GVU-Trojaner auf Win7 - frst.txt erstellt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2013
Ran by SYSTEM on 15-07-2013 13:03:33
Running from G:\
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3  [2040352 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - %ProgramFiles%\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-02-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [GrooveMonitor] - "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [33648 2007-08-24] (Microsoft Corporation)
HKLM-x32\...\Run: [StarMoneyRunEntry] - "C:\Program Files (x86)\StarMoney Business 4.0 Commerzbank-Edition\app\oflagent.exe" [57864 2011-09-22] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
HKLM-x32\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2010-11-29] (Apple Inc.)
HKLM-x32\...\Run: [ScanSnap WIA Service Checker] - C:\Windows\SSDriver\fi5110\SsWiaChecker.exe [86016 2009-09-30] (PFU LIMITED)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [facemoods] - "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I [362200 2011-09-05] (facemoods.com)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [SearchSettings] - "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [1302336 2013-06-07] (Spigot, Inc.)
HKU\Martin\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2010-11-25] (Google Inc.)
HKU\Martin\...\Winlogon: [Shell] explorer.exe,C:\Users\Martin\AppData\Roaming\cache.dat [123392 2011-11-17] () <==== ATTENTION 
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\CardMinder Viewer.lnk
ShortcutTarget: CardMinder Viewer.lnk -> C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe (PFU LIMITED)
Startup: C:\ProgramData\Start Menu\Programs\Startup\In PDF-Datei mit ScanSnap Organizer konvertieren.lnk
ShortcutTarget: In PDF-Datei mit ScanSnap Organizer konvertieren.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Organizer\PfuSsOrgOcrChk.exe (PFU LIMITED)
Startup: C:\ProgramData\Start Menu\Programs\Startup\ScanSnap Manager.lnk
ShortcutTarget: ScanSnap Manager.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe (PFU LIMITED)

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [506288 2011-02-08] (REINER SCT)
S2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [252416 2010-05-25] (Sony Corporation)
S2 StarMoney Business 4.0 OnlineUpdate; C:\Program Files (x86)\StarMoney Business 4.0 Commerzbank-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1250160 2010-05-31] (Sony Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x]

==================== Drivers (Whitelisted) ====================

S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2010-11-27] (REINER SCT)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-15 13:02 - 2013-07-15 13:02 - 00000000 ____D C:\FRST
2013-07-15 11:28 - 2013-07-15 11:59 - 00000004 _____ C:\Users\Martin\AppData\Roaming\cache.ini
2013-07-12 07:03 - 2013-06-12 00:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 07:03 - 2013-06-12 00:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 07:03 - 2013-06-12 00:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 07:03 - 2013-06-12 00:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-12 07:03 - 2013-06-12 00:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-12 07:03 - 2013-06-12 00:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-12 07:03 - 2013-06-12 00:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-12 07:03 - 2013-06-12 00:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-12 07:03 - 2013-06-11 23:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 07:03 - 2013-06-11 23:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-12 07:03 - 2013-06-07 04:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-12 07:03 - 2013-06-07 03:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 16:41 - 2013-07-12 07:49 - 01888281 _____ C:\Users\Martin\Desktop\Screenshots_Sampling.pptx
2013-07-11 14:57 - 2013-06-05 04:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-11 14:57 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-07-11 14:57 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 14:57 - 2013-05-06 07:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-07-11 14:57 - 2013-05-06 05:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 14:57 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 14:57 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-09 11:07 - 2013-07-10 09:00 - 00379904 _____ C:\Users\Martin\Desktop\AAA_Rechnungsuebersicht.xls
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____R C:\Users\Martin\Desktop\AAARechnungsue�bersicht_2013.xls
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default\AppData\LocalGoogle
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default User\AppData\LocalGoogle
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2013-06-17 11:37 - 2013-06-17 11:37 - 00000000 ____D C:\Program Files (x86)\pdfforge Toolbar
2013-06-17 11:37 - 2013-06-17 11:37 - 00000000 ____D C:\Program Files (x86)\Application Updater

==================== One Month Modified Files and Folders =======

2013-07-15 13:02 - 2013-07-15 13:02 - 00000000 ____D C:\FRST
2013-07-15 11:59 - 2013-07-15 11:28 - 00000004 _____ C:\Users\Martin\AppData\Roaming\cache.ini
2013-07-15 11:59 - 2011-03-09 23:39 - 01471819 _____ C:\Windows\WindowsUpdate.log
2013-07-15 11:58 - 2009-07-14 05:51 - 00082692 _____ C:\Windows\setupact.log
2013-07-15 11:57 - 2009-07-14 05:45 - 00013872 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-15 11:57 - 2009-07-14 05:45 - 00013872 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-15 11:51 - 2012-07-09 08:12 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-07-15 11:51 - 2010-11-25 12:06 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-15 11:49 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-15 11:33 - 2010-11-25 12:06 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-15 11:28 - 2013-05-21 14:21 - 00000000 ___HD C:\ProgramData\ArcSoft
2013-07-15 11:28 - 2010-10-12 18:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-15 11:22 - 2012-11-17 13:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-15 09:44 - 2011-03-18 12:16 - 00000000 ____D C:\PRIVAT
2013-07-14 15:28 - 2010-11-25 12:06 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-14 15:28 - 2010-11-25 12:06 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-14 14:51 - 2011-03-09 23:42 - 00003958 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4FAF9545-A1D1-430C-9B64-7C341B55FC87}
2013-07-12 07:49 - 2013-07-11 16:41 - 01888281 _____ C:\Users\Martin\Desktop\Screenshots_Sampling.pptx
2013-07-12 07:35 - 2010-11-25 20:39 - 00654400 _____ C:\Windows\System32\perfh007.dat
2013-07-12 07:35 - 2010-11-25 20:39 - 00130240 _____ C:\Windows\System32\perfc007.dat
2013-07-12 07:35 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\System32\PerfStringBackup.INI
2013-07-12 07:28 - 2009-07-14 05:45 - 00580824 _____ C:\Windows\System32\FNTCACHE.DAT
2013-07-12 07:26 - 2010-10-12 23:58 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 07:26 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 07:26 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-12 07:04 - 2011-03-31 07:08 - 78185248 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-07-10 09:00 - 2013-07-09 11:07 - 00379904 _____ C:\Users\Martin\Desktop\AAA_Rechnungsuebersicht.xls
2013-07-09 13:39 - 2011-03-14 20:06 - 00002112 _____ C:\Users\Martin\Desktop\security.key
2013-07-09 09:07 - 2011-03-14 20:06 - 00004131 _____ C:\Users\Martin\Desktop\security2.key
2013-07-09 09:07 - 2011-03-14 20:06 - 00002112 _____ C:\Users\Martin\Desktop\security.bak
2013-07-09 09:03 - 2011-03-14 20:06 - 00004131 _____ C:\Users\Martin\Desktop\security2.bak
2013-07-05 08:41 - 2011-03-18 12:29 - 00000000 ____D C:\FIRMA
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____R C:\Users\Martin\Desktop\AAARechnungsue�bersicht_2013.xls
2013-07-04 11:18 - 2011-03-18 20:41 - 00000952 ___SH C:\ProgramData\KGyGaAvL.sys
2013-07-04 08:39 - 2011-03-25 10:38 - 00021504 _____ C:\Users\Martin\Desktop\To Do's.xls
2013-07-03 08:37 - 2011-03-26 14:49 - 00016657 _____ C:\Users\Martin\Sti_Trace.log
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 09:33 - 2013-06-28 09:33 - 00000175 _____ C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-28 09:33 - 2013-03-14 10:15 - 00189936 _____ C:\Windows\System32\Drivers\aswVmm.sys
2013-06-28 09:33 - 2011-03-11 12:35 - 01030952 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-28 09:33 - 2011-03-11 12:35 - 00378944 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-26 10:49 - 2012-05-22 12:51 - 00000000 ___RD C:\Users\Martin\Dropbox
2013-06-26 10:49 - 2012-05-22 12:50 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Dropbox
2013-06-26 10:48 - 2012-05-22 12:51 - 00001026 _____ C:\Users\Martin\Desktop\Dropbox.lnk
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default\AppData\LocalGoogle
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default User\AppData\LocalGoogle
2013-06-24 20:25 - 2013-06-24 20:25 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2013-06-17 11:37 - 2013-06-17 11:37 - 00000000 ____D C:\Program Files (x86)\pdfforge Toolbar
2013-06-17 11:37 - 2013-06-17 11:37 - 00000000 ____D C:\Program Files (x86)\Application Updater

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-17 16:26:37
Restore point made on: 2013-06-21 09:43:32
Restore point made on: 2013-06-26 09:59:46
Restore point made on: 2013-07-02 09:19:26
Restore point made on: 2013-07-09 08:27:14
Restore point made on: 2013-07-12 06:57:51
Restore point made on: 2013-07-15 11:28:53

==================== Memory info =========================== 

Percentage of memory in use: 17%
Total physical RAM: 3950.1 MB
Available physical RAM: 3267.38 MB
Total Pagefile: 3948.25 MB
Available Pagefile: 3254.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.18 GB) (Free:333.41 GB) NTFS (Disk=0 Partition=3)
Drive e: (Recovery) (Fixed) (Total:13.48 GB) (Free:0.75 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]
Drive g: () (Removable) (Total:0.97 GB) (Free:0.96 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 997147F0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 994 MB) (Disk ID: 6E652072)
Partition 1: (Not Active) - (Size=811 GB) - (Type=6E)
Partition 2: (Not Active) - (Size=468 GB) - (Type=FF)
Partition 3: (Not Active) - (Size=80 GB) - (Type=74)
Partition 4: (Not Active) - (Size=26 MB) - (Type=00)


LastRegBack: 2013-07-03 14:55

==================== End Of Log ============================