Windows 7 startet ausschließlich im abgesichertem Modus...Virus?

Morfo · 23.07.2013, 09:04

Hi Leo danke,dass du mir helfen möchtest.

Hier ist FRST.txt:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-07-2013 01
Ran by Arthur (administrator) on 23-07-2013 09:55:37
Running from C:\Users\Arthur\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\vVX1000.exe
(Valve Corporation) E:\steam\Steam.exe
(SEC) C:\Program Files\MagicTune Premium\MagicTune.exe
() C:\Program Files\MagicTune Premium\GammaTray.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MagicTuneEngine] - C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [53760 2010-12-14] ()
HKLM\...\Run: [VX1000] - C:\Windows\vVX1000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKCU\...\Run: [Steam] - E:\steam\Steam.exe [1672616 2013-07-10] (Valve Corporation)
HKCU\...\Run: [SCheck] - C:\Users\Arthur\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [SSync] - C:\Users\Arthur\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKCU\...\Run: [DataMgr] - C:\Users\Arthur\AppData\Roaming\DataMgr\DataMgr.exe [168848 2013-06-26] (HTTO Group, Ltd.)
HKCU\...\Run: [Intermediate] - C:\Users\Arthur\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
MountPoints2: {0af69a7e-4464-11e2-b165-0025226e2469} - H:\SETUP.EXE
MountPoints2: {e1fbf440-4ac3-11e2-89d0-806e6f6e6963} - G:\Launcher.exe
MountPoints2: {ea260789-3e5f-11e2-9259-806e6f6e6963} - H:\LaunchU3.exe -a
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [BCSSync] - "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-03-13] (Microsoft Corporation)
HKU\Lena\...\Run: [uTorrent] - "C:\Users\Lena\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED [x]
HKU\Lena\...\Run: [Yontoo Desktop] - "C:\Users\Lena\AppData\Roaming\Yontoo\YontooDesktop.exe" [x]
AppInit_DLLs:   C:\PROGRA~3\Wincert\WIN64C~1.DLL  [8704 2013-02-07] ()
AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll [7168 2013-02-07] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.exe.lnk
ShortcutTarget: GammaTray.exe.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * bootdeletebootdeletebootdelete

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {C4AEC36F-CC2C-4C2D-B17B-47B8221E9488} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=362&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4485148048034755&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&r=261
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&r=261
SearchScopes: HKCU - {352FC33D-4B62-40F5-942F-A4E4F3FA10B3} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=8A3D1516-7B37-4981-8DE1-AB52718B43E5&apn_sauid=A0939C45-06D8-451D-BAF3-EA877CBEEE78
SearchScopes: HKCU - {C4AEC36F-CC2C-4C2D-B17B-47B8221E9488} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=362&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4485148048034755&q={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: msdaipp - No CLSID Value - 
Handler-x32: msdaipp - No CLSID Value - 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Arthur\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF HKLM\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] C:\Program Files\Video downloader\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] C:\Program Files\Video downloader\Firefox
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [lyricsmonkey@mendoni.net] C:\Program Files (x86)\LyricsMonkey\FF\
FF Extension: No Name - C:\Program Files (x86)\LyricsMonkey\FF\

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.de/", ""
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - E:\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - E:\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - E:\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - E:\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - E:\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Arthur\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (YouTube) - C:\Users\Arthur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Arthur\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Arthur\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.2_0
CHR Extension: (avast! Online Security) - C:\Users\Arthur\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0
CHR Extension: (Gmail) - C:\Users\Arthur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [khialnikbocfgkohdegnebhmmaifoglp] - C:\Program Files (x86)\LyricsMonkey\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Arthur\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-07-14] (SurfRight B.V.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-22] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-22] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-22] ()
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] ()
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] ()
S3 hitmanpro37; C:\Windows\SysWow64\drivers\hitmanpro37.sys [30616 2013-07-22] ()
S0 hitmanpro37duringboot; C:\Windows\SysWow64\drivers\hitmanpro37.sys [30616 2013-07-22] ()
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 hitmanpro37; \??\C:\Windows\system32\drivers\hitmanpro37.sys [x]
S0 hitmanpro37duringboot; system32\drivers\hitmanpro37.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-23 09:55 - 2013-07-23 09:55 - 00000000 ____D C:\FRST
2013-07-23 09:50 - 2013-07-23 09:50 - 01779447 _____ (Farbar) C:\Users\Arthur\Desktop\FRST64.exe
2013-07-22 22:49 - 2013-07-23 01:39 - 00000000 ____D C:\Windows\pss
2013-07-22 20:16 - 2013-07-22 20:16 - 00000132 _____ C:\Users\Arthur\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2013-07-22 20:11 - 2013-07-22 20:13 - 10339263 _____ C:\Users\Arthur\Downloads\Rijk van Nijmegen - Rivieren.mp4
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-07-22 16:03 - 2013-07-23 01:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-07-22 16:03 - 2013-07-22 16:04 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-07-22 16:03 - 2013-07-22 16:04 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-07-22 16:03 - 2013-07-22 16:04 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-07-22 16:03 - 2013-07-22 16:03 - 00001928 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-07-22 16:03 - 2013-05-09 10:59 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-07-22 16:03 - 2013-05-09 10:59 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-07-22 16:03 - 2013-05-09 10:59 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-07-22 16:03 - 2013-05-09 10:59 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-07-22 16:03 - 2013-05-09 10:59 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-07-22 16:03 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-07-22 15:42 - 2013-07-22 15:45 - 117478104 _____ C:\Users\Arthur\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe
2013-07-22 15:39 - 2013-07-22 20:15 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Adobe
2013-07-21 20:28 - 2013-07-21 20:28 - 00000040 ____H C:\1B50C1B368B1
2013-07-21 20:10 - 2013-07-21 20:19 - 294969288 _____ C:\Users\Arthur\Downloads\AfterEffects.rar
2013-07-21 20:10 - 2013-07-21 20:10 - 00000840 _____ C:\Users\Arthur\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-07-21 20:08 - 2013-07-21 20:08 - 01126480 _____ (BitTorrent Inc.) C:\Users\Arthur\Downloads\utorrent_3.3.1b29812.exe
2013-07-21 17:41 - 2013-07-21 17:41 - 00003504 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-ADDIS-PC-Arthur
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\Documents\Adobe
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PDAppFlex
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PACE Anti-Piracy
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Local\PACE Anti-Piracy
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2013-07-21 17:35 - 2013-07-21 17:35 - 00000000 ____D C:\Program Files (x86)\My Company Name
2013-07-21 17:35 - 2011-11-03 03:01 - 00056208 ____N (Rovi Corporation) C:\Windows\system32\Drivers\PxHlpa64.sys
2013-07-21 17:35 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2013-07-21 17:35 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2013-07-21 17:24 - 2013-07-21 17:26 - 00000000 ____D C:\Users\Arthur\Desktop\Adobe Premiere Pro CS6
2013-07-20 11:34 - 2013-07-20 11:34 - 00000000 ____D C:\Users\Arthur\Documents\Rockstar Games
2013-07-20 11:14 - 2013-07-20 11:14 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\SSync
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\SCheck
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Intermediate
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\DataMgr
2013-07-20 11:02 - 2013-07-20 11:02 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PiccShare
2013-07-20 11:02 - 2013-07-20 11:02 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Common
2013-07-20 10:57 - 2013-07-20 10:57 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-20 10:57 - 2013-07-20 10:57 - 00000000 ____D C:\Users\Arthur\Documents\Games for Windows - LIVE Demos
2013-07-20 10:56 - 2013-07-20 10:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-20 10:35 - 2013-07-20 11:14 - 00000000 ____D C:\Users\Arthur\AppData\Local\Rockstar Games
2013-07-20 10:33 - 2013-07-20 10:33 - 00000600 _____ C:\Users\Arthur\Desktop\Grand Theft Auto IV.lnk
2013-07-17 22:48 - 2013-07-17 22:49 - 00000000 ____D C:\Windows\system32\MRT
2013-07-17 08:32 - 2013-07-19 21:57 - 00000214 _____ C:\Users\Arthur\Desktop\rominfo.txt
2013-07-16 18:13 - 2013-07-19 22:22 - 00002048 _____ C:\Users\Arthur\Desktop\Super Mario World.srm
2013-07-16 18:12 - 2013-07-19 22:22 - 00274047 _____ C:\Users\Arthur\Desktop\Super Mario World.zst
2013-07-16 18:08 - 2013-07-19 22:22 - 00274047 _____ C:\Users\Arthur\Desktop\Super Mario World.zss
2013-07-15 21:49 - 2013-07-15 21:49 - 414046739 _____ C:\Windows\MEMORY.DMP
2013-07-15 21:49 - 2013-07-15 21:49 - 00307440 _____ C:\Windows\Minidump\071513-18018-01.dmp
2013-07-15 21:49 - 2013-07-15 21:49 - 00000000 ____D C:\Windows\Minidump
2013-07-15 15:03 - 2013-07-22 22:33 - 00011370 _____ C:\Windows\SysWOW64\.crusader
2013-07-15 15:03 - 2012-08-31 19:57 - 01687408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\ntfs.sys
2013-07-15 15:03 - 2010-11-20 14:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-07-15 15:03 - 2009-07-14 04:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storsvc.dll
2013-07-14 18:20 - 2013-07-22 22:36 - 00030616 _____ C:\Windows\SysWOW64\Drivers\hitmanpro37.sys
2013-07-14 13:17 - 2013-07-14 13:18 - 00000000 ____D C:\Program Files (x86)\Zoom Player
2013-07-11 17:33 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 17:33 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 17:33 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 17:33 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 17:33 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 17:33 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 17:33 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 17:33 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 17:33 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 17:33 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 17:33 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 17:33 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 15:43 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 15:43 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 15:43 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 15:43 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 15:43 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 15:42 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 15:42 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-04 19:18 - 2013-07-04 20:30 - 02419006 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz3.ppsx
2013-07-04 18:35 - 2013-07-04 19:18 - 02418995 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz1.pptx
2013-07-04 18:35 - 2013-07-04 18:35 - 02418812 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz2.ppsx
2013-07-04 15:35 - 2013-07-04 15:35 - 00005363 _____ C:\Users\Arthur\Documents\Alcatraz.wlmp
2013-07-04 14:36 - 2013-07-04 15:18 - 02326429 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz.pptx
2013-07-01 18:43 - 2013-07-01 18:43 - 00002218 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-06-25 16:38 - 2013-06-25 16:38 - 00013214 _____ C:\Users\Arthur\Documents\Mathe S.186 Nr 1.xlsx
2013-06-24 21:38 - 2013-06-24 21:38 - 00001473 _____ C:\Users\Arthur\AppData\Local\RecConfig.xml
2013-06-24 21:18 - 2013-06-24 21:19 - 00003992 _____ C:\AdwCleaner[S2].txt
2013-06-24 21:17 - 2013-06-24 21:17 - 00004439 _____ C:\AdwCleaner[R2].txt
2013-06-24 21:15 - 2013-06-24 21:15 - 00648201 _____ C:\Users\Arthur\Downloads\AdwCleaner.exe
2013-06-24 16:36 - 2013-06-24 21:03 - 00515574 _____ C:\spyhunter.fix
2013-06-24 16:04 - 2013-06-24 21:11 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2013-06-24 16:04 - 2013-06-24 16:04 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-06-24 16:00 - 2013-07-21 21:49 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\uTorrent

==================== One Month Modified Files and Folders =======

2013-07-23 09:55 - 2013-07-23 09:55 - 00000000 ____D C:\FRST
2013-07-23 09:54 - 2013-05-13 15:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-23 09:54 - 2012-12-17 21:58 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-23 09:54 - 2012-12-12 16:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-23 09:52 - 2009-07-14 06:45 - 00014528 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-23 09:52 - 2009-07-14 06:45 - 00014528 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-23 09:51 - 2013-05-13 15:30 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-23 09:50 - 2013-07-23 09:50 - 01779447 _____ (Farbar) C:\Users\Arthur\Desktop\FRST64.exe
2013-07-23 09:50 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-23 09:47 - 2012-12-06 15:33 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Skype
2013-07-23 09:44 - 2013-05-13 16:13 - 00008545 _____ C:\Windows\setupact.log
2013-07-23 09:44 - 2012-12-06 15:01 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-23 09:44 - 2012-12-05 00:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-23 09:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-23 02:28 - 2012-12-05 00:19 - 01926650 _____ C:\Windows\WindowsUpdate.log
2013-07-23 02:21 - 2012-12-06 15:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-23 02:00 - 2012-12-28 22:42 - 00000000 ____D C:\Users\Arthur\AppData\Local\Adobe
2013-07-23 01:44 - 2013-03-30 23:46 - 00000000 ____D C:\Program Files\Adobe
2013-07-23 01:44 - 2012-12-13 14:54 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-23 01:44 - 2012-12-12 16:54 - 00000000 ____D C:\ProgramData\Adobe
2013-07-23 01:43 - 2013-03-30 23:43 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-23 01:39 - 2013-07-22 22:49 - 00000000 ____D C:\Windows\pss
2013-07-23 01:31 - 2013-07-22 16:03 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-07-22 23:37 - 2013-04-23 20:34 - 00000000 ____D C:\Program Files (x86)\LyricsMonkey
2013-07-22 23:13 - 2013-04-11 17:35 - 00000000 ____D C:\Users\Arthur\AppData\Local\Sony
2013-07-22 23:13 - 2013-04-11 17:35 - 00000000 ____D C:\ProgramData\Sony
2013-07-22 23:10 - 2012-12-19 19:57 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-07-22 23:08 - 2012-12-06 15:01 - 00004116 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-22 23:08 - 2012-12-06 15:01 - 00003864 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-22 23:07 - 2013-02-09 15:44 - 00002952 _____ C:\Windows\System32\Tasks\{23A7EE5B-8126-4140-9EDD-6FB26AA5D81B}
2013-07-22 23:07 - 2012-12-20 18:37 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-07-22 23:06 - 2012-12-06 15:01 - 00000000 ____D C:\Users\Arthur\AppData\Local\Google
2013-07-22 23:06 - 2012-12-06 15:01 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-22 22:36 - 2013-07-14 18:20 - 00030616 _____ C:\Windows\SysWOW64\Drivers\hitmanpro37.sys
2013-07-22 22:33 - 2013-07-15 15:03 - 00011370 _____ C:\Windows\SysWOW64\.crusader
2013-07-22 22:33 - 2013-06-02 19:29 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-22 20:16 - 2013-07-22 20:16 - 00000132 _____ C:\Users\Arthur\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2013-07-22 20:15 - 2013-07-22 15:39 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Adobe
2013-07-22 20:13 - 2013-07-22 20:11 - 10339263 _____ C:\Users\Arthur\Downloads\Rijk van Nijmegen - Rivieren.mp4
2013-07-22 19:37 - 2012-12-06 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-22 19:37 - 2012-12-06 15:27 - 00000000 ____D C:\ProgramData\Skype
2013-07-22 17:41 - 2009-07-14 19:58 - 00696904 _____ C:\Windows\system32\perfh007.dat
2013-07-22 17:41 - 2009-07-14 19:58 - 00148200 _____ C:\Windows\system32\perfc007.dat
2013-07-22 17:41 - 2009-07-14 07:13 - 01613644 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-07-22 16:04 - 2013-07-22 16:04 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-07-22 16:04 - 2013-07-22 16:03 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-07-22 16:04 - 2013-07-22 16:03 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-07-22 16:04 - 2013-07-22 16:03 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-07-22 16:03 - 2013-07-22 16:03 - 00001928 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-07-22 16:03 - 2013-04-01 15:52 - 00000000 ____D C:\Program Files\AVAST Software
2013-07-22 16:03 - 2013-04-01 15:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-07-22 16:03 - 2013-04-01 15:51 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-22 15:47 - 2013-04-27 13:52 - 00082000 _____ C:\Windows\PFRO.log
2013-07-22 15:46 - 2013-01-06 22:28 - 00000000 ____D C:\Users\hedev
2013-07-22 15:45 - 2013-07-22 15:42 - 117478104 _____ C:\Users\Arthur\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe
2013-07-22 15:39 - 2009-07-14 06:45 - 05070528 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-21 21:49 - 2013-06-24 16:00 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\uTorrent
2013-07-21 20:28 - 2013-07-21 20:28 - 00000040 ____H C:\1B50C1B368B1
2013-07-21 20:19 - 2013-07-21 20:10 - 294969288 _____ C:\Users\Arthur\Downloads\AfterEffects.rar
2013-07-21 20:10 - 2013-07-21 20:10 - 00000840 _____ C:\Users\Arthur\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-07-21 20:08 - 2013-07-21 20:08 - 01126480 _____ (BitTorrent Inc.) C:\Users\Arthur\Downloads\utorrent_3.3.1b29812.exe
2013-07-21 17:41 - 2013-07-21 17:41 - 00003504 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-ADDIS-PC-Arthur
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\Documents\Adobe
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PDAppFlex
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PACE Anti-Piracy
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\Users\Arthur\AppData\Local\PACE Anti-Piracy
2013-07-21 17:39 - 2013-07-21 17:39 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2013-07-21 17:39 - 2012-12-16 13:34 - 00000000 ___HD C:\Users\Arthur\AppData\Local\Il1yeC94tyS
2013-07-21 17:39 - 2012-12-05 01:01 - 00117664 _____ C:\Users\Arthur\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-21 17:38 - 2013-03-30 14:33 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-07-21 17:35 - 2013-07-21 17:35 - 00000000 ____D C:\Program Files (x86)\My Company Name
2013-07-21 17:26 - 2013-07-21 17:24 - 00000000 ____D C:\Users\Arthur\Desktop\Adobe Premiere Pro CS6
2013-07-20 11:34 - 2013-07-20 11:34 - 00000000 ____D C:\Users\Arthur\Documents\Rockstar Games
2013-07-20 11:14 - 2013-07-20 11:14 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-20 11:14 - 2013-07-20 10:35 - 00000000 ____D C:\Users\Arthur\AppData\Local\Rockstar Games
2013-07-20 11:14 - 2012-12-06 17:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\SSync
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\SCheck
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Intermediate
2013-07-20 11:04 - 2013-07-20 11:04 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\DataMgr
2013-07-20 11:02 - 2013-07-20 11:02 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\PiccShare
2013-07-20 11:02 - 2013-07-20 11:02 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Common
2013-07-20 10:57 - 2013-07-20 10:57 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-20 10:57 - 2013-07-20 10:57 - 00000000 ____D C:\Users\Arthur\Documents\Games for Windows - LIVE Demos
2013-07-20 10:57 - 2013-07-20 10:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-20 10:33 - 2013-07-20 10:33 - 00000600 _____ C:\Users\Arthur\Desktop\Grand Theft Auto IV.lnk
2013-07-19 22:22 - 2013-07-16 18:13 - 00002048 _____ C:\Users\Arthur\Desktop\Super Mario World.srm
2013-07-19 22:22 - 2013-07-16 18:12 - 00274047 _____ C:\Users\Arthur\Desktop\Super Mario World.zst
2013-07-19 22:22 - 2013-07-16 18:08 - 00274047 _____ C:\Users\Arthur\Desktop\Super Mario World.zss
2013-07-19 21:57 - 2013-07-17 08:32 - 00000214 _____ C:\Users\Arthur\Desktop\rominfo.txt
2013-07-17 22:49 - 2013-07-17 22:48 - 00000000 ____D C:\Windows\system32\MRT
2013-07-15 21:49 - 2013-07-15 21:49 - 414046739 _____ C:\Windows\MEMORY.DMP
2013-07-15 21:49 - 2013-07-15 21:49 - 00307440 _____ C:\Windows\Minidump\071513-18018-01.dmp
2013-07-15 21:49 - 2013-07-15 21:49 - 00000000 ____D C:\Windows\Minidump
2013-07-14 13:18 - 2013-07-14 13:17 - 00000000 ____D C:\Program Files (x86)\Zoom Player
2013-07-14 13:13 - 2013-05-17 20:20 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\FreeVideoConverter
2013-07-14 13:12 - 2012-12-06 16:00 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\vlc
2013-07-13 21:31 - 2013-05-14 19:18 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-11 18:54 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-11 18:52 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 18:52 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 18:52 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-09 20:59 - 2013-02-15 21:25 - 00017408 ____H C:\Users\Arthur\Downloads\photothumb.db
2013-07-09 20:59 - 2012-12-06 21:48 - 00001037 _____ C:\Users\Arthur\Desktop\PhotoScape.lnk
2013-07-09 20:59 - 2012-12-06 21:48 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2013-07-05 20:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-04 20:51 - 2013-01-01 23:52 - 00272384 ___SH C:\Users\Arthur\Documents\Thumbs.db
2013-07-04 20:30 - 2013-07-04 19:18 - 02419006 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz3.ppsx
2013-07-04 19:18 - 2013-07-04 18:35 - 02418995 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz1.pptx
2013-07-04 18:42 - 2013-05-13 15:30 - 00000000 ____D C:\Users\Arthur\AppData\Local\Microsoft Help
2013-07-04 18:41 - 2009-07-14 04:34 - 00000499 _____ C:\Windows\win.ini
2013-07-04 18:35 - 2013-07-04 18:35 - 02418812 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz2.ppsx
2013-07-04 15:35 - 2013-07-04 15:35 - 00005363 _____ C:\Users\Arthur\Documents\Alcatraz.wlmp
2013-07-04 15:32 - 2013-01-01 20:50 - 00000000 ____D C:\Users\Arthur\AppData\Local\Windows Live
2013-07-04 15:18 - 2013-07-04 14:36 - 02326429 _____ C:\Users\Arthur\Documents\The Escape from Alcatraz.pptx
2013-07-04 15:13 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-07-01 18:43 - 2013-07-01 18:43 - 00002218 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-06-29 23:57 - 2012-12-06 15:33 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-06-29 22:25 - 2012-12-06 15:27 - 00000000 ____D C:\ProgramData\Avira
2013-06-25 16:38 - 2013-06-25 16:38 - 00013214 _____ C:\Users\Arthur\Documents\Mathe S.186 Nr 1.xlsx
2013-06-24 21:49 - 2013-03-04 21:38 - 00000000 ____D C:\Users\Arthur\AppData\Roaming\Audacity
2013-06-24 21:38 - 2013-06-24 21:38 - 00001473 _____ C:\Users\Arthur\AppData\Local\RecConfig.xml
2013-06-24 21:19 - 2013-06-24 21:18 - 00003992 _____ C:\AdwCleaner[S2].txt
2013-06-24 21:17 - 2013-06-24 21:17 - 00004439 _____ C:\AdwCleaner[R2].txt
2013-06-24 21:15 - 2013-06-24 21:15 - 00648201 _____ C:\Users\Arthur\Downloads\AdwCleaner.exe
2013-06-24 21:11 - 2013-06-24 16:04 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2013-06-24 21:03 - 2013-06-24 16:36 - 00515574 _____ C:\spyhunter.fix
2013-06-24 16:04 - 2013-06-24 16:04 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-06-24 00:57 - 2012-12-06 17:46 - 78277128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 19:57

==================== End Of Log ============================

--- --- ---

--- --- ---

Und hier ist Addition.txt

Zitat:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-07-2013 01
Ran by Arthur at 2013-07-23 09:56:27
Running from C:\Users\Arthur\Desktop
Boot Mode: Normal
==========================================================

==================== Installed Programs =======================

µTorrent (HKCU Version: 3.3.1.29812)
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Premiere Pro CS6 (x32 Version: 6.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Apple Application Support (x32 Version: 2.3)
Apple Software Update (x32 Version: 2.1.3.127)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Avidemux 2.5 (x32 Version: 2.5.3.0)
Battlefield Heroes (x32)
Battlefront Extreme 2.2 (x32)
bl (x32 Version: 1.0.0)
Brother MFL-Pro Suite DCP-115C (x32 Version: 1.0.1.0)
CamStudio version 2.7 (x32 Version: 2.7)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free Video Converter V 3.1 (x32 Version: 3.1.0.0)
GIGABYTE OC_GURU II (x32 Version: 1.20.0000)
Google Chrome (x32 Version: 28.0.1500.72)
Google Update Helper (x32 Version: 1.3.21.153)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
LEGO® Star Wars™ III: The Clone Wars™ (x32 Version: 1.0.0.0)
MagicTunePremium (x32 Version: 4.0.09)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Corporation (Version: 9.1.0.0)
Microsoft Corporation (x32 Version: 9.1.0.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft LifeCam (Version: 3.22.270.0)
Microsoft Office 2010 Language Pack Service Pack 1 (SP1) (x32)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Language Pack 2010 - German/Deutsch (x32 Version: 14.0.6029.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office O MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office SharePoint Designer MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office X MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft SharePoint Designer 2010 Service Pack 1 (SP1) (x32)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Windows Media Video 9 VCM (x32)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT Redists (Version: 1.0)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Notepad++ (x32 Version: 6.3.3)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
P 2.8.4 (Version: 2.8.4)
ph (x32 Version: 1.0.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
PhotoScape (x32)
QuickShare (x32 Version: 1.6.1.872)
QuickTime (x32 Version: 7.74.80.86)
RAMRush 1.0.6.917 (x32)
Samsung_MonSetup (x32 Version: 1.00.0000)
Skype™ 6.6 (x32 Version: 6.6.106)
Smart File Advisor 1.1.1 (x32 Version: 1.1.1)
SPORE™ (x32 Version: 1.00.0000)
Star Wars - Battlefront II (x32)
Star Wars: The Old Republic (x32 Version: 1.00)
Steam (x32 Version: 1.0.0.0)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553092) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Designer 2010 (KB2553459) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Uplay (x32 Version: 2.0)
VirtualCloneDrive (x32)
VLC media player 2.0.4 (Version: 2.0.4)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Tanks (x32)
Xvid MPEG-4 Video Codec (x32)

==================== Restore Points =========================

22-07-2013 21:08:38 TuneUp Utilities 2013 wird entfernt
22-07-2013 21:10:07 TuneUp Utilities Language Pack (de-DE) wird entfernt
22-07-2013 21:11:26 Removed Vegas Pro 12.0 (64-bit)
22-07-2013 23:32:59 Removed LogMeIn Hamachi
23-07-2013 07:46:36 Removed Google Earth.
23-07-2013 07:48:50 Removed Microsoft Office Professional 2007

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-06-24 21:04 - 00001030 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 tune-up.com
127.0.0.1 tune-up.com/order
127.0.0.1 registertuneup.com
127.0.0.1 download.tune-up.de
127.0.0.1 download.tune-up.com
127.0.0.1 secure.tune-up.com

==================== Scheduled Tasks (whitelisted) =============

Task: {01082626-D524-4FBA-9B71-591B23A1DC4D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {1CB09E1A-7CB1-4FD4-B613-27DBE6C561CD} - System32\Tasks\{32BE3CC1-98B8-4C8E-8829-A4CE7922CA79} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-12] (Google Inc.)
Task: {1EA05D96-25D4-414E-8FBB-905C4638A74D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-06] (Google Inc.)
Task: {38828480-ADA2-4F90-AC92-E0C8930B3AFF} - System32\Tasks\WPD\SqmUpload_S-1-5-21-950287045-4052571293-3502393058-1004 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {3F1D9D60-D466-4576-A0B2-AC4E77387CFF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {596AB9BC-CC9E-46A3-915A-8FAD8AF11289} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe No File
Task: {62E9BAD1-8CD2-4199-814E-A64B3D914E48} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {6560E11B-2D64-4119-8964-5AF6EAACCC7C} - System32\Tasks\AdobeAAMUpdater-1.0-ADDIS-PC-Arthur => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21] (Adobe Systems Incorporated)
Task: {845AEDE8-6997-4507-97AC-4F1FA1EAE2B0} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {8770FD75-D4D1-4B29-ADFF-4236AA99C30A} - System32\Tasks\{0A7A8F16-AF5D-4A70-88D7-40A44F25E932} => C:\Windows\System32\msiexec.exe [2010-11-20] (Microsoft Corporation)
Task: {9253DCDB-0D46-4805-9CCD-F63B8478177E} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {99C2503B-381F-4DBD-986A-9304BBD908F6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe No File
Task: {A41A9076-89BB-4E6C-8815-8FE32B30B151} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {B0522F72-B2F1-4D01-9EEA-651686B2D8F4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-06] (Google Inc.)
Task: {B2D6106C-07B4-4B36-B9FE-1996F0793E70} - System32\Tasks\DealPly => C:\Users\Arthur\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {C2A89A8A-AFFA-4210-8EE4-BFC5F62F0B26} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe No File
Task: {CA417F1A-D051-43DC-964C-49B4739145DD} - System32\Tasks\{23A7EE5B-8126-4140-9EDD-6FB26AA5D81B} => C:\Program Files (x86)\RAMRush\RAMRush.exe [2009-09-17] (FTweak)
Task: {EA3A2C84-D4EF-4072-A08F-9E52906200F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {EA4541CE-FD2A-46F8-9B9F-1C70D7095174} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe No File
Task: {F234BA71-3324-4C95-A585-B6444D3A045C} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe No File
Task: {FC94CD4D-A10A-4054-B2A5-023B277AF04D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Virtual CloneDrive
Description: Virtual CloneDrive
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Elaborate Bytes AG
Service: VClone
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: NVIDIA GeForce GTX 660
Description: NVIDIA GeForce GTX 660
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvlddmkm
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Microsoft LifeCam VX-1000
Description: Microsoft LifeCam VX-1000
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: VX1000
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: NVIDIA High Definition Audio
Description: NVIDIA High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: NVHDA
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: ATAPI DVD RW 8XMax ATA Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Optiarc DVD RW AD-5200A ATA Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

==================== Event log errors: =========================

Application errors:
==================
Error: (07/23/2013 01:53:31 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (07/23/2013 01:51:32 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (07/22/2013 11:05:59 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = Removed Google Chrome Frame; Fehler = 0x80042302).

Error: (07/22/2013 11:05:59 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "GetProviderMgmtInterface" ist ein unerwarteter Fehler aufgetreten. hr = 0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
.

Error: (07/22/2013 11:05:59 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.

Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen

Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}

Error: (07/22/2013 11:05:59 PM) (Source: VSS) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} und dem Namen "SW_PROV" kann nicht gestartet werden. [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
]

Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen

Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}

Error: (07/22/2013 11:05:45 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = Removed Google Chrome Frame; Fehler = 0x80042302).

Error: (07/22/2013 11:05:45 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "GetProviderMgmtInterface" ist ein unerwarteter Fehler aufgetreten. hr = 0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
.

Error: (07/22/2013 11:05:45 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.

Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen

Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}

Error: (07/22/2013 11:05:45 PM) (Source: VSS) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} und dem Namen "SW_PROV" kann nicht gestartet werden. [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
]

Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen

Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}

System errors:
=============
Error: (07/23/2013 09:46:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (07/23/2013 09:46:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/23/2013 09:44:43 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (07/23/2013 01:43:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (07/23/2013 01:43:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/23/2013 01:41:21 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (07/23/2013 01:39:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (07/23/2013 01:39:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/23/2013 01:37:10 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (07/23/2013 01:32:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-07-21 19:29:32.983
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-21 19:29:32.982
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-21 19:29:32.981
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-21 19:29:32.965
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-21 19:29:32.963
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-21 19:29:32.950
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-19 19:04:34.891
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-19 19:04:34.890
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-19 19:04:34.889
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-07-19 19:04:34.877
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

==================== Memory info ===========================

Percentage of memory in use: 39%
Total physical RAM: 4095.24 MB
Available physical RAM: 2464.29 MB
Total Pagefile: 10235.43 MB
Available Pagefile: 8534.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:146.39 GB) (Free:69.02 GB) NTFS (Disk=0 Partition=2)
Drive d: (Gaming) (Fixed) (Total:159.67 GB) (Free:143.36 GB) NTFS (Disk=0 Partition=3)
Drive e: (Workshop) (Fixed) (Total:159.61 GB) (Free:97.06 GB) NTFS (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 9C3FC6A7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=160 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=160 GB) - (Type=07 NTFS)

==================== End Of Log ============================

LG Artur

Windows 7 startet ausschließlich im abgesichertem Modus...Virus?

Plagegeister aller Art und deren Bekämpfung: Windows 7 startet ausschließlich im abgesichertem Modus...Virus?

Windows 7 startet ausschließlich im abgesichertem Modus...Virus?

Ähnliche Themen: Windows 7 startet ausschließlich im abgesichertem Modus...Virus?