03.2012 12:54:37 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 13.03.2012 12:54:37 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 17.04.2012 04:21:31 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 17.04.2012 04:21:32 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 25.04.2012 12:10:13 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 25.04.2012 12:10:14 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 08.05.2012 06:29:48 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
HPSF

   bei HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender,
 RoutedEventArgs e)     bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object
 target, RoutedEventArgs routedEventArgs)     bei System.Windows.EventRoute.InvokeHandlersImpl(Object
 source, RoutedEventArgs args, Boolean reRaised)     bei System.Windows.UIElement.RaiseEventImpl(DependencyObject
 sender, RoutedEventArgs args)     bei System.Windows.UIElement.RaiseEvent(RoutedEventArgs
 e)     bei System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root,
 RoutedEvent routedEvent)     bei System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object
 root)     bei MS.Internal.LoadedOrUnloadedOperation.DoWork()     bei System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()

   bei System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()     bei System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object
 resizedCompositionTarget)     bei System.Windows.Media.MediaContext.AnimatedRenderMessageHandler(Object
 resizedCompositionTarget)     bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate
 callback, Object args, Boolean isSingleParameter)     bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object
 source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler)

 
Error - 25.06.2012 12:10:33 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 25.06.2012 12:10:33 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 02.10.2012 04:50:45 | Computer Name = ***-PC | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files (x86)\Hewlett-Packard\HP Support 
Framework\Logs\SystemInfoAA.xml" konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32
 errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String
 msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode
 mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   bei System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
[ System Events ]
Error - 24.06.2013 05:33:22 | Computer Name = ***-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Program
 Files (x86)\FreshDevices\FreshDiagnose\FreshIO.s nicht geladen. Wenden Sie sich
 an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 
Error - 24.06.2013 05:33:22 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "FreshIO" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%1275
 
Error - 24.06.2013 05:43:18 | Computer Name = ***-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Program
 Files (x86)\FreshDevices\FreshDiagnose\FreshIO.s nicht geladen. Wenden Sie sich
 an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 
Error - 24.06.2013 05:43:18 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "FreshIO" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%1275
 
Error - 24.06.2013 05:52:14 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Google Update Service (gupdate) erreicht.
 
Error - 24.06.2013 05:52:14 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 24.06.2013 09:15:25 | Computer Name = ***-PC | Source = iaStor | ID = 262153
Description = Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht
 geantwortet.
 
Error - 24.06.2013 12:46:59 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Cyberlink RichVideo Service(CRVS) erreicht.
 
Error - 24.06.2013 12:46:59 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Cyberlink RichVideo Service(CRVS)" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 25.06.2013 21:29:31 | Computer Name = ***-PC | Source = DCOM | ID = 10010
         

3) Gmer

Das Programm läuft leider nie durch und bringt den PC immer zum Absturz.


Über Ratschlägt würde ich mich wirklich sehr freuen!

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Scan.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST.txt


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-06-2013
Ran by *** (administrator) on 29-06-2013 11:56:50
Running from C:\Users\***\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTSVC.EXE
(AMD) C:\Windows\system32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
(Hewlett-Packard) C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP WIRELESS ASSISTANT\HPWAMAIN.EXE
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTUI.EXE
(Lavasoft) C:\PROGRAMDATA\AD-AWARE BROWSING PROTECTION\ADAWAREBP.EXE
(Hewlett-Packard Company) C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPQWMIEX.EXE
() C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPQTOASTER.EXE
(Advanced Micro Devices Inc.) C:\PROGRAM FILES (X86)\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC\MOM.EXE
(ATI Technologies Inc.) C:\PROGRAM FILES (X86)\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC\CCC.EXE
(Microsoft Corporation) C:\WINDOWS\SYSTEM32\TASKMGR.EXE
(Mozilla Corporation) C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [1883432 2009-11-03] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [5977600 2009-12-22] (Realtek Semiconductor)
HKLM\...\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe [995840 2009-10-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-11-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft)
HKLM-x32\...\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe [x]

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_1&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default
FF Homepage: https://www.google.de/
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: HTTPS-Everywhere - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\https-everywhere@eff.org
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\staged
FF Extension: adblockpopups - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 	"homepage":	"hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41",
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41", "hxxp://www.google.de/"
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll", No File
CHR Plugin: (				"name":	"Chrome Remote Desktop Viewer",) - 				"path":	"internal-remoting-viewer",
CHR Plugin: (				"name":	"Native Client",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll", No File
CHR Plugin: (				"name":	"Chrome PDF Viewer",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll", No File
CHR Plugin: (				"name":	"Adobe Acrobat",) - 				"path":	"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll", No File
CHR Plugin: (				"name":	"Google Earth Plugin",) - 				"path":	"C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll", No File
CHR Plugin: (				"name":	"Google Update",) - 				"path":	"C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll", No File
CHR Plugin: (				"name":	"Java(TM) Platform SE 6 U39",) - 				"path":	"C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll", No File
CHR Plugin: (				"name":	"Windows Live® Photo Gallery",) - 				"path":	"C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll", No File
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll", No File
CHR Plugin: (				"name":	"Java Deployment Toolkit 6.0.390.4",) - 				"path":	"C:\Windows\SysWOW64\npdeployJava1.dll", No File
CHR Plugin: (				"name":	"Shockwave for Director",) - 				"path":	"C:\Windows\system32\Adobe\Director\np32dsw.dll", No File
CHR Plugin: (				"name":	"Silverlight Plug-In",) - 				"path":	"c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll", No File
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-06-25] (GFI Software)
S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-06-25] (Windows (R) Win 7 DDK provider)
S3 FreshIO; \??\C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [x]
U3 pgloypow; \??\C:\Users\***\AppData\Local\Temp\pgloypow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-29 11:52 - 2013-06-29 11:55 - 01933572 ____A (Farbar) C:\Users\***\Downloads\FRST64.exe
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 15:10 - 2013-06-28 08:51 - 577195082 ____A C:\Windows\MEMORY.DMP
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-27 14:46 - 2013-06-28 18:56 - 00083296 ____A C:\Users\***\Desktop\Extras.Txt
2013-06-27 14:46 - 2013-06-28 18:50 - 00102550 ____A C:\Users\***\Desktop\OTL.Txt
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\***\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\***\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\***\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\***\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\***\defogger_reenable
2013-06-26 20:14 - 2013-06-26 20:15 - 00602112 ____A (OldTimer Tools) C:\Users\***\Downloads\OTL.exe
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\***\Downloads\Defogger.exe
2013-06-25 19:02 - 2013-06-27 19:01 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\***\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:01 - 2013-06-25 19:02 - 05049344 ____A (Crawler.com                                                 ) C:\Users\***\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 18:59 - 2013-06-25 20:43 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 14:03 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Local\adawarebp
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:35 - 2013-06-25 12:45 - 00000000 ____D C:\Users\***\AppData\Roaming\LavasoftStatistics
2013-06-25 11:34 - 2013-06-25 13:53 - 00000000 ____D C:\Users\***\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:33 - 2013-06-25 11:34 - 05577352 ____A (Lavasoft Limited) C:\Users\***\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-24 18:35 - 2013-06-27 23:16 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:35 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-06-24 18:35 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-06-24 18:31 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:22 - 2013-06-24 18:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 11:48 - 2013-06-24 12:05 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:48 - 2011-12-06 11:26 - 00014760 ____A C:\Windows\System32\Drivers\DRHMSR64.sys
2013-06-24 11:48 - 2011-11-03 18:05 - 00021984 ____A (Licensed for Gebhard Software) C:\Windows\System32\Drivers\DRHARD64.sys
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\***\Downloads\drh2013d.exe
2013-06-24 11:33 - 2013-06-24 11:43 - 00000000 ____D C:\Users\***\AppData\Roaming\FreshDiagnose
2013-06-23 10:16 - 2013-06-23 10:22 - 149029376 ____A (COMODO) C:\Users\***\Desktop\cav_installer_3264_29.exe
2013-06-23 10:14 - 2013-06-23 10:19 - 117478104 ____A C:\Users\***\Desktop\avast_free_antivirus_setup.exe
2013-06-15 17:45 - 2013-06-24 15:19 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-12 14:55 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 14:54 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 14:54 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 14:54 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 14:54 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 14:54 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 14:54 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 14:54 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 19:20 - 2013-06-29 11:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

==================== One Month Modified Files and Folders =======

2013-06-29 11:57 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-29 11:57 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-29 11:55 - 2013-06-29 11:52 - 01933572 ____A (Farbar) C:\Users\***\Downloads\FRST64.exe
2013-06-29 11:38 - 2011-02-07 19:43 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-29 11:26 - 2013-06-03 19:20 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-29 08:38 - 2011-02-07 19:43 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-29 06:45 - 2010-04-20 02:24 - 01434246 ____A C:\Windows\WindowsUpdate.log
2013-06-28 18:56 - 2013-06-27 14:46 - 00083296 ____A C:\Users\***\Desktop\Extras.Txt
2013-06-28 18:50 - 2013-06-27 14:46 - 00102550 ____A C:\Users\***\Desktop\OTL.Txt
2013-06-28 08:56 - 2010-01-24 00:31 - 00654400 ____A C:\Windows\System32\perfh007.dat
2013-06-28 08:56 - 2010-01-24 00:31 - 00130240 ____A C:\Windows\System32\perfc007.dat
2013-06-28 08:56 - 2009-07-14 07:13 - 01498742 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-28 08:51 - 2013-06-27 15:10 - 577195082 ____A C:\Windows\MEMORY.DMP
2013-06-28 08:51 - 2013-01-15 04:22 - 00002811 ____A C:\Windows\setupact.log
2013-06-28 08:51 - 2010-10-12 18:05 - 00000000 ____D C:\Windows\Minidump
2013-06-28 08:51 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-27 23:16 - 2013-06-24 18:35 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-27 19:01 - 2013-06-25 19:02 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\***\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\***\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\***\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\***\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\***\defogger_reenable
2013-06-26 20:15 - 2013-06-26 20:14 - 00602112 ____A (OldTimer Tools) C:\Users\***\Downloads\OTL.exe
2013-06-26 20:15 - 2010-10-12 00:33 - 00000000 ____D C:\users\***
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\***\Downloads\Defogger.exe
2013-06-26 08:46 - 2013-05-28 07:48 - 00000072 ____A C:\Users\Public\LMDebug.log
2013-06-26 04:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-26 03:22 - 2010-10-12 00:27 - 00318066 ____A C:\Windows\PFRO.log
2013-06-26 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-25 20:43 - 2013-06-25 18:59 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\***\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:01 - 05049344 ____A (Crawler.com                                                 ) C:\Users\***\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 14:03 - 2013-06-25 11:37 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 13:53 - 2013-06-25 11:34 - 00000000 ____D C:\Users\***\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 11:35 - 00000000 ____D C:\Users\***\AppData\Roaming\LavasoftStatistics
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Local\adawarebp
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:34 - 2013-06-25 11:33 - 05577352 ____A (Lavasoft Limited) C:\Users\***\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2010-01-23 17:16 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-24 22:00 - 2010-10-16 14:45 - 00000298 ____A C:\Windows\Tasks\Synology Data Replicator 3-***-PC-***.job
2013-06-24 18:36 - 2010-10-12 21:28 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:26 - 2013-06-24 18:22 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 18:03 - 2010-10-11 18:41 - 00093680 ____A C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-24 18:02 - 2011-02-24 08:04 - 00000000 ____D C:\Program Files\Kyocera
2013-06-24 18:02 - 2009-07-14 06:45 - 00387872 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-24 18:00 - 2010-01-23 17:37 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-06-24 15:19 - 2013-06-15 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-24 15:12 - 2011-07-04 14:40 - 00000000 ____D C:\Program Files\Paint.NET
2013-06-24 15:02 - 2011-06-14 16:17 - 00000000 ____D C:\Users\***\AppData\Roaming\IrfanView
2013-06-24 15:00 - 2012-05-21 13:34 - 00000000 ____D C:\Users\***\AppData\Roaming\inkscape
2013-06-24 14:58 - 2010-01-23 15:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\Public\Documents\Audible
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\***\Documents\Audible
2013-06-24 12:05 - 2013-06-24 11:48 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\***\Downloads\drh2013d.exe
2013-06-24 11:43 - 2013-06-24 11:33 - 00000000 ____D C:\Users\***\AppData\Roaming\FreshDiagnose
2013-06-24 07:49 - 2010-10-12 21:19 - 00000000 ____D C:\Users\***\AppData\Roaming\BOM
2013-06-23 10:22 - 2013-06-23 10:16 - 149029376 ____A (COMODO) C:\Users\***\Desktop\cav_installer_3264_29.exe
2013-06-23 10:19 - 2013-06-23 10:14 - 117478104 ____A C:\Users\***\Desktop\avast_free_antivirus_setup.exe
2013-06-23 10:12 - 2013-01-14 21:58 - 00000000 ____D C:\Users\***\Documents\RegistryBackUps
2013-06-23 10:11 - 2012-06-26 07:08 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-06-23 10:11 - 2010-10-12 16:20 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-13 03:02 - 2010-10-12 16:20 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 04:26 - 2012-05-14 16:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 04:26 - 2011-05-27 12:55 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 00:21

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-06-2013
Ran by *** at 2013-06-29 12:17:51
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Acrobat.com (x32 Version: 1.6.65)
Ad-Aware Browsing Protection (x32 Version: 1.0.1.106)
Adobe AIR (x32 Version: 3.7.0.2090)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Shockwave Player (x32 Version: 11.5.1.601)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Atheros Driver Installation Program (x32 Version: 5.0)
ATI Catalyst Install Manager (Version: 3.0.754.0)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Biet-O-Matic v2.14.8 (x32 Version: Biet-O-Matic v2.14.8)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full New (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Light (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center InstallProxy (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Localization All (x32 Version: 2009.1124.2131.38610)
CCC Help Chinese Standard (x32 Version: 2009.1124.2130.38610)
CCC Help Chinese Traditional (x32 Version: 2009.1124.2130.38610)
CCC Help Czech (x32 Version: 2009.1124.2130.38610)
CCC Help Danish (x32 Version: 2009.1124.2130.38610)
CCC Help Dutch (x32 Version: 2009.1124.2130.38610)
CCC Help English (x32 Version: 2009.1124.2130.38610)
CCC Help Finnish (x32 Version: 2009.1124.2130.38610)
CCC Help French (x32 Version: 2009.1124.2130.38610)
CCC Help German (x32 Version: 2009.1124.2130.38610)
CCC Help Greek (x32 Version: 2009.1124.2130.38610)
CCC Help Hungarian (x32 Version: 2009.1124.2130.38610)
CCC Help Italian (x32 Version: 2009.1124.2130.38610)
CCC Help Japanese (x32 Version: 2009.1124.2130.38610)
CCC Help Korean (x32 Version: 2009.1124.2130.38610)
CCC Help Norwegian (x32 Version: 2009.1124.2130.38610)
CCC Help Polish (x32 Version: 2009.1124.2130.38610)
CCC Help Portuguese (x32 Version: 2009.1124.2130.38610)
CCC Help Russian (x32 Version: 2009.1124.2130.38610)
CCC Help Spanish (x32 Version: 2009.1124.2130.38610)
CCC Help Swedish (x32 Version: 2009.1124.2130.38610)
CCC Help Thai (x32 Version: 2009.1124.2130.38610)
CCC Help Turkish (x32 Version: 2009.1124.2130.38610)
ccc-core-static (x32 Version: 2009.1124.2131.38610)
ccc-utility64 (Version: 2009.1124.2131.38610)
CCleaner (Version: 3.26)
Common Desktop Agent (Version: 1.62.0)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
CyberLink DVD Suite (x32 Version: 7.0.2216)
CyberLink MediaShow (x32 Version: 4.1.3419)
CyberLink PowerDVD 8 (x32 Version: 8.0.1.1110)
CyberLink YouCam (x32 Version: 3.0.2201)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0)
Google Earth Plug-in (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3)
HP Wireless Assistant (x32 Version: 3.50.9.1)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel® Matrix Storage Manager
Junk Mail filter update (x32 Version: 14.0.8089.726)
LibreOffice 3.5 (x32 Version: 3.5.3.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)
MSVCRT (x32 Version: 14.0.1468.721)
Power2Go (x32 Version: 6.0.3415)
PowerDirector (x32 Version: 7.0.3420)
Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6010)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30105)
Recovery Manager (x32 Version: 5.5.2214)
Samsung CLP-410 Series (x32 Version: 1.01 (01.05.2012))
Samsung Easy Printer Manager (x32 Version: 1.02.45.01(30.04.2012))
Samsung Printer Live Update (x32 Version: 1.01.00.04)
Spyware Terminator 2012 (x32 Version: 3.0.0.82)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 14.0.13.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

==================== Restore Points  =========================

23-06-2013 08:09:58 Installed Java 7 Update 25
24-06-2013 12:55:35 Removed Apple Application Support
24-06-2013 12:56:48 Removed Apple Software Update
24-06-2013 12:58:30 Konfiguriert EOS Capture 1.5
24-06-2013 13:02:24 Removed Java 7 Update 25
24-06-2013 13:02:51 Removed Java 7 Update 25
24-06-2013 13:03:45 Removed Java(TM) 6 Update 17 (64-bit)
24-06-2013 13:08:34 Removed Paint.NET v3.5.8
24-06-2013 13:13:03 Removed QuickTime
24-06-2013 13:20:01 Synology Data Replicator  3 wird entfernt
24-06-2013 15:59:25 Konfiguriert LabelPrint
24-06-2013 16:08:00 Removed LightScribe System Software.
24-06-2013 16:24:37 avast! Free Antivirus Setup
25-06-2013 05:36:36 Windows Update
25-06-2013 16:57:53 Windows Update

==================== Scheduled Tasks (whitelisted) =============

Task: {2603B60A-D13E-43AE-BFAF-C748E0A481DC} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {3834B0DF-EDE0-49BD-A0C1-90B3CA16376E} - System32\Tasks\Synology Data Replicator 3-***-PC-*** => C:\Program Files (x86)\Synology Data Replicator  3\Backup.exe No File
Task: {74BF8285-2CDB-468F-95D6-87C72CF4CA34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {82B88A3C-BBD7-4B12-927F-650CAC8DCE68} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {8C595751-1FA5-4716-8F28-72A1C89BAA50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {90CF4355-3D51-4881-8AAA-34E57B5E5EDE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {982BABEB-5380-4124-AB66-D66BD5452EC5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {B3E81DCC-3C94-4A24-9714-D7F3194C8AB6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {D024B64A-9028-406E-8FD3-0EAB8A5765B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Synology Data Replicator 3-***-PC-***.job => C:\Program Files (x86)\Synology Data Replicator  3\Backup.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/29/2013 01:05:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/28/2013 00:57:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/27/2013 01:12:06 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/26/2013 04:27:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/25/2013 02:01:47 PM) (Source: MsiInstaller) (User: ***-PC)
Description: Product: Ad-Aware Antivirus -- Error 1730. You must be an Administrator to remove this application. To remove this application, you can log on as an administrator, or contact your technical support group for assistance.

Error: (06/25/2013 02:00:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/25/2013 01:57:26 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (06/24/2013 06:13:05 PM) (Source: Microsoft-Windows-RestartManager) (User: ***-PC)
Description: Die Anwendung oder der Dienst "LightScribeService Direct Disc Labeling Service" konnte nicht neu gestartet werden.

Error: (06/24/2013 03:24:45 PM) (Source: Microsoft-Windows-RestartManager) (User: ***-PC)
Description: Die Anwendung oder der Dienst "SynoDrService" konnte nicht neu gestartet werden.

Error: (06/24/2013 03:17:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: QuickTime.qts_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5180f322
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6f11cc49
ID des fehlerhaften Prozesses: 0xf48
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3


System errors:
=============
Error: (06/28/2013 08:51:45 AM) (Source: BugCheck) (User: )
Description: 0x00000109 (0xa3a039d89a7f26f8, 0xb3b7465eecfd618a, 0xfffff80000b95080, 0x0000000000000002)C:\Windows\MEMORY.DMP062813-21060-01

Error: (06/28/2013 08:51:40 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ?28.?06.?2013 um 08:49:33 unerwartet heruntergefahren.

Error: (06/27/2013 03:10:19 PM) (Source: BugCheck) (User: )
Description: 0x00000109 (0xa3a039d89b1f4776, 0xb3b7465eed9d8448, 0xfffff880039de5c0, 0x0000000000000002)C:\Windows\MEMORY.DMP062713-21169-01

Error: (06/27/2013 03:10:16 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ?27.?06.?2013 um 15:08:13 unerwartet heruntergefahren.

Error: (06/26/2013 03:29:31 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (06/24/2013 06:46:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Cyberlink RichVideo Service(CRVS)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/24/2013 06:46:59 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Cyberlink RichVideo Service(CRVS) erreicht.

Error: (06/24/2013 03:15:25 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (06/24/2013 11:52:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/24/2013 11:52:14 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.


Microsoft Office Sessions:
=========================
Error: (06/29/2013 01:05:58 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (06/28/2013 00:57:55 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (06/27/2013 01:12:06 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (06/26/2013 04:27:39 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (06/25/2013 02:01:47 PM) (Source: MsiInstaller)(User: ***-PC)
Description: Product: Ad-Aware Antivirus -- Error 1730. You must be an Administrator to remove this application. To remove this application, you can log on as an administrator, or contact your technical support group for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (06/25/2013 02:00:55 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (06/25/2013 01:57:26 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (06/24/2013 06:13:05 PM) (Source: Microsoft-Windows-RestartManager)(User: ***-PC)
Description: 0LSSrvc.exeLightScribeService Direct Disc Labeling Service03026217817520

Error: (06/24/2013 03:24:45 PM) (Source: Microsoft-Windows-RestartManager)(User: ***-PC)
Description: 0SynoDrServicex64.exeSynoDrService03026217811520

Error: (06/24/2013 03:17:16 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.7601.175144ce792c4QuickTime.qts_unloaded0.0.0.05180f322c00000056f11cc49f4801ce70dd2342f010C:\Windows\syswow64\MsiExec.exeQuickTime.qts635cc217-dcd0-11e2-a32e-c80aa97f7595


CodeIntegrity Errors:
===================================
  Date: 2013-06-24 11:43:18.983
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:43:18.624
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:22.215
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:21.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.932
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.558
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 3957.86 MB
Available physical RAM: 2669.72 MB
Total Pagefile: 7913.9 MB
Available Pagefile: 6389.56 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.56 GB) (Free:399.47 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:12.9 GB) (Free:2.14 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: CB0F1A13)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
         

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Danke für die schnellen Antworten! Denkst du denn, dass der Rechner wirklich befallen ist?

Ich musste ComboFix 2x starten. Beim ersten Mal brach er etwa nach Stufe 3 ab und stürzte ab. Nach dem Neustart lief es heute Nacht dann allerdings durch.

Hier der ComboFix Log:

ComboFix 13-06-28.02 - *** 29.06.2013  21:24:19.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3958.2802 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\***\4.0
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-05-28 bis 2013-06-29  ))))))))))))))))))))))))))))))
.
.
2013-06-29 21:14 . 2013-06-29 21:14	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-06-28 10:42 . 2013-06-12 03:08	9552976	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{88492ACE-1758-4C49-9EB5-E483A9F4993E}\mpengine.dll
2013-06-26 01:16 . 2013-06-26 01:16	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2013-06-26 01:16 . 2013-06-26 01:16	--------	d-----w-	c:\windows\system32\wbem\en-US
2013-06-25 17:02 . 2013-06-25 17:02	51496	----a-w-	c:\windows\system32\drivers\stflt.sys
2013-06-25 17:02 . 2013-06-27 17:01	--------	d-----w-	c:\programdata\Spyware Terminator
2013-06-25 17:02 . 2013-06-25 17:02	--------	d-----w-	c:\users\***\AppData\Roaming\Spyware Terminator
2013-06-25 17:02 . 2013-06-25 17:02	--------	d-----w-	c:\program files (x86)\Spyware Terminator
2013-06-25 10:45 . 2013-06-25 10:45	--------	d-----w-	c:\programdata\Ad-Aware Antivirus
2013-06-25 09:37 . 2013-06-25 09:37	--------	d-----w-	c:\programdata\Lavasoft
2013-06-25 09:37 . 2013-06-25 12:03	--------	d-----w-	c:\program files (x86)\Ad-Aware Antivirus
2013-06-25 09:36 . 2013-06-25 09:36	--------	d-----w-	c:\programdata\Downloaded Installations
2013-06-25 09:36 . 2013-06-25 09:36	--------	d-----w-	c:\users\***\AppData\Local\adawarebp
2013-06-25 09:36 . 2013-06-25 09:36	--------	d-----w-	c:\programdata\Ad-Aware Browsing Protection
2013-06-25 09:36 . 2013-06-25 09:36	--------	d-----w-	c:\users\***\AppData\Roaming\SecureSearch
2013-06-25 09:35 . 2013-06-25 10:45	--------	d-----w-	c:\users\***\AppData\Roaming\LavasoftStatistics
2013-06-25 09:34 . 2013-06-25 09:34	14456	----a-w-	c:\windows\system32\drivers\gfibto.sys
2013-06-25 09:34 . 2013-06-25 11:53	--------	d-----w-	c:\users\***\AppData\Roaming\Ad-Aware Antivirus
2013-06-24 16:35 . 2013-05-09 08:59	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-06-24 16:35 . 2013-06-27 21:16	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-06-24 16:35 . 2013-05-09 08:59	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-06-24 16:35 . 2013-06-27 21:16	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-06-24 16:35 . 2013-05-09 08:59	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-06-24 16:35 . 2013-06-27 21:16	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-06-24 16:35 . 2013-05-09 08:59	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-06-24 16:35 . 2013-05-09 08:59	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-06-24 16:35 . 2013-05-09 08:58	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-06-24 16:31 . 2013-05-09 08:58	41664	----a-w-	c:\windows\avastSS.scr
2013-06-24 16:26 . 2013-06-24 16:26	--------	d-----w-	c:\program files\AVAST Software
2013-06-24 16:22 . 2013-06-24 16:26	--------	d-----w-	c:\programdata\AVAST Software
2013-06-24 16:06 . 2013-06-24 16:06	--------	d-----w-	c:\programdata\LightScribe
2013-06-24 09:48 . 2011-12-06 09:26	14760	----a-w-	c:\windows\system32\drivers\DRHMSR64.sys
2013-06-24 09:48 . 2011-11-03 16:05	21984	----a-w-	c:\windows\system32\drivers\DRHARD64.sys
2013-06-24 09:48 . 2013-06-24 10:05	--------	d-----w-	c:\program files (x86)\Dr. Hardware 2013
2013-06-24 09:33 . 2013-06-24 09:43	--------	d-----w-	c:\users\***\AppData\Roaming\FreshDiagnose
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
2013-06-15 15:45 . 2013-06-15 15:45	159744	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2013-06-15 15:45 . 2013-06-24 13:19	--------	d-----w-	c:\program files (x86)\QuickTime
2013-06-12 12:55 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-23 08:11 . 2012-06-26 05:08	867240	----a-w-	c:\windows\SysWow64\npdeployJava1.dll
2013-06-23 08:11 . 2010-10-12 14:20	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-06-13 01:02 . 2010-10-12 14:20	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-06-12 02:26 . 2012-05-14 14:03	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 02:26 . 2011-05-27 10:55	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 00:06 . 2010-10-11 17:03	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-15 03:00	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 03:00	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 03:00	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 03:00	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 03:00	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 03:00	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 09:52	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-10 06:01 . 2013-05-15 03:00	265064	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 03:00	983400	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 03:00	3153920	----a-w-	c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-05-15 554408]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
ezSharedSvc
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-14 02:26]
.
2013-06-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07 17:43]
.
2013-06-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07 17:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2009-12-22 5977600]
"RtkOSD"="c:\program files (x86)\Realtek\Audio\OSD\RtVOsd64.exe" [2009-10-13 995840]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2013-04-03 2777736]
"SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-04-03 3684488]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: add to &BOM - c:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF - ExtSQL: 2013-06-24 18:34; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-Search Protection - c:\programdata\Search Protection\SearchProtection.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-29  23:49:09
ComboFix-quarantined-files.txt  2013-06-29 21:49
.
Vor Suchlauf: 9 Verzeichnis(se), 429.349.982.208 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 430.243.680.256 Bytes frei
.
- - End Of File - - FE3D85CD7706DDB7AE04781B49565880
8F84284B2C573E8E1EE0154EACDD9701
         

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST Log bitte.

Hier wieder die neuen Logs:

ADW-Cleaner

# AdwCleaner v2.303 - Datei am 30/06/2013 um 09:47:07 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : *** - ***-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\***\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16618

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [1073 octets] - [30/06/2013 09:47:07]

########## EOF - C:\AdwCleaner[S1].txt - [1133 octets] ##########
         

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by *** on 30.06.2013 at 10:45:39,22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll



~~~ Folders

Successfully deleted: [Folder] "C:\Users\***\appdata\local\adawarebp"



~~~ FireFox

Emptied folder: C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\f0m4t8xb.default\minidumps [56 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.06.2013 at 12:06:03,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-06-2013 01
Ran by *** (administrator) on 30-06-2013 13:57:48
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTSVC.EXE
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTUI.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE
(Hewlett-Packard Company) C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPQWMIEX.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [1883432 2009-11-03] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [5977600 2009-12-22] (Realtek Semiconductor)
HKLM\...\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe [995840 2009-10-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-11-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default
FF Homepage: https://www.google.de/
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: HTTPS-Everywhere - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\https-everywhere@eff.org
FF Extension: adblockpopups - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 	"homepage":	"hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41",
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41", "hxxp://www.google.de/"
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll", No File
CHR Plugin: (				"name":	"Chrome Remote Desktop Viewer",) - 				"path":	"internal-remoting-viewer",
CHR Plugin: (				"name":	"Native Client",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll", No File
CHR Plugin: (				"name":	"Chrome PDF Viewer",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll", No File
CHR Plugin: (				"name":	"Adobe Acrobat",) - 				"path":	"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll", No File
CHR Plugin: (				"name":	"Google Earth Plugin",) - 				"path":	"C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll", No File
CHR Plugin: (				"name":	"Google Update",) - 				"path":	"C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll", No File
CHR Plugin: (				"name":	"Java(TM) Platform SE 6 U39",) - 				"path":	"C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll", No File
CHR Plugin: (				"name":	"Windows Live® Photo Gallery",) - 				"path":	"C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll", No File
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll", No File
CHR Plugin: (				"name":	"Java Deployment Toolkit 6.0.390.4",) - 				"path":	"C:\Windows\SysWOW64\npdeployJava1.dll", No File
CHR Plugin: (				"name":	"Shockwave for Director",) - 				"path":	"C:\Windows\system32\Adobe\Director\np32dsw.dll", No File
CHR Plugin: (				"name":	"Silverlight Plug-In",) - 				"path":	"c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll", No File
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-06-25] (GFI Software)
S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-06-25] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 FreshIO; \??\C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-30 12:06 - 2013-06-30 12:06 - 00001696 ____A C:\Users\***\Desktop\JRT.txt
2013-06-30 10:45 - 2013-06-30 10:45 - 00000000 ____D C:\Windows\ERUNT
2013-06-30 10:44 - 2013-06-30 10:45 - 00000000 ____D C:\JRT
2013-06-30 10:43 - 2013-06-30 10:43 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-06-30 10:04 - 2013-06-30 10:04 - 00001190 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-06-30 09:47 - 2013-06-30 09:51 - 00001200 ____A C:\AdwCleaner[S1].txt
2013-06-30 09:46 - 2013-06-30 09:46 - 00648201 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-06-29 23:49 - 2013-06-29 23:49 - 00018911 ____A C:\ComboFix.txt
2013-06-29 20:52 - 2013-06-29 20:52 - 00275016 ____A C:\Windows\Minidump\062913-19078-01.dmp
2013-06-29 20:19 - 2013-06-29 23:49 - 00000000 ____D C:\Qoobox
2013-06-29 20:19 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-29 20:19 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-29 20:19 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-29 20:12 - 2013-06-29 23:24 - 00000000 ____D C:\Windows\erdnt
2013-06-29 20:06 - 2013-06-29 20:07 - 05084379 ____R (Swearware) C:\Users\***\Desktop\ComboFix.exe
2013-06-29 12:23 - 2013-06-29 12:24 - 00053459 ____A C:\Users\***\Downloads\FRST.txt
2013-06-29 12:17 - 2013-06-29 12:28 - 00024290 ____A C:\Users\***\Downloads\Addition.txt
2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-29 11:52 - 2013-06-30 12:23 - 01933592 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 15:10 - 2013-06-29 20:52 - 527056010 ____A C:\Windows\MEMORY.DMP
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\***\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\***\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\***\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\***\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\***\defogger_reenable
2013-06-26 20:14 - 2013-06-26 20:15 - 00602112 ____A (OldTimer Tools) C:\Users\***\Downloads\OTL.exe
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\***\Downloads\Defogger.exe
2013-06-25 19:02 - 2013-06-27 19:01 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\***\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:01 - 2013-06-25 19:02 - 05049344 ____A (Crawler.com                                                 ) C:\Users\***\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 18:59 - 2013-06-25 20:43 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 14:03 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:35 - 2013-06-25 12:45 - 00000000 ____D C:\Users\***\AppData\Roaming\LavasoftStatistics
2013-06-25 11:34 - 2013-06-25 13:53 - 00000000 ____D C:\Users\***\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:33 - 2013-06-25 11:34 - 05577352 ____A (Lavasoft Limited) C:\Users\***\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-24 18:35 - 2013-06-27 23:16 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:35 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-06-24 18:35 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-06-24 18:31 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:22 - 2013-06-24 18:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 11:48 - 2013-06-24 12:05 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:48 - 2011-12-06 11:26 - 00014760 ____A C:\Windows\System32\Drivers\DRHMSR64.sys
2013-06-24 11:48 - 2011-11-03 18:05 - 00021984 ____A (Licensed for Gebhard Software) C:\Windows\System32\Drivers\DRHARD64.sys
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\***\Downloads\drh2013d.exe
2013-06-24 11:33 - 2013-06-24 11:43 - 00000000 ____D C:\Users\***\AppData\Roaming\FreshDiagnose
2013-06-23 10:16 - 2013-06-23 10:22 - 149029376 ____A (COMODO) C:\Users\***\Desktop\cav_installer_3264_29.exe
2013-06-23 10:14 - 2013-06-23 10:19 - 117478104 ____A C:\Users\***\Desktop\avast_free_antivirus_setup.exe
2013-06-15 17:45 - 2013-06-24 15:19 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-12 14:55 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 14:54 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 14:54 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 14:54 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 14:54 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 14:54 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 14:54 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 14:54 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 19:20 - 2013-06-30 13:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

==================== One Month Modified Files and Folders =======

2013-06-30 13:38 - 2011-02-07 19:43 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-30 13:26 - 2013-06-03 19:20 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-30 12:23 - 2013-06-29 11:52 - 01933592 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-06-30 12:06 - 2013-06-30 12:06 - 00001696 ____A C:\Users\***\Desktop\JRT.txt
2013-06-30 10:45 - 2013-06-30 10:45 - 00000000 ____D C:\Windows\ERUNT
2013-06-30 10:45 - 2013-06-30 10:44 - 00000000 ____D C:\JRT
2013-06-30 10:43 - 2013-06-30 10:43 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-06-30 10:08 - 2010-04-20 02:24 - 01459824 ____A C:\Windows\WindowsUpdate.log
2013-06-30 10:04 - 2013-06-30 10:04 - 00001190 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-06-30 10:03 - 2010-01-24 00:31 - 00654400 ____A C:\Windows\System32\perfh007.dat
2013-06-30 10:03 - 2010-01-24 00:31 - 00130240 ____A C:\Windows\System32\perfc007.dat
2013-06-30 10:03 - 2009-07-14 07:13 - 01498742 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-30 10:00 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-30 10:00 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-30 09:52 - 2013-01-15 04:22 - 00002923 ____A C:\Windows\setupact.log
2013-06-30 09:52 - 2011-02-07 19:43 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-30 09:52 - 2010-10-12 00:27 - 00319158 ____A C:\Windows\PFRO.log
2013-06-30 09:52 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-30 09:51 - 2013-06-30 09:47 - 00001200 ____A C:\AdwCleaner[S1].txt
2013-06-30 09:46 - 2013-06-30 09:46 - 00648201 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-06-29 23:49 - 2013-06-29 23:49 - 00018911 ____A C:\ComboFix.txt
2013-06-29 23:49 - 2013-06-29 20:19 - 00000000 ____D C:\Qoobox
2013-06-29 23:49 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default
2013-06-29 23:24 - 2013-06-29 20:12 - 00000000 ____D C:\Windows\erdnt
2013-06-29 23:18 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-29 23:09 - 2010-10-12 00:33 - 00000000 ____D C:\users\***
2013-06-29 20:52 - 2013-06-29 20:52 - 00275016 ____A C:\Windows\Minidump\062913-19078-01.dmp
2013-06-29 20:52 - 2013-06-27 15:10 - 527056010 ____A C:\Windows\MEMORY.DMP
2013-06-29 20:52 - 2010-10-12 18:05 - 00000000 ____D C:\Windows\Minidump
2013-06-29 20:07 - 2013-06-29 20:06 - 05084379 ____R (Swearware) C:\Users\***\Desktop\ComboFix.exe
2013-06-29 12:28 - 2013-06-29 12:17 - 00024290 ____A C:\Users\***\Downloads\Addition.txt
2013-06-29 12:24 - 2013-06-29 12:23 - 00053459 ____A C:\Users\***\Downloads\FRST.txt
2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-27 23:16 - 2013-06-24 18:35 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-27 19:01 - 2013-06-25 19:02 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\***\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\***\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\***\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\***\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\***\defogger_reenable
2013-06-26 20:15 - 2013-06-26 20:14 - 00602112 ____A (OldTimer Tools) C:\Users\***\Downloads\OTL.exe
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\***\Downloads\Defogger.exe
2013-06-26 08:46 - 2013-05-28 07:48 - 00000072 ____A C:\Users\Public\LMDebug.log
2013-06-26 04:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-26 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-25 20:43 - 2013-06-25 18:59 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\***\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:01 - 05049344 ____A (Crawler.com                                                 ) C:\Users\***\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 14:03 - 2013-06-25 11:37 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 13:53 - 2013-06-25 11:34 - 00000000 ____D C:\Users\***\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 11:35 - 00000000 ____D C:\Users\***\AppData\Roaming\LavasoftStatistics
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\***\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:34 - 2013-06-25 11:33 - 05577352 ____A (Lavasoft Limited) C:\Users\***\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2010-01-23 17:16 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-24 18:36 - 2010-10-12 21:28 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:26 - 2013-06-24 18:22 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 18:03 - 2010-10-11 18:41 - 00093680 ____A C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-24 18:02 - 2011-02-24 08:04 - 00000000 ____D C:\Program Files\Kyocera
2013-06-24 18:02 - 2009-07-14 06:45 - 00387872 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-24 18:00 - 2010-01-23 17:37 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-06-24 15:19 - 2013-06-15 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-24 15:12 - 2011-07-04 14:40 - 00000000 ____D C:\Program Files\Paint.NET
2013-06-24 15:02 - 2011-06-14 16:17 - 00000000 ____D C:\Users\***\AppData\Roaming\IrfanView
2013-06-24 15:00 - 2012-05-21 13:34 - 00000000 ____D C:\Users\***\AppData\Roaming\inkscape
2013-06-24 14:58 - 2010-01-23 15:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\Public\Documents\Audible
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\***\Documents\Audible
2013-06-24 12:05 - 2013-06-24 11:48 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\***\Downloads\drh2013d.exe
2013-06-24 11:43 - 2013-06-24 11:33 - 00000000 ____D C:\Users\***\AppData\Roaming\FreshDiagnose
2013-06-24 07:49 - 2010-10-12 21:19 - 00000000 ____D C:\Users\***\AppData\Roaming\BOM
2013-06-23 10:22 - 2013-06-23 10:16 - 149029376 ____A (COMODO) C:\Users\***\Desktop\cav_installer_3264_29.exe
2013-06-23 10:19 - 2013-06-23 10:14 - 117478104 ____A C:\Users\***\Desktop\avast_free_antivirus_setup.exe
2013-06-23 10:12 - 2013-01-14 21:58 - 00000000 ____D C:\Users\***\Documents\RegistryBackUps
2013-06-23 10:11 - 2012-06-26 07:08 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-06-23 10:11 - 2010-10-12 16:20 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-13 03:02 - 2010-10-12 16:20 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 04:26 - 2012-05-14 16:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 04:26 - 2011-05-27 12:55 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 00:21

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-06-2013 01
Ran by *** at 2013-06-30 13:59:32
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Acrobat.com (x32 Version: 1.6.65)
Ad-Aware Browsing Protection (x32 Version: 1.0.1.106)
Adobe AIR (x32 Version: 3.7.0.2090)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Shockwave Player (x32 Version: 11.5.1.601)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Atheros Driver Installation Program (x32 Version: 5.0)
ATI Catalyst Install Manager (Version: 3.0.754.0)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Biet-O-Matic v2.14.8 (x32 Version: Biet-O-Matic v2.14.8)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full New (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Light (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center InstallProxy (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Localization All (x32 Version: 2009.1124.2131.38610)
CCC Help Chinese Standard (x32 Version: 2009.1124.2130.38610)
CCC Help Chinese Traditional (x32 Version: 2009.1124.2130.38610)
CCC Help Czech (x32 Version: 2009.1124.2130.38610)
CCC Help Danish (x32 Version: 2009.1124.2130.38610)
CCC Help Dutch (x32 Version: 2009.1124.2130.38610)
CCC Help English (x32 Version: 2009.1124.2130.38610)
CCC Help Finnish (x32 Version: 2009.1124.2130.38610)
CCC Help French (x32 Version: 2009.1124.2130.38610)
CCC Help German (x32 Version: 2009.1124.2130.38610)
CCC Help Greek (x32 Version: 2009.1124.2130.38610)
CCC Help Hungarian (x32 Version: 2009.1124.2130.38610)
CCC Help Italian (x32 Version: 2009.1124.2130.38610)
CCC Help Japanese (x32 Version: 2009.1124.2130.38610)
CCC Help Korean (x32 Version: 2009.1124.2130.38610)
CCC Help Norwegian (x32 Version: 2009.1124.2130.38610)
CCC Help Polish (x32 Version: 2009.1124.2130.38610)
CCC Help Portuguese (x32 Version: 2009.1124.2130.38610)
CCC Help Russian (x32 Version: 2009.1124.2130.38610)
CCC Help Spanish (x32 Version: 2009.1124.2130.38610)
CCC Help Swedish (x32 Version: 2009.1124.2130.38610)
CCC Help Thai (x32 Version: 2009.1124.2130.38610)
CCC Help Turkish (x32 Version: 2009.1124.2130.38610)
ccc-core-static (x32 Version: 2009.1124.2131.38610)
ccc-utility64 (Version: 2009.1124.2131.38610)
CCleaner (Version: 3.26)
Common Desktop Agent (Version: 1.62.0)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
CyberLink DVD Suite (x32 Version: 7.0.2216)
CyberLink MediaShow (x32 Version: 4.1.3419)
CyberLink PowerDVD 8 (x32 Version: 8.0.1.1110)
CyberLink YouCam (x32 Version: 3.0.2201)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0)
Google Earth Plug-in (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3)
HP Wireless Assistant (x32 Version: 3.50.9.1)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel® Matrix Storage Manager
Junk Mail filter update (x32 Version: 14.0.8089.726)
LibreOffice 3.5 (x32 Version: 3.5.3.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)
MSVCRT (x32 Version: 14.0.1468.721)
Power2Go (x32 Version: 6.0.3415)
PowerDirector (x32 Version: 7.0.3420)
Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6010)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30105)
Recovery Manager (x32 Version: 5.5.2214)
Samsung CLP-410 Series (x32 Version: 1.01 (01.05.2012))
Samsung Easy Printer Manager (x32 Version: 1.02.45.01(30.04.2012))
Samsung Printer Live Update (x32 Version: 1.01.00.04)
Spyware Terminator 2012 (x32 Version: 3.0.0.82)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 14.0.13.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

==================== Restore Points  =========================

24-06-2013 12:55:35 Removed Apple Application Support
24-06-2013 12:56:48 Removed Apple Software Update
24-06-2013 12:58:30 Konfiguriert EOS Capture 1.5
24-06-2013 13:02:24 Removed Java 7 Update 25
24-06-2013 13:02:51 Removed Java 7 Update 25
24-06-2013 13:03:45 Removed Java(TM) 6 Update 17 (64-bit)
24-06-2013 13:08:34 Removed Paint.NET v3.5.8
24-06-2013 13:13:03 Removed QuickTime
24-06-2013 13:20:01 Synology Data Replicator  3 wird entfernt
24-06-2013 15:59:25 Konfiguriert LabelPrint
24-06-2013 16:08:00 Removed LightScribe System Software.
24-06-2013 16:24:37 avast! Free Antivirus Setup
25-06-2013 05:36:36 Windows Update
25-06-2013 16:57:53 Windows Update
29-06-2013 18:19:36 ComboFix created restore point

==================== Scheduled Tasks (whitelisted) =============

Task: {3534823F-E9DF-40E9-BAAD-EC55235021AE} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {74BF8285-2CDB-468F-95D6-87C72CF4CA34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {82B88A3C-BBD7-4B12-927F-650CAC8DCE68} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {8C595751-1FA5-4716-8F28-72A1C89BAA50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {90CF4355-3D51-4881-8AAA-34E57B5E5EDE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {982BABEB-5380-4124-AB66-D66BD5452EC5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {B3E81DCC-3C94-4A24-9714-D7F3194C8AB6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {D024B64A-9028-406E-8FD3-0EAB8A5765B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-06-29 23:08:53.955
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 23:08:50.274
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:43:18.983
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:43:18.624
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:22.215
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:21.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.932
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.558
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 3957.86 MB
Available physical RAM: 2782.29 MB
Total Pagefile: 7913.9 MB
Available Pagefile: 6665.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.56 GB) (Free:400.54 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:12.9 GB) (Free:2.14 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: CB0F1A13)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
         

Schon besser, noch nen Onlinescan zur Kontrolle


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST Log bitte. Noch Probleme?

Das Problem ist auf jeden Fall schon besser, also der Rechner insgesamt wieder schneller. Allerdings hakt vor allem der Firefox immer noch ab und zu. Jetzt z.B. habe ich nach einem Neustart nur den Firefox gestartet um hier zu antworten und der TaskManager zeigt eine CPU Auslastung von rund 80%. Die größten Prozesse sind weiterhin Firefox, dwm und der Explorer.

ESET

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c5f1b553b5503843943154f928b0f50f
# engine=14209
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-01 12:27:11
# local_time=2013-07-01 02:27:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 270667 149348303 0 0
# compatibility_mode=5893 16776573 100 94 54473 124268281 0 0
# compatibility_mode=7937 16777214 28 75 458661 6852079 0 0
# scanned=165438
# found=0
# cleaned=0
# scan_time=39565
         

Security Check will irgendwie gar nicht

 UNSUPPORTED OPERATING SYSTEM! ABORTED!
         

FRST


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-06-2013 01
Ran by ** (administrator) on 01-07-2013 11:51:13
Running from C:\Users\**\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTSVC.EXE
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software) C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTUI.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE
(Hewlett-Packard Company) C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPQWMIEX.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [1883432 2009-11-03] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [5977600 2009-12-22] (Realtek Semiconductor)
HKLM\...\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe [995840 2009-10-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-11-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\**\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default
FF Homepage: https://www.google.de/
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\**\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: HTTPS-Everywhere - C:\Users\**\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\https-everywhere@eff.org
FF Extension: adblockpopups - C:\Users\**\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\**\AppData\Roaming\Mozilla\Firefox\Profiles\f0m4t8xb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 	"homepage":	"hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41",
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_1&ent=hp&u=E09865A38655C67B47B42451C9648D41", "hxxp://www.google.de/"
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll", No File
CHR Plugin: (				"name":	"Chrome Remote Desktop Viewer",) - 				"path":	"internal-remoting-viewer",
CHR Plugin: (				"name":	"Native Client",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll", No File
CHR Plugin: (				"name":	"Chrome PDF Viewer",) - 				"path":	"C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll", No File
CHR Plugin: (				"name":	"Adobe Acrobat",) - 				"path":	"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll", No File
CHR Plugin: (				"name":	"QuickTime Plug-in 7.7.3",) - 				"path":	"C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll", No File
CHR Plugin: (				"name":	"Google Earth Plugin",) - 				"path":	"C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll", No File
CHR Plugin: (				"name":	"Google Update",) - 				"path":	"C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll", No File
CHR Plugin: (				"name":	"Java(TM) Platform SE 6 U39",) - 				"path":	"C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll", No File
CHR Plugin: (				"name":	"Windows Live® Photo Gallery",) - 				"path":	"C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll", No File
CHR Plugin: (				"name":	"Shockwave Flash",) - 				"path":	"C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll", No File
CHR Plugin: (				"name":	"Java Deployment Toolkit 6.0.390.4",) - 				"path":	"C:\Windows\SysWOW64\npdeployJava1.dll", No File
CHR Plugin: (				"name":	"Shockwave for Director",) - 				"path":	"C:\Windows\system32\Adobe\Director\np32dsw.dll", No File
CHR Plugin: (				"name":	"Silverlight Plug-In",) - 				"path":	"c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll", No File
CHR Extension: (Google Docs) - C:\Users\**\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\**\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\**\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\**\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\**\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
S2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-06-25] (GFI Software)
S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-06-25] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 FreshIO; \??\C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-01 11:50 - 2013-07-01 11:50 - 00000041 ____A C:\Users\**\Desktop\checkup.txt
2013-07-01 11:49 - 2013-07-01 11:49 - 00890988 ____A C:\Users\**\Desktop\SecurityCheck.exe
2013-06-30 15:25 - 2013-06-30 15:25 - 02347384 ____A (ESET) C:\Users\**\Downloads\esetsmartinstaller_enu.exe
2013-06-30 12:06 - 2013-06-30 14:21 - 00001690 ____A C:\Users\**\Desktop\JRT.txt
2013-06-30 10:45 - 2013-06-30 10:45 - 00000000 ____D C:\Windows\ERUNT
2013-06-30 10:44 - 2013-06-30 10:45 - 00000000 ____D C:\JRT
2013-06-30 10:43 - 2013-06-30 10:43 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\**\Desktop\JRT.exe
2013-06-30 10:04 - 2013-06-30 10:04 - 00001190 ____A C:\Users\**\Desktop\AdwCleaner[S1].txt
2013-06-30 09:47 - 2013-06-30 09:51 - 00001200 ____A C:\AdwCleaner[S1].txt
2013-06-30 09:46 - 2013-06-30 09:46 - 00648201 ____A C:\Users\**\Desktop\adwcleaner.exe
2013-06-29 23:49 - 2013-06-29 23:49 - 00018911 ____A C:\ComboFix.txt
2013-06-29 20:52 - 2013-06-29 20:52 - 00275016 ____A C:\Windows\Minidump\062913-19078-01.dmp
2013-06-29 20:19 - 2013-06-29 23:49 - 00000000 ____D C:\Qoobox
2013-06-29 20:19 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-29 20:19 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-29 20:19 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-29 20:19 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-29 20:12 - 2013-06-29 23:24 - 00000000 ____D C:\Windows\erdnt
2013-06-29 20:06 - 2013-06-29 20:07 - 05084379 ____R (Swearware) C:\Users\**\Desktop\ComboFix.exe
2013-06-29 12:23 - 2013-06-29 12:24 - 00053459 ____A C:\Users\**\Downloads\FRST.txt
2013-06-29 12:17 - 2013-06-29 12:28 - 00024290 ____A C:\Users\**\Downloads\Addition.txt
2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-29 11:52 - 2013-06-30 12:23 - 01933592 ____A (Farbar) C:\Users\**\Desktop\FRST64.exe
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 15:10 - 2013-06-29 20:52 - 527056010 ____A C:\Windows\MEMORY.DMP
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 05:33 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\**\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\**\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\**\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\**\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\**\defogger_reenable
2013-06-26 20:14 - 2013-06-26 20:15 - 00602112 ____A (OldTimer Tools) C:\Users\**\Downloads\OTL.exe
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\**\Downloads\Defogger.exe
2013-06-25 19:02 - 2013-06-27 19:01 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\**\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:01 - 2013-06-25 19:02 - 05049344 ____A (Crawler.com                                                 ) C:\Users\**\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 18:59 - 2013-06-25 20:43 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 14:03 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\**\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:35 - 2013-06-25 12:45 - 00000000 ____D C:\Users\**\AppData\Roaming\LavasoftStatistics
2013-06-25 11:34 - 2013-06-25 13:53 - 00000000 ____D C:\Users\**\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:33 - 2013-06-25 11:34 - 05577352 ____A (Lavasoft Limited) C:\Users\**\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-24 18:35 - 2013-06-27 23:16 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-24 18:35 - 2013-06-27 23:16 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:35 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-06-24 18:35 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-06-24 18:35 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-06-24 18:31 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:22 - 2013-06-24 18:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 11:48 - 2013-06-24 12:05 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:48 - 2011-12-06 11:26 - 00014760 ____A C:\Windows\System32\Drivers\DRHMSR64.sys
2013-06-24 11:48 - 2011-11-03 18:05 - 00021984 ____A (Licensed for Gebhard Software) C:\Windows\System32\Drivers\DRHARD64.sys
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\**\Downloads\drh2013d.exe
2013-06-24 11:33 - 2013-06-24 11:43 - 00000000 ____D C:\Users\**\AppData\Roaming\FreshDiagnose
2013-06-23 10:16 - 2013-06-23 10:22 - 149029376 ____A (COMODO) C:\Users\**\Desktop\cav_installer_3264_29.exe
2013-06-23 10:14 - 2013-06-23 10:19 - 117478104 ____A C:\Users\**\Desktop\avast_free_antivirus_setup.exe
2013-06-15 17:45 - 2013-06-24 15:19 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-12 14:55 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 14:54 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 14:54 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 14:54 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 14:54 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 14:54 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 14:54 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 14:54 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 14:54 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 14:54 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 14:54 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 14:54 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 19:20 - 2013-07-01 11:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

==================== One Month Modified Files and Folders =======

2013-07-01 11:50 - 2013-07-01 11:50 - 00000041 ____A C:\Users\**\Desktop\checkup.txt
2013-07-01 11:49 - 2013-07-01 11:49 - 00890988 ____A C:\Users\**\Desktop\SecurityCheck.exe
2013-07-01 11:38 - 2011-02-07 19:43 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-01 11:26 - 2013-06-03 19:20 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-01 08:56 - 2010-04-20 02:24 - 01523963 ____A C:\Windows\WindowsUpdate.log
2013-07-01 08:38 - 2011-02-07 19:43 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-30 15:25 - 2013-06-30 15:25 - 02347384 ____A (ESET) C:\Users\**\Downloads\esetsmartinstaller_enu.exe
2013-06-30 14:21 - 2013-06-30 12:06 - 00001690 ____A C:\Users\**\Desktop\JRT.txt
2013-06-30 12:23 - 2013-06-29 11:52 - 01933592 ____A (Farbar) C:\Users\**\Desktop\FRST64.exe
2013-06-30 10:45 - 2013-06-30 10:45 - 00000000 ____D C:\Windows\ERUNT
2013-06-30 10:45 - 2013-06-30 10:44 - 00000000 ____D C:\JRT
2013-06-30 10:43 - 2013-06-30 10:43 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\**\Desktop\JRT.exe
2013-06-30 10:04 - 2013-06-30 10:04 - 00001190 ____A C:\Users\**\Desktop\AdwCleaner[S1].txt
2013-06-30 10:03 - 2010-01-24 00:31 - 00654400 ____A C:\Windows\System32\perfh007.dat
2013-06-30 10:03 - 2010-01-24 00:31 - 00130240 ____A C:\Windows\System32\perfc007.dat
2013-06-30 10:03 - 2009-07-14 07:13 - 01498742 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-30 10:00 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-30 10:00 - 2009-07-14 06:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-30 09:52 - 2013-01-15 04:22 - 00002923 ____A C:\Windows\setupact.log
2013-06-30 09:52 - 2010-10-12 00:27 - 00319158 ____A C:\Windows\PFRO.log
2013-06-30 09:52 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-30 09:51 - 2013-06-30 09:47 - 00001200 ____A C:\AdwCleaner[S1].txt
2013-06-30 09:46 - 2013-06-30 09:46 - 00648201 ____A C:\Users\**\Desktop\adwcleaner.exe
2013-06-29 23:49 - 2013-06-29 23:49 - 00018911 ____A C:\ComboFix.txt
2013-06-29 23:49 - 2013-06-29 20:19 - 00000000 ____D C:\Qoobox
2013-06-29 23:49 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default
2013-06-29 23:24 - 2013-06-29 20:12 - 00000000 ____D C:\Windows\erdnt
2013-06-29 23:18 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-29 23:09 - 2010-10-12 00:33 - 00000000 ____D C:\users\**
2013-06-29 20:52 - 2013-06-29 20:52 - 00275016 ____A C:\Windows\Minidump\062913-19078-01.dmp
2013-06-29 20:52 - 2013-06-27 15:10 - 527056010 ____A C:\Windows\MEMORY.DMP
2013-06-29 20:52 - 2010-10-12 18:05 - 00000000 ____D C:\Windows\Minidump
2013-06-29 20:07 - 2013-06-29 20:06 - 05084379 ____R (Swearware) C:\Users\**\Desktop\ComboFix.exe
2013-06-29 12:28 - 2013-06-29 12:17 - 00024290 ____A C:\Users\**\Downloads\Addition.txt
2013-06-29 12:24 - 2013-06-29 12:23 - 00053459 ____A C:\Users\**\Downloads\FRST.txt
2013-06-29 11:56 - 2013-06-29 11:56 - 00000000 ____D C:\FRST
2013-06-28 08:51 - 2013-06-28 08:51 - 00275016 ____A C:\Windows\Minidump\062813-21060-01.dmp
2013-06-27 23:16 - 2013-06-27 23:16 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 23:16 - 2013-06-27 05:33 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-27 23:16 - 2013-06-24 18:35 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-27 23:16 - 2013-06-24 18:35 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-27 19:01 - 2013-06-25 19:02 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-06-27 15:10 - 2013-06-27 15:10 - 00275016 ____A C:\Windows\Minidump\062713-21169-01.dmp
2013-06-26 23:24 - 2013-06-26 23:24 - 00083436 ____A C:\Users\**\Downloads\Extras.Txt
2013-06-26 22:29 - 2013-06-26 22:29 - 00102666 ____A C:\Users\**\Downloads\OTL.Txt
2013-06-26 20:18 - 2013-06-26 20:18 - 00377856 ____A C:\Users\**\Downloads\gmer_2.1.19163.exe
2013-06-26 20:15 - 2013-06-26 20:15 - 00000472 ____A C:\Users\**\Downloads\defogger_disable.log
2013-06-26 20:15 - 2013-06-26 20:15 - 00000000 ____A C:\Users\**\defogger_reenable
2013-06-26 20:15 - 2013-06-26 20:14 - 00602112 ____A (OldTimer Tools) C:\Users\**\Downloads\OTL.exe
2013-06-26 20:13 - 2013-06-26 20:13 - 00050477 ____A C:\Users\**\Downloads\Defogger.exe
2013-06-26 08:46 - 2013-05-28 07:48 - 00000072 ____A C:\Users\Public\LMDebug.log
2013-06-26 04:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-26 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-25 20:43 - 2013-06-25 18:59 - 00009545 ____A C:\Windows\IE10_main.log
2013-06-25 19:02 - 2013-06-25 19:02 - 00051496 ____A (Windows (R) Win 7 DDK provider) C:\Windows\System32\Drivers\stflt.sys
2013-06-25 19:02 - 2013-06-25 19:02 - 00000998 ____A C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Users\**\AppData\Roaming\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:02 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2013-06-25 19:02 - 2013-06-25 19:01 - 05049344 ____A (Crawler.com                                                 ) C:\Users\**\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 19:01 - 2013-06-25 19:01 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 19:01 - 2013-06-25 19:01 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 19:01 - 2013-06-25 19:01 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 19:01 - 2013-06-25 19:01 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 19:01 - 2013-06-25 19:01 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 19:01 - 2013-06-25 19:01 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 14:03 - 2013-06-25 11:37 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-06-25 13:53 - 2013-06-25 11:34 - 00000000 ____D C:\Users\**\AppData\Roaming\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 12:45 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-06-25 12:45 - 2013-06-25 11:35 - 00000000 ____D C:\Users\**\AppData\Roaming\LavasoftStatistics
2013-06-25 11:37 - 2013-06-25 11:37 - 00000000 ____D C:\ProgramData\Lavasoft
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\Users\**\AppData\Roaming\SecureSearch
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-06-25 11:36 - 2013-06-25 11:36 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-06-25 11:34 - 2013-06-25 11:34 - 00014456 ____A (GFI Software) C:\Windows\System32\Drivers\gfibto.sys
2013-06-25 11:34 - 2013-06-25 11:33 - 05577352 ____A (Lavasoft Limited) C:\Users\**\Downloads\Adaware_Installer10524379.exe
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2013-06-25 07:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-25 07:34 - 2010-01-23 17:16 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-24 18:36 - 2010-10-12 21:28 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-24 18:35 - 2013-06-24 18:35 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-24 18:35 - 2013-06-24 18:35 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-24 18:26 - 2013-06-24 18:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-24 18:26 - 2013-06-24 18:22 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-24 18:06 - 2013-06-24 18:06 - 00000000 ____D C:\ProgramData\LightScribe
2013-06-24 18:03 - 2010-10-11 18:41 - 00093680 ____A C:\Users\**\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-24 18:02 - 2011-02-24 08:04 - 00000000 ____D C:\Program Files\Kyocera
2013-06-24 18:02 - 2009-07-14 06:45 - 00387872 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-24 18:00 - 2010-01-23 17:37 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-06-24 15:19 - 2013-06-15 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-24 15:12 - 2011-07-04 14:40 - 00000000 ____D C:\Program Files\Paint.NET
2013-06-24 15:02 - 2011-06-14 16:17 - 00000000 ____D C:\Users\**\AppData\Roaming\IrfanView
2013-06-24 15:00 - 2012-05-21 13:34 - 00000000 ____D C:\Users\**\AppData\Roaming\inkscape
2013-06-24 14:58 - 2010-01-23 15:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\Public\Documents\Audible
2013-06-24 14:57 - 2012-06-26 17:29 - 00000000 ____D C:\Users\**\Documents\Audible
2013-06-24 12:05 - 2013-06-24 11:48 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-06-24 11:47 - 2013-06-24 11:47 - 03326496 ____A (Peter A. Gebhard                                            ) C:\Users\**\Downloads\drh2013d.exe
2013-06-24 11:43 - 2013-06-24 11:33 - 00000000 ____D C:\Users\**\AppData\Roaming\FreshDiagnose
2013-06-24 07:49 - 2010-10-12 21:19 - 00000000 ____D C:\Users\**\AppData\Roaming\BOM
2013-06-23 10:22 - 2013-06-23 10:16 - 149029376 ____A (COMODO) C:\Users\**\Desktop\cav_installer_3264_29.exe
2013-06-23 10:19 - 2013-06-23 10:14 - 117478104 ____A C:\Users\**\Desktop\avast_free_antivirus_setup.exe
2013-06-23 10:12 - 2013-01-14 21:58 - 00000000 ____D C:\Users\**\Documents\RegistryBackUps
2013-06-23 10:11 - 2012-06-26 07:08 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-06-23 10:11 - 2010-10-12 16:20 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-13 03:02 - 2010-10-12 16:20 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 04:26 - 2012-05-14 16:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 04:26 - 2011-05-27 12:55 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 00:21

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-06-2013 01
Ran by *** at 2013-07-01 11:53:01
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Acrobat.com (x32 Version: 1.6.65)
Ad-Aware Browsing Protection (x32 Version: 1.0.1.106)
Adobe AIR (x32 Version: 3.7.0.2090)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Shockwave Player (x32 Version: 11.5.1.601)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Atheros Driver Installation Program (x32 Version: 5.0)
ATI Catalyst Install Manager (Version: 3.0.754.0)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Biet-O-Matic v2.14.8 (x32 Version: Biet-O-Matic v2.14.8)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Full New (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Light (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center InstallProxy (x32 Version: 2009.1124.2131.38610)
Catalyst Control Center Localization All (x32 Version: 2009.1124.2131.38610)
CCC Help Chinese Standard (x32 Version: 2009.1124.2130.38610)
CCC Help Chinese Traditional (x32 Version: 2009.1124.2130.38610)
CCC Help Czech (x32 Version: 2009.1124.2130.38610)
CCC Help Danish (x32 Version: 2009.1124.2130.38610)
CCC Help Dutch (x32 Version: 2009.1124.2130.38610)
CCC Help English (x32 Version: 2009.1124.2130.38610)
CCC Help Finnish (x32 Version: 2009.1124.2130.38610)
CCC Help French (x32 Version: 2009.1124.2130.38610)
CCC Help German (x32 Version: 2009.1124.2130.38610)
CCC Help Greek (x32 Version: 2009.1124.2130.38610)
CCC Help Hungarian (x32 Version: 2009.1124.2130.38610)
CCC Help Italian (x32 Version: 2009.1124.2130.38610)
CCC Help Japanese (x32 Version: 2009.1124.2130.38610)
CCC Help Korean (x32 Version: 2009.1124.2130.38610)
CCC Help Norwegian (x32 Version: 2009.1124.2130.38610)
CCC Help Polish (x32 Version: 2009.1124.2130.38610)
CCC Help Portuguese (x32 Version: 2009.1124.2130.38610)
CCC Help Russian (x32 Version: 2009.1124.2130.38610)
CCC Help Spanish (x32 Version: 2009.1124.2130.38610)
CCC Help Swedish (x32 Version: 2009.1124.2130.38610)
CCC Help Thai (x32 Version: 2009.1124.2130.38610)
CCC Help Turkish (x32 Version: 2009.1124.2130.38610)
ccc-core-static (x32 Version: 2009.1124.2131.38610)
ccc-utility64 (Version: 2009.1124.2131.38610)
CCleaner (Version: 3.26)
Common Desktop Agent (Version: 1.62.0)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
CyberLink DVD Suite (x32 Version: 7.0.2216)
CyberLink MediaShow (x32 Version: 4.1.3419)
CyberLink PowerDVD 8 (x32 Version: 8.0.1.1110)
CyberLink YouCam (x32 Version: 3.0.2201)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0)
Google Earth Plug-in (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3)
HP Wireless Assistant (x32 Version: 3.50.9.1)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel® Matrix Storage Manager
Junk Mail filter update (x32 Version: 14.0.8089.726)
LibreOffice 3.5 (x32 Version: 3.5.3.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)
MSVCRT (x32 Version: 14.0.1468.721)
Power2Go (x32 Version: 6.0.3415)
PowerDirector (x32 Version: 7.0.3420)
Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6010)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30105)
Recovery Manager (x32 Version: 5.5.2214)
Samsung CLP-410 Series (x32 Version: 1.01 (01.05.2012))
Samsung Easy Printer Manager (x32 Version: 1.02.45.01(30.04.2012))
Samsung Printer Live Update (x32 Version: 1.01.00.04)
Spyware Terminator 2012 (x32 Version: 3.0.0.82)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 14.0.13.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

==================== Restore Points  =========================

24-06-2013 12:55:35 Removed Apple Application Support
24-06-2013 12:56:48 Removed Apple Software Update
24-06-2013 12:58:30 Konfiguriert EOS Capture 1.5
24-06-2013 13:02:24 Removed Java 7 Update 25
24-06-2013 13:02:51 Removed Java 7 Update 25
24-06-2013 13:03:45 Removed Java(TM) 6 Update 17 (64-bit)
24-06-2013 13:08:34 Removed Paint.NET v3.5.8
24-06-2013 13:13:03 Removed QuickTime
24-06-2013 13:20:01 Synology Data Replicator  3 wird entfernt
24-06-2013 15:59:25 Konfiguriert LabelPrint
24-06-2013 16:08:00 Removed LightScribe System Software.
24-06-2013 16:24:37 avast! Free Antivirus Setup
25-06-2013 05:36:36 Windows Update
25-06-2013 16:57:53 Windows Update
29-06-2013 18:19:36 ComboFix created restore point

==================== Scheduled Tasks (whitelisted) =============

Task: {3534823F-E9DF-40E9-BAAD-EC55235021AE} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {74BF8285-2CDB-468F-95D6-87C72CF4CA34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {82B88A3C-BBD7-4B12-927F-650CAC8DCE68} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {8C595751-1FA5-4716-8F28-72A1C89BAA50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {90CF4355-3D51-4881-8AAA-34E57B5E5EDE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {982BABEB-5380-4124-AB66-D66BD5452EC5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {B3E81DCC-3C94-4A24-9714-D7F3194C8AB6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-07] (Google Inc.)
Task: {D024B64A-9028-406E-8FD3-0EAB8A5765B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/01/2013 11:49:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/01/2013 06:58:38 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/01/2013 03:07:18 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (07/01/2013 03:03:29 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (06/30/2013 03:24:30 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Spyware Terminator 2012 Realtime Shield Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (07/01/2013 11:49:23 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\***\Downloads\esetsmartinstaller_enu.exe

Error: (07/01/2013 06:58:38 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (07/01/2013 03:07:18 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (07/01/2013 03:03:29 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe


CodeIntegrity Errors:
===================================
  Date: 2013-06-29 23:08:53.955
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 23:08:50.274
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:43:18.983
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:43:18.624
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:22.215
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:21.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.932
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 11:33:11.558
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 3957.86 MB
Available physical RAM: 2646.8 MB
Total Pagefile: 7913.9 MB
Available Pagefile: 6534.38 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.56 GB) (Free:399.65 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:12.9 GB) (Free:2.14 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: CB0F1A13)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
         

Spyware terminator deinstallieren, Firefox ebenso. Firefox neu installieren, testen

Beides getan - hat sich auf jeden Fall nochmal verbessert. Das normale Surfen klappt wieder problemlos, aber Videos machen ihn immer noch zu schaffen. Die ersten gehen immer und nach einiger Zeit geraten sie ins Stocken (trotz Puffer) und der Rechner wird allgemein wieder unbenutzbar langsam. Vielleicht liegt das Problem auch einfach woanders?

Der Security Check ist übrigens nach einem Neustart auch durchgelaufen, deswegen liefer ich den Log mal noch nach:

 Results of screen317's Security Check version 0.99.68  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 11.7.700.224  
 Adobe Reader XI  
 Mozilla Firefox (22.0) 
 Mozilla Thunderbird (17.0.6) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Videos in Firefox? Das liegt an Flash, bitte auch mal deinstallieren und neu installieren.