GVU Trojaner Logs

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2013
Ran by AnnaAmalia (administrator) on 11-07-2013 21:25:14
Running from C:\Users\AnnaAmalia\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
() C:\Windows\System32\GFNEXSrv.exe
(AMD) C:\windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(TOSHIBA Corporation) C:\windows\system32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvProvider.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosBtProc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(McAfee, Inc.) c:\PROGRA~1\mcafee.com\agent\mcagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\EMMSN.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Nori\Nori.exe
(Farbar) C:\Users\AnnaAmalia\Downloads\FRST64(1).exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [SandboxieControl] - "C:\Program Files\Sandboxie\SbieCtrl.exe" [759384 2013-07-08] (Sandboxie Holdings, LLC)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR [846936 2011-05-16] (TOSHIBA)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR [846936 2011-05-16] (TOSHIBA)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=119392&tt=gc_&babsrc=HP_ss&mntrId=0A2D74E5430AD70C
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
HKCU SearchScopes: DefaultScope {9DF13249-D2AC-49E9-8F67-A5566BE9ED35} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297265&CUI=UN21513924853017929&UM=2
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119392&tt=gc_&babsrc=SP_ss&mntrId=0A2D74E5430AD70C
SearchScopes: HKCU - {9DF13249-D2AC-49E9-8F67-A5566BE9ED35} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297265&CUI=UN21513924853017929&UM=2
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files (x86)\DivX_Browser_Bar_DE\prxtbDivX.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll No File
Toolbar: HKLM-x32 - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files (x86)\DivX_Browser_Bar_DE\prxtbDivX.dll No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\PROGRA~1\mcafee\msc\MCSNIE~1.DLL (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
Tcpip\..\Interfaces\{D1E805FE-AAD4-4310-A363-26F734B4B8FA}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default
FF user.js: detected! => C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\user.js
FF NewTab: hxxp://search.babylon.com/?affID=119392&tt=gc_&babsrc=NT_ss&mntrId=0A2D74E5430AD70C
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\searchplugins\firefox-add-ons.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: No Name - C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\Extensions\firejump_1027.zip
FF Extension: ftdownloader4 - C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\Extensions\ftdownloader4@ftdownloader.com.xpi
FF Extension: google.button - C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\Extensions\google.button@mali37.net.xpi
FF Extension: gophoto - C:\Users\AnnaAmalia\AppData\Roaming\Mozilla\Firefox\Profiles\j0q1j84b.default\Extensions\gophoto@gophoto.it.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://search.babylon.com/?affID=119392&tt=gc_&babsrc=HP_ss&mntrId=0A2D74E5430AD70C", "hxxp://www.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=0A2D001E101F79C9"
CHR DefaultSearchURL: (Search the web (Babylon)) - hxxp://search.babylon.com/?q={searchTerms}&affID=119392&tt=gc_&babsrc=SP_ss&mntrId=0A2D74E5430AD70C
CHR DefaultSuggestURL: (Search the web (Babylon)) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Conduit Chrome Plugin) - C:\Users\AnnaAmalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoahcaobjbihehldfimhblmhgalcipm\10.16.2.6_0\plugins/ConduitChromeApiPlugin.dll (Conduit)
CHR Plugin: (Conduit Radio Plugin) - C:\Users\AnnaAmalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoahcaobjbihehldfimhblmhgalcipm\10.16.2.6_0\plugins/np-cwmp.dll (Conduit)
CHR Plugin: (Conduit Chrome Approve TB Plugin) - C:\Users\AnnaAmalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoahcaobjbihehldfimhblmhgalcipm\10.16.2.6_0\plugins/ChromeApproveTBPlugin.dll (Conduit)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-10] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [225216 2011-01-28] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241016 2012-12-26] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218320 2012-12-26] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182312 2012-12-26] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-08-02] (Telefónica I+D)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-11] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-11] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-11] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [69672 2012-12-26] (McAfee, Inc.)
S3 cmntnet; C:\Windows\System32\DRIVERS\cmntnet.sys [141824 2013-02-28] (Wireless Data Device)
S3 cmnuusbser; C:\Windows\System32\DRIVERS\cmnuusbser.sys [123904 2013-02-28] (Wireless Device)
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.)
S3 hcw95bda; C:\Windows\System32\Drivers\hcw95bda.sys [658944 2011-12-12] (Hauppauge Computer Works, Inc.)
S3 hcw95rc; C:\Windows\System32\DRIVERS\hcw95rc.sys [19840 2011-12-12] (Hauppauge Computer Works, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [178840 2012-12-26] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309400 2012-12-26] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515528 2012-12-26] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771096 2012-12-26] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-12-26] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [339776 2012-12-26] (McAfee, Inc.)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)
U3 catchme; \??\C:\combofix\catchme.sys [x]
U3 mfeavfk01; No ImagePath
S3 TDEIO; \??\C:\Windows\SysWOW64\sysprep\BOOTPRIO\tdeio64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-11 21:21 - 2013-07-11 21:21 - 00000000 ____D C:\FRST
2013-07-11 21:20 - 2013-07-11 21:21 - 01778065 ____A (Farbar) C:\Users\AnnaAmalia\Downloads\FRST64(1).exe
2013-07-11 21:06 - 2013-07-11 21:06 - 01778065 ____A (Farbar) C:\Users\AnnaAmalia\Downloads\FRST64.exe
2013-07-11 20:59 - 2013-07-11 20:59 - 00027020 ____A C:\ComboFix.txt
2013-07-11 20:49 - 2013-07-11 20:50 - 00000000 ___RD C:\Users\AnnaAmalia\Desktop\Dienste
2013-07-11 20:48 - 2011-06-26 08:45 - 00256000 ____A C:\windows\PEV.exe
2013-07-11 20:48 - 2010-11-07 19:20 - 00208896 ____A C:\windows\MBR.exe
2013-07-11 20:48 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\windows\NIRCMD.exe
2013-07-11 20:48 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\windows\SWREG.exe
2013-07-11 20:48 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\windows\SWSC.exe
2013-07-11 20:48 - 2000-08-31 02:00 - 00098816 ____A C:\windows\sed.exe
2013-07-11 20:48 - 2000-08-31 02:00 - 00080412 ____A C:\windows\grep.exe
2013-07-11 20:48 - 2000-08-31 02:00 - 00068096 ____A C:\windows\zip.exe
2013-07-11 20:39 - 2013-07-11 20:39 - 00000000 ___RD C:\Sandbox
2013-07-11 20:37 - 2013-07-11 21:00 - 00000000 ____D C:\Qoobox
2013-07-11 20:37 - 2013-07-11 20:58 - 00000000 ____D C:\windows\erdnt
2013-07-11 20:36 - 2013-07-11 20:46 - 05087831 ____R (Swearware) C:\Users\AnnaAmalia\Desktop\combofix.exe
2013-07-11 20:35 - 2013-07-11 20:35 - 00283224 ____A C:\Users\AnnaAmalia\Downloads\ComboFix.exe
2013-07-11 20:31 - 2013-07-11 20:41 - 00001524 ____A C:\windows\Sandboxie.ini
2013-07-11 20:30 - 2013-07-11 20:30 - 02590808 ____A (Sandboxie Holdings, LLC) C:\Users\AnnaAmalia\Downloads\Sandboxie404Install.exe
2013-07-11 20:30 - 2013-07-11 20:30 - 00000000 ____D C:\Program Files\Sandboxie
2013-07-11 20:09 - 2013-07-11 20:09 - 01030952 ____A (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00378944 ____A (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00189936 ____A C:\windows\system32\Drivers\aswVmm.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00003924 ____A C:\windows\System32\Tasks\avast! Emergency Update
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswVmm.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswSP.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswSnx.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000000 ____A C:\windows\SysWOW64\config.nt
2013-07-11 20:09 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-07-11 20:09 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-07-11 20:09 - 2013-05-09 10:59 - 00065336 ____A C:\windows\system32\Drivers\aswRvrt.sys
2013-07-11 20:09 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-07-11 20:09 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-07-11 20:09 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\windows\system32\aswBoot.exe
2013-07-11 20:08 - 2013-07-11 20:08 - 00086335 ____A C:\Users\AnnaAmalia\Downloads\Rescue-Disk-10.nzb
2013-07-11 20:07 - 2013-07-11 20:07 - 00000000 ____D C:\Program Files\AVAST Software
2013-07-11 20:07 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\windows\avastSS.scr
2013-07-11 20:05 - 2013-07-11 20:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-11 20:02 - 2013-07-11 20:10 - 00000002 ____A C:\AvastSetup.log
2013-07-11 16:16 - 2013-07-11 16:16 - 00003160 ____N C:\bootsqm.dat
2013-07-11 16:15 - 2013-07-11 16:15 - 00000000 ____D C:\found.000
2013-07-05 23:06 - 2013-07-11 15:39 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Hivu
2013-07-05 23:06 - 2013-07-05 23:06 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Muke
2013-07-04 23:42 - 2013-07-11 19:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-26 11:58 - 2013-06-26 11:58 - 00017337 ____H C:\Users\AnnaAmalia\Desktop\~WRL3523.tmp
2013-06-25 22:16 - 2013-06-25 22:17 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\XSManager
2013-06-25 22:14 - 2013-07-11 19:26 - 00000000 ____D C:\Program Files (x86)\XSManager
2013-06-25 13:50 - 2013-06-25 13:50 - 00041003 ____A C:\Users\AnnaAmalia\Downloads\Mime (1).822
2013-06-24 12:54 - 2013-06-30 11:28 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Apple Computer
2013-06-24 12:54 - 2013-06-24 12:54 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Apple Computer
2013-06-24 12:53 - 2013-07-11 19:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-24 12:53 - 2013-07-11 19:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-24 12:53 - 2013-07-11 19:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-24 12:53 - 2013-07-11 19:25 - 00000000 ____D C:\Program Files\iPod
2013-06-24 12:52 - 2013-07-11 19:32 - 00000000 ____D C:\windows\System32\Tasks\Apple
2013-06-24 12:52 - 2013-06-24 12:52 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Apple
2013-06-24 12:51 - 2013-07-11 19:30 - 00000000 ____D C:\Program Files\Bonjour
2013-06-24 12:51 - 2013-07-11 19:28 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-24 12:51 - 2013-07-11 19:28 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-24 12:51 - 2013-06-24 12:51 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-24 12:50 - 2013-06-24 12:51 - 00000000 ____D C:\ProgramData\Apple
2013-06-24 12:27 - 2013-06-24 12:50 - 90917712 ____A (Apple Inc.) C:\Users\AnnaAmalia\Downloads\iTunes64Setup.exe
2013-06-24 11:19 - 2013-06-24 11:19 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Nero_AG
2013-06-24 11:18 - 2013-06-24 11:20 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Nero
2013-06-24 11:18 - 2013-06-24 11:18 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Nero
2013-06-24 10:43 - 2013-06-24 10:43 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{C0A9336C-A35D-49A1-9DEC-74F793C846A6}
2013-06-24 10:42 - 2013-06-24 10:42 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{D3D4BB19-7C20-4A69-B54F-CB660B91D602}
2013-06-23 15:18 - 2013-06-23 15:18 - 00147456 ____A C:\Users\AnnaAmalia\Downloads\sohilfteft.ppt
2013-06-19 20:16 - 2013-06-19 20:16 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{58A93E96-D744-48A4-9C4A-76510A4C5300}
2013-06-19 20:16 - 2013-06-19 20:16 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{33810EC9-7290-4AFC-B878-1E4FCAE0D51A}
2013-06-18 19:13 - 2013-06-18 19:13 - 853327942 ____A C:\windows\MEMORY.DMP
2013-06-18 19:13 - 2013-06-18 19:13 - 01048648 ____A C:\windows\Minidump\061813-28360-01.dmp
2013-06-18 19:13 - 2013-06-18 19:13 - 00000000 ____D C:\windows\Minidump
2013-06-13 12:25 - 2013-05-17 06:05 - 17824768 ____A (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-06-13 12:25 - 2013-05-17 05:27 - 10926080 ____A (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-06-13 12:25 - 2013-05-17 05:09 - 02312704 ____A (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-06-13 12:25 - 2013-05-17 05:02 - 01392128 ____A (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-06-13 12:25 - 2013-05-17 05:02 - 01346560 ____A (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-06-13 12:25 - 2013-05-17 05:01 - 01494528 ____A (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-06-13 12:25 - 2013-05-17 05:00 - 00237056 ____A (Microsoft Corporation) C:\windows\system32\url.dll
2013-06-13 12:25 - 2013-05-17 04:58 - 00085504 ____A (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-06-13 12:25 - 2013-05-17 04:56 - 00599040 ____A (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-06-13 12:25 - 2013-05-17 04:56 - 00173056 ____A (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-06-13 12:25 - 2013-05-17 04:55 - 00816640 ____A (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-06-13 12:25 - 2013-05-17 04:54 - 00729088 ____A (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-06-13 12:25 - 2013-05-17 04:53 - 02147840 ____A (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-06-13 12:25 - 2013-05-17 04:51 - 02382848 ____A (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-06-13 12:25 - 2013-05-17 04:51 - 00096768 ____A (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-06-13 12:25 - 2013-05-17 04:46 - 00248320 ____A (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-06-13 12:25 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-06-13 12:25 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-06-13 12:25 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-06-13 12:25 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-06-13 12:25 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-06-13 12:25 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-06-13 12:25 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-06-13 12:25 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-06-13 12:25 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-06-13 12:25 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-06-13 12:25 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-06-13 12:25 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-06-13 12:25 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-06-13 12:25 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-06-13 12:25 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-06-13 12:25 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-06-12 14:43 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-06-12 14:37 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-06-12 14:37 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-06-12 14:37 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-06-12 14:37 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-06-12 14:37 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-06-12 14:37 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-06-12 14:37 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-06-12 14:37 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-06-12 14:37 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-06-12 14:37 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-06-12 14:37 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-06-12 14:37 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-06-12 14:37 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-06-12 14:37 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-06-11 18:12 - 2013-06-11 18:14 - 89111376 ____A (Apple Inc.) C:\Users\AnnaAmalia\Downloads\iTunesSetup.exe

==================== One Month Modified Files and Folders =======

2013-07-11 21:21 - 2013-07-11 21:21 - 00000000 ____D C:\FRST
2013-07-11 21:21 - 2013-07-11 21:20 - 01778065 ____A (Farbar) C:\Users\AnnaAmalia\Downloads\FRST64(1).exe
2013-07-11 21:06 - 2013-07-11 21:06 - 01778065 ____A (Farbar) C:\Users\AnnaAmalia\Downloads\FRST64.exe
2013-07-11 21:01 - 2012-05-10 23:25 - 00000830 ____A C:\windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 21:00 - 2013-07-11 20:37 - 00000000 ____D C:\Qoobox
2013-07-11 21:00 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-11 20:59 - 2013-07-11 20:59 - 00027020 ____A C:\ComboFix.txt
2013-07-11 20:58 - 2013-07-11 20:37 - 00000000 ____D C:\windows\erdnt
2013-07-11 20:57 - 2009-07-14 04:34 - 00000215 ____A C:\windows\system.ini
2013-07-11 20:53 - 2012-06-16 13:30 - 01654470 ____A C:\windows\WindowsUpdate.log
2013-07-11 20:51 - 2012-05-10 23:30 - 00001120 ____A C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 20:50 - 2013-07-11 20:49 - 00000000 ___RD C:\Users\AnnaAmalia\Desktop\Dienste
2013-07-11 20:49 - 2013-03-01 03:09 - 00000000 ____D C:\Users\AnnaAmalia\Desktop\Arbeit
2013-07-11 20:49 - 2013-03-01 03:06 - 00000000 ____D C:\Users\AnnaAmalia\Desktop\Fotos
2013-07-11 20:46 - 2013-07-11 20:36 - 05087831 ____R (Swearware) C:\Users\AnnaAmalia\Desktop\combofix.exe
2013-07-11 20:41 - 2013-07-11 20:31 - 00001524 ____A C:\windows\Sandboxie.ini
2013-07-11 20:39 - 2013-07-11 20:39 - 00000000 ___RD C:\Sandbox
2013-07-11 20:35 - 2013-07-11 20:35 - 00283224 ____A C:\Users\AnnaAmalia\Downloads\ComboFix.exe
2013-07-11 20:30 - 2013-07-11 20:30 - 02590808 ____A (Sandboxie Holdings, LLC) C:\Users\AnnaAmalia\Downloads\Sandboxie404Install.exe
2013-07-11 20:30 - 2013-07-11 20:30 - 00000000 ____D C:\Program Files\Sandboxie
2013-07-11 20:30 - 2013-02-28 23:48 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Adobe
2013-07-11 20:29 - 2012-05-10 23:30 - 00001124 ____A C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 20:26 - 2012-05-10 23:25 - 00692104 ____A (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-07-11 20:26 - 2012-05-10 23:25 - 00071048 ____A (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-11 20:26 - 2012-05-10 23:25 - 00003768 ____A C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-07-11 20:10 - 2013-07-11 20:02 - 00000002 ____A C:\AvastSetup.log
2013-07-11 20:09 - 2013-07-11 20:09 - 01030952 ____A (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00378944 ____A (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00189936 ____A C:\windows\system32\Drivers\aswVmm.sys
2013-07-11 20:09 - 2013-07-11 20:09 - 00003924 ____A C:\windows\System32\Tasks\avast! Emergency Update
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswVmm.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswSP.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000175 ____A C:\windows\system32\Drivers\aswSnx.sys.sum
2013-07-11 20:09 - 2013-07-11 20:09 - 00000000 ____A C:\windows\SysWOW64\config.nt
2013-07-11 20:08 - 2013-07-11 20:08 - 00086335 ____A C:\Users\AnnaAmalia\Downloads\Rescue-Disk-10.nzb
2013-07-11 20:07 - 2013-07-11 20:07 - 00000000 ____D C:\Program Files\AVAST Software
2013-07-11 20:07 - 2013-07-11 20:05 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-11 19:46 - 2011-02-11 10:21 - 00654610 ____A C:\windows\system32\perfh007.dat
2013-07-11 19:46 - 2011-02-11 10:21 - 00130192 ____A C:\windows\system32\perfc007.dat
2013-07-11 19:46 - 2009-07-14 07:13 - 01521386 ____A C:\windows\system32\PerfStringBackup.INI
2013-07-11 19:45 - 2009-07-14 06:45 - 00024400 ___AH C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 19:45 - 2009-07-14 06:45 - 00024400 ___AH C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 19:42 - 2013-03-16 03:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 19:42 - 2013-03-16 03:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 19:40 - 2013-02-28 20:39 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\VirtualStore
2013-07-11 19:37 - 2013-02-28 20:36 - 00000000 ____D C:\Users\AnnaAmalia
2013-07-11 19:37 - 2012-06-16 13:36 - 00000828 ____A C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-07-11 19:36 - 2009-07-14 07:08 - 00032532 ____A C:\windows\Tasks\SCHEDLGU.TXT
2013-07-11 19:36 - 2009-07-14 07:08 - 00000006 ___AH C:\windows\Tasks\SA.DAT
2013-07-11 19:36 - 2009-07-14 06:51 - 00056101 ____A C:\windows\setupact.log
2013-07-11 19:35 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 19:34 - 2012-05-10 23:23 - 00000000 ____D C:\Program Files (x86)\Toshiba TEMPRO
2013-07-11 19:34 - 2012-05-10 22:56 - 00000000 ____D C:\Program Files\PlayReady
2013-07-11 19:34 - 2010-11-21 09:16 - 00000000 ____D C:\windows\ShellNew
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\windows\Offline Web Pages
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 19:34 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 __RSD C:\windows\Media
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\Dism
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\servicing
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\L2Schemas
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\IME
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\windows\Cursors
2013-07-11 19:34 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-07-11 19:32 - 2013-06-24 12:52 - 00000000 ____D C:\windows\System32\Tasks\Apple
2013-07-11 19:32 - 2013-03-01 02:11 - 00000000 ____D C:\windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-07-11 19:32 - 2009-07-14 07:32 - 00000000 ____D C:\windows\system32\restore
2013-07-11 19:32 - 2009-07-14 07:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-07-11 19:31 - 2013-06-10 21:53 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
2013-07-11 19:31 - 2013-05-28 21:55 - 00000000 ___RD C:\Users\AnnaAmalia\Documents\Notes
2013-07-11 19:31 - 2013-02-28 20:39 - 00000000 ___RD C:\Users\AnnaAmalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-11 19:31 - 2013-02-28 20:36 - 00000000 ___RD C:\Users\AnnaAmalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-11 19:31 - 2013-02-28 20:36 - 00000000 ___RD C:\Users\AnnaAmalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-07-11 19:31 - 2013-02-28 20:36 - 00000000 ___RD C:\Users\AnnaAmalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-07-11 19:31 - 2009-07-14 05:20 - 00000000 ____D C:\windows\AppCompat
2013-07-11 19:30 - 2013-06-24 12:51 - 00000000 ____D C:\Program Files\Bonjour
2013-07-11 19:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-11 19:29 - 2013-05-26 19:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-11 19:29 - 2012-05-10 23:21 - 00000000 ____D C:\Program Files (x86)\TOSHIBA Games
2013-07-11 19:28 - 2013-06-24 12:51 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-11 19:28 - 2013-06-24 12:51 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-11 19:28 - 2013-06-10 21:53 - 00000000 ____D C:\Program Files (x86)\FTDownloader.com
2013-07-11 19:28 - 2013-03-24 21:25 - 00000000 ____D C:\Program Files (x86)\maxdome - Online Videothek
2013-07-11 19:28 - 2013-03-20 01:50 - 00000000 ____D C:\Program Files (x86)\FreeAlarmClock
2013-07-11 19:28 - 2013-03-19 00:01 - 00000000 ____D C:\Program Files (x86)\Calligra
2013-07-11 19:28 - 2013-03-01 02:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-07-11 19:28 - 2013-02-28 23:01 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2013-07-11 19:28 - 2013-02-28 22:14 - 00000000 ____D C:\Program Files (x86)\HUAWEI Modem Driver
2013-07-11 19:27 - 2013-07-04 23:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-11 19:27 - 2013-06-24 12:53 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-11 19:26 - 2013-06-25 22:14 - 00000000 ____D C:\Program Files (x86)\XSManager
2013-07-11 19:25 - 2013-06-24 12:53 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-11 19:25 - 2013-06-24 12:53 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-11 19:25 - 2013-06-24 12:53 - 00000000 ____D C:\Program Files\iPod
2013-07-11 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\windows\registration
2013-07-11 19:01 - 2013-03-01 02:36 - 00000000 ___RD C:\MSOCache
2013-07-11 16:16 - 2013-07-11 16:16 - 00003160 ____N C:\bootsqm.dat
2013-07-11 16:15 - 2013-07-11 16:15 - 00000000 ____D C:\found.000
2013-07-11 15:39 - 2013-07-05 23:06 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Hivu
2013-07-05 23:06 - 2013-07-05 23:06 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Muke
2013-06-30 11:28 - 2013-06-24 12:54 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Apple Computer
2013-06-26 11:58 - 2013-06-26 11:58 - 00017337 ____H C:\Users\AnnaAmalia\Desktop\~WRL3523.tmp
2013-06-25 22:17 - 2013-06-25 22:16 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\XSManager
2013-06-25 13:50 - 2013-06-25 13:50 - 00041003 ____A C:\Users\AnnaAmalia\Downloads\Mime (1).822
2013-06-24 12:54 - 2013-06-24 12:54 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Apple Computer
2013-06-24 12:52 - 2013-06-24 12:52 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Apple
2013-06-24 12:51 - 2013-06-24 12:51 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-24 12:51 - 2013-06-24 12:50 - 00000000 ____D C:\ProgramData\Apple
2013-06-24 12:50 - 2013-06-24 12:27 - 90917712 ____A (Apple Inc.) C:\Users\AnnaAmalia\Downloads\iTunes64Setup.exe
2013-06-24 11:20 - 2013-06-24 11:18 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Nero
2013-06-24 11:19 - 2013-06-24 11:19 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\Nero_AG
2013-06-24 11:18 - 2013-06-24 11:18 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Roaming\Nero
2013-06-24 10:43 - 2013-06-24 10:43 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{C0A9336C-A35D-49A1-9DEC-74F793C846A6}
2013-06-24 10:42 - 2013-06-24 10:42 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{D3D4BB19-7C20-4A69-B54F-CB660B91D602}
2013-06-23 15:18 - 2013-06-23 15:18 - 00147456 ____A C:\Users\AnnaAmalia\Downloads\sohilfteft.ppt
2013-06-23 13:53 - 2012-06-16 13:36 - 00000830 ____A C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-06-19 20:16 - 2013-06-19 20:16 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{58A93E96-D744-48A4-9C4A-76510A4C5300}
2013-06-19 20:16 - 2013-06-19 20:16 - 00000000 ____D C:\Users\AnnaAmalia\AppData\Local\{33810EC9-7290-4AFC-B878-1E4FCAE0D51A}
2013-06-18 19:13 - 2013-06-18 19:13 - 853327942 ____A C:\windows\MEMORY.DMP
2013-06-18 19:13 - 2013-06-18 19:13 - 01048648 ____A C:\windows\Minidump\061813-28360-01.dmp
2013-06-18 19:13 - 2013-06-18 19:13 - 00000000 ____D C:\windows\Minidump
2013-06-11 18:14 - 2013-06-11 18:12 - 89111376 ____A (Apple Inc.) C:\Users\AnnaAmalia\Downloads\iTunesSetup.exe
2013-06-11 15:00 - 2010-11-21 05:47 - 00046224 ____A C:\windows\PFRO.log

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-04 11:57

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-07-2013
Ran by AnnaAmalia at 2013-07-11 21:25:46
Running from C:\Users\AnnaAmalia\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.0) MUI (x32 Version: 10.1.0)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
AMD APP SDK Runtime (Version: 10.0.851.6)
AMD Catalyst Install Manager (Version: 3.0.859.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Atheros Bluetooth Filter Driver Package (Version: 1.0.0.12)
Atheros Driver Installation Program (x32 Version: 9.2)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Bejeweled 3 (x32 Version: 2.2.0.98)
Bluetooth Stack for Windows by Toshiba (Version: v9.00.00(T))
Bonjour (Version: 3.0.0.10)
Cake Mania (x32 Version: 2.2.0.98)
Calligra Suite 2.6.0 (unstable) (x32 Version: 2.5.94.95)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0120.420.7502)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0120.420.7502)
Catalyst Control Center InstallProxy (x32 Version: 2012.0120.420.7502)
Catalyst Control Center Localization All (x32 Version: 2012.0120.420.7502)
CCC Help Chinese Standard (x32 Version: 2012.0120.0419.7502)
CCC Help Chinese Traditional (x32 Version: 2012.0120.0419.7502)
CCC Help Czech (x32 Version: 2012.0120.0419.7502)
CCC Help Danish (x32 Version: 2012.0120.0419.7502)
CCC Help Dutch (x32 Version: 2012.0120.0419.7502)
CCC Help English (x32 Version: 2012.0120.0419.7502)
CCC Help Finnish (x32 Version: 2012.0120.0419.7502)
CCC Help French (x32 Version: 2012.0120.0419.7502)
CCC Help German (x32 Version: 2012.0120.0419.7502)
CCC Help Greek (x32 Version: 2012.0120.0419.7502)
CCC Help Hungarian (x32 Version: 2012.0120.0419.7502)
CCC Help Italian (x32 Version: 2012.0120.0419.7502)
CCC Help Japanese (x32 Version: 2012.0120.0419.7502)
CCC Help Korean (x32 Version: 2012.0120.0419.7502)
CCC Help Norwegian (x32 Version: 2012.0120.0419.7502)
CCC Help Polish (x32 Version: 2012.0120.0419.7502)
CCC Help Portuguese (x32 Version: 2012.0120.0419.7502)
CCC Help Russian (x32 Version: 2012.0120.0419.7502)
CCC Help Spanish (x32 Version: 2012.0120.0419.7502)
CCC Help Swedish (x32 Version: 2012.0120.0419.7502)
CCC Help Thai (x32 Version: 2012.0120.0419.7502)
CCC Help Turkish (x32 Version: 2012.0120.0419.7502)
ccc-utility64 (Version: 2012.0120.420.7502)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Free Alarm Clock 2.7.0 (x32 Version: 2.7)
FTDownloader (x32 Version: 2.1 Build 26473)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 27.0.1453.116)
Google Update Helper (x32 Version: 1.3.21.145)
High-Definition Video Playback (x32 Version: 11.1.10500.2.65)
HUAWEI DataCard Driver 4.05.00.00 (x32 Version: 4.05.00.00)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)
Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.1.209)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java Auto Updater (x32 Version: 2.0.6.1)
Java(TM) 6 Update 30 (x32 Version: 6.0.300)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
lzip PDF Printer 9.7.0.1592 (Version: 9.7.0.1592)
maxdome - Online Videothek (Version: 1.0)
McAfee Internet Security (x32 Version: 11.6.477)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mobile Connection Manager (x32)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
Nero 11 Essentials (x32 Version: 11.0.00300)
Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0)
Nero BackItUp 11 (x32 Version: 6.0.18000.19.100)
Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero BurnRights 11 (x32 Version: 5.0.10300.4.100)
Nero BurnRights 11 Help (CHM) (x32 Version: 11.0.10100)
Nero ControlCenter 11 (x32 Version: 11.0.12700.0.27)
Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300)
Nero Core Components 11 (x32 Version: 11.0.15500.1.16)
Nero Express 11 (x32 Version: 11.0.11900.24.100)
Nero Express 11 Help (CHM) (x32 Version: 11.0.10300)
Nero Kwik Media (x32 Version: 1.10.24800.146.100)
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200)
Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100)
Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400)
Nero Update (x32 Version: 11.0.11400.27.0)
nero.prerequisites.msi (x32 Version: 11.0.20008)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (x32 Version: 2.2.0.97)
Premium Sound HD (Version: 1.12.1800)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6597)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7601.30130)
Sandboxie 4.04 (64-bit) (Version: 4.04)
Shared C Run-time for x64 (Version: 10.0.0)
Skype™ 5.10 (x32 Version: 5.10.116)
Synaptics Pointing Device Driver (Version: 15.3.38.2)
TOSHIBA Assist (x32 Version: 4.2.3.0)
TOSHIBA Disc Creator (Version: 2.1.0.11 for x64)
TOSHIBA eco Utility (Version: 1.3.10.64)
TOSHIBA Hardware Setup (x32 Version: 2.00.0020)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.11)
Toshiba Manuals (x32 Version: 10.04)
TOSHIBA Media Controller (x32 Version: 1.0.87.5)
TOSHIBA Media Controller Plug-in (x32 Version: 1.0.7.7)
TOSHIBA Online Product Information (x32 Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.15.64)
TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4)
TOSHIBA Recovery Media Creator (x32 Version: 2.1.6.52020009)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.1.2004)
TOSHIBA Service Station (x32 Version: 2.2.13)
TOSHIBA Sleep Utility (x32 Version: 1.4.0022.000104)
TOSHIBA Supervisor Password (x32 Version: 2.00.0009)
TOSHIBA TEMPRO (x32 Version: 3.35)
TOSHIBA Value Added Package (Version: 1.6.0021.640203)
TOSHIBA Value Added Package (x32 Version: 1.6.0021.640203)
TOSHIBA Web Camera Application (x32 Version: 2.0.3.33)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
welcome (x32 Version: 11.0.22500.0.0)
WildTangent Games (x32 Version: 1.0.2.5)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

27-06-2013 01:00:14 Windows Update
04-07-2013 10:05:02 Geplanter Prüfpunkt
11-07-2013 17:41:17 Windows Update
11-07-2013 18:06:30 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-07-11 20:57 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {187A182E-318B-40EB-9939-758258DC49C0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-11] (Adobe Systems Incorporated)
Task: {47F037D3-6D18-46E0-872B-68F0C9E1E1D1} - System32\Tasks\{B547BF99-3221-496E-B485-6352B1EA8A00} => C:\Users\AnnaAmalia\Downloads\wintv7_cd_2.6-Downloader.exe No File
Task: {52A2E90A-DD48-44AC-9904-E4EF0A3A34C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-10] (Google Inc.)
Task: {63C07BBC-7CA0-4E3F-BF58-482B6A4AE5AA} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {67938A00-033A-4C7B-95E5-03639F7E1A21} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {94F41D82-AC0A-4980-9E20-BDC5CE79CD0C} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {9EAF8769-B9E8-4E71-A74D-6248DE26EC29} - System32\Tasks\{D371BE44-B3F8-4100-9A49-9CAA77E77B5D} => C:\Users\AnnaAmalia\Downloads\wintv7_cd_2.6-Downloader.exe No File
Task: {B16A9E1C-13F7-4BEE-BBF2-C60BE290D2A9} - System32\Tasks\{3B380E95-3CBD-4EBF-A73C-2BB9AA6A34B9} => C:\Users\AnnaAmalia\Downloads\wintv7_cd_2.6-Downloader.exe No File
Task: {E5DF9814-752C-4391-88A3-84704BEF86BC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {E67DE511-1B50-40EF-BD5D-B3B59308909F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E9110003-C5C4-44D4-A439-14BB4987B457} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {F7285BC6-C170-49B2-819B-AC7E42654C63} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-10] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/11/2013 07:37:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 06:55:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000011cb
ID des fehlerhaften Prozesses: 0xdc0
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (07/11/2013 06:52:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc000041d
Fehleroffset: 0x0000000000001049
ID des fehlerhaften Prozesses: 0x9d4
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (07/11/2013 06:52:48 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 06:52:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001049
ID des fehlerhaften Prozesses: 0x9d4
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (07/11/2013 06:45:04 PM) (Source: McLogEvent) (User: NT-AUTORITÄT)
Description: A thread in process C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe took longer than 90000 ms to complete a request.

The process will be terminated.
Thread id : 4712 (0x1268)

Thread address : 0x00000000778417BA

Thread message : 

 Build VSCORE.15.1.0.519 / 5500.1093
 Object being scanned = \Device\HarddiskVolume2\Users\AnnaAmalia\AppData\Roaming\cache.dat
 by C:\Users\AnnaAmalia\AppData\Roaming\cache.dat
 4(0)(0)
 4(0)(0)
 7200(0)(0)
 7595(0)(0)
 7005(0)(0)
 7004(0)(0)
 5006(0)(0)
 5004(0)(0)

Error: (07/11/2013 06:43:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:55:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:22:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:17:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (07/11/2013 09:12:45 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:44 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:44 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:43 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:43 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:31 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:31 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:30 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:30 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/11/2013 09:12:29 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Microsoft Office Sessions:
=========================
Error: (07/11/2013 07:37:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 06:55:40 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4msvcrt.dll7.0.7601.177444eeb033fc000000500000000000011cbdc001ce7e57704eb93bC:\windows\Explorer.EXEC:\windows\system32\msvcrt.dllb76434b1-ea4a-11e2-af38-74e5430ad70c

Error: (07/11/2013 06:52:48 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4msvcrt.dll7.0.7601.177444eeb033fc000041d00000000000010499d401ce7e56fc8d632bC:\windows\Explorer.EXEC:\windows\system32\msvcrt.dll50de24c7-ea4a-11e2-8606-74e5430ad70c

Error: (07/11/2013 06:52:48 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 06:52:40 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4msvcrt.dll7.0.7601.177444eeb033fc000000500000000000010499d401ce7e56fc8d632bC:\windows\Explorer.EXEC:\windows\system32\msvcrt.dll4bbe8e90-ea4a-11e2-8606-74e5430ad70c

Error: (07/11/2013 06:45:04 PM) (Source: McLogEvent)(User: NT-AUTORITÄT)
Description: C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe900004712 (0x1268)0x00000000778417BA
 Build VSCORE.15.1.0.519 / 5500.1093
 Object being scanned = \Device\HarddiskVolume2\Users\AnnaAmalia\AppData\Roaming\cache.dat
 by C:\Users\AnnaAmalia\AppData\Roaming\cache.dat
 4(0)(0)
 4(0)(0)
 7200(0)(0)
 7595(0)(0)
 7005(0)(0)
 7004(0)(0)
 5006(0)(0)
 5004(0)(0)

Error: (07/11/2013 06:43:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:55:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:22:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2013 05:17:40 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-11 20:56:16.096
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\combofix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-11 20:56:16.076
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\combofix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 55%
Total physical RAM: 4055.8 MB
Available physical RAM: 1807.52 MB
Total Pagefile: 8109.79 MB
Available Pagefile: 5367.71 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (TI30876100C) (Fixed) (Total:578.59 GB) (Free:525.74 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive e: (INTENSO) (Removable) (Total:29.8 GB) (Free:9.62 GB) FAT32 (Disk=1 Partition=1)
Drive f: (o2) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: 22EC50A7)
Partition 1: (Active) - (Size=1 GB) - (Type=27)
Partition 2: (Not Active) - (Size=579 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=17)

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 82A78DBF)
Partition 1: (Not Active) - (Size=30 GB) - (Type=0C)

==================== End Of Log ============================