JVL libpack.net

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:04 on 01/08/2013 (thomas2)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-07-2013 04
Ran by thomas2 at 2013-08-01 01:07:46
Running from C:\Users\thomas2\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader XI (11.0.02) (Version: 11.0.02)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Advanced System Protector (Version: 2.1.1000.10905)
ANNO 1404 - Venice (Version: 2.0.5008.0)
Anno 1404 (Version: 1.00.0000)
ANNO 1404 (Version: 1.02.0000)
Apple Application Support (Version: 2.3)
Apple Mobile Device Support (Version: 6.0.0.59)
Apple Software Update (Version: 2.1.3.127)
ArtMoney SE v7.39.1 (Version: 7.39)
Audacity 2.0.3 (Version: 2.0.3)
AuthenTec Fingerprint Software (Version: 9.0.8.36)
AVG 2013 (Version: 13.0.3209)
AVG 2013 (Version: 13.0.3392)
AVG 2013 (Version: 2013.0.3392)
Blobby Volley 2.0 Version 0.9c
Bluetooth Stack for Windows by Toshiba (Version: v6.40.00(T))
Bonjour (Version: 3.0.0.10)
Bundled software uninstaller
CDBurnerXP (Version: 4.4.0.2905)
Counter-Strike: Source
DAEMON Tools Lite (Version: 4.45.4.0314)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DivX-Setup (Version: 2.6.1.3)
Dropbox (HKCU Version: 2.0.22)
Filzip 3.06 (Version: 3.0.6)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
ICQ7.6 (Version: 7.6)
Intel(R) Network Connections Drivers (Version: 14.5)
iTunes (Version: 10.7.0.21)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
JDownloader 0.9 (Version: 0.9)
LogMeIn Hamachi (Version: 2.1.0.374)
LyricsContainer
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML4 Parser (Version: 1.0.0)
PokerStars.net
Pontifex Demo
QuickTime (Version: 7.73.80.64)
Red Alert Windows 95
RICOH R5U230 Media Driver ver.2.06.03.02 (Version: 2.06.03.02)
Shutdown Timer (Version: 3.3.4)
Skype™ 5.10 (Version: 5.10.116)
Sleep Moon Xpress (Version: 2.0.0)
SleepTimer Ultimate 1.11
Spotify (HKCU Version: 0.9.1.53.g876fa9df)
Steam (Version: 1.0.0.0)
TFPU (Version: 1.0.0)
TOSHIBA Fingerprint Utility (Version: 1.0.2.32)
TOSHIBA HDD Protection (Version: 2.2.0.4)
TrueCrypt (Version: 7.1)
tulox
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VLC media player 1.1.10 (Version: 1.1.10)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
YTD Video Downloader 3.9.3
 

==================== Restore Points  =========================

10-07-2013 22:57:20 Windows Update
11-07-2013 15:45:13 Windows Update
11-07-2013 23:20:31 Windows Update
16-07-2013 17:08:43 Installed Sleep Moon Xpress
16-07-2013 22:49:39 Installed Shutdown Timer.
30-07-2013 11:30:20 Removed Shutdown Timer.
30-07-2013 11:49:15 Installed AVG 2013
30-07-2013 11:49:39 Installed AVG 2013

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0AA64254-A94E-403E-BA83-DF4D7C66E28C} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe [2013-05-24] (Systweak)
Task: {2B03DA43-51D9-4996-9B75-1147411AABF2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-10] (Adobe Systems Incorporated)
Task: {595A7AAD-F122-46EE-9B78-08677A9AC56E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-08] (Google Inc.)
Task: {5AF6F84D-0340-4C8A-8923-8A5E410B0F49} - System32\Tasks\LyricsContainer Update => C:\Program Files\LyricsContainer\LrcsCtrUpdr.exe [2013-07-27] (RYD Software)
Task: {74E78C47-731C-47D8-92D3-0EBB53100399} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation)
Task: {99B19FC6-1A52-4891-8675-974A277319F8} - System32\Tasks\GoforFilesUpdate => C:\Program Files\GoforFiles\GFFUpdater.exe No File
Task: {CA0D3167-986C-4614-B738-6B70B64FFF59} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{B99BF186-0FF4-4000-8FAE-FBA7A58FD27A}.exe No File
Task: {E5808978-1820-4733-BEBF-1DF84349CD3B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-08] (Google Inc.)
Task: {E5F385E3-6C07-495C-8E0D-A04FEF215CAA} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{86551C82-1B44-47E1-8C3D-8E5E88ECF872}.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{B99BF186-0FF4-4000-8FAE-FBA7A58FD27A}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{86551C82-1B44-47E1-8C3D-8E5E88ECF872}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricsContainer Update.job => C:\Program Files\LyricsContainer\LrcsCtrUpdr.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/31/2013 04:00:31 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/31/2013 03:57:56 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/31/2013 00:05:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2168

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2168

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1170

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1170

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/30/2013 05:30:22 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6957


System errors:
=============
Error: (07/31/2013 03:30:23 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/27/2013 10:46:49 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎27.‎07.‎2013 um 22:45:02 unerwartet heruntergefahren.

Error: (07/27/2013 09:24:00 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (07/26/2013 10:59:20 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (07/22/2013 00:41:16 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (07/14/2013 00:25:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (07/11/2013 05:40:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (07/10/2013 00:24:02 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (07/10/2013 00:20:25 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎07.‎2013 um 00:18:35 unerwartet heruntergefahren.

Error: (07/08/2013 02:37:53 PM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}


Microsoft Office Sessions:
=========================
Error: (07/31/2013 04:00:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\fingerprint sensor\Drivers\DPInst64.exe

Error: (07/31/2013 03:57:56 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Fingerprint Sensor\Drivers\DPInst64.exe

Error: (07/31/2013 00:05:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2168

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2168

Error: (07/30/2013 08:55:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1170

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1170

Error: (07/30/2013 08:55:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/30/2013 05:30:22 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6957


==================== Memory info =========================== 

Percentage of memory in use: 56%
Total physical RAM: 2928.43 MB
Available physical RAM: 1270.31 MB
Total Pagefile: 5855.14 MB
Available Pagefile: 3866.49 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.23 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.39 GB) (Free:48.07 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: D31D2C79)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=9 GB) - (Type=17)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-07-2013 04
Ran by thomas2 (administrator) on 01-08-2013 01:06:58
Running from C:\Users\thomas2\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(TOSHIBA Corporation) C:\Windows\system32\ThpSrv.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Spotify Ltd) C:\Users\thomas2\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\thomas2\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Systweak) C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgui.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\avgcsrvx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jp2launcher.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\java.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ThpSrv] - C:\Windows\system32\thpsrv /logon [x]
HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2008-12-19] (TOSHIBA CORPORATION)
HKLM\...\Run: [TFPUPWDBankService] - C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe [888752 2010-03-02] (TOSHIBA)
HKLM\...\Run: [TFPUService] - C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe [784304 2010-03-02] (TOSHIBA)
HKLM\...\Run: [itype] - c:\Program Files\Microsoft IntelliType Pro\itype.exe [1313640 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [ROC_ROC_JULY_P1] - "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 [x]
HKLM\...\Run: [HF_G_Jul] - "C:\Program Files\AVG Secure Search\HF_G_Jul.exe"  /DoAction [x]
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)
HKLM\...\Runonce: [network_adworkmedia_1] -  [x]
HKCU\...\Run: [Spotify Web Helper] - C:\Users\thomas2\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-06-17] (Spotify Ltd)
HKCU\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION 
MountPoints2: {564f68df-cccd-11e1-bd24-e89d8741b028} - D:\autorun.exe
MountPoints2: {d385fc66-a340-11e2-a240-e89d8741b028} - iexplore.exe hxxp://www.globaldenso.com/en/events/globalmotorshows/index.html
Startup: C:\Users\thomas2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\thomas2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=24DD0626B6F7FE29&affID=119293&tsp=4960
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=24DD0626B6F7FE29&affID=119293&tsp=4960
BHO: TFPUPWDBankBHO Class - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\TFPU\TFPUPWDBankBHO.dll (TODO: <Company name>)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: LyricsContainer - {DA3D98A6-868D-4E1B-BB78-0887230DA405} - C:\Program Files\LyricsContainer\125.dll (RYD Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.249 192.168.0.250 85.214.96.146

FireFox:
========
FF ProfilePath: C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default
FF user.js: detected! => C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF Extension: adblockpopups - C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: trackerblock - C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\Extensions\trackerblock@privacychoice.org.xpi
FF Extension: No Name - C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\Extensions\{45d8ff86-d909-11db-9705-005056c00008}.xpi
FF Extension: No Name - C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
FF Extension: No Name - C:\Users\thomas2\AppData\Roaming\Mozilla\Firefox\Profiles\hafkidb9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] C:\Program Files\TOSHIBA\TFPU\FirefoxAddin
FF Extension: Automatic password input in Fx - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKCU\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] C:\Program Files\LyricsContainer\125.xpi
FF Extension: No Name - C:\Program Files\LyricsContainer\125.xpi

========================== Services (Whitelisted) =================

R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [2043712 2010-06-17] (AuthenTec, Inc.)
R2 AVGIDSAgent; C:\Program Files\AVG\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-07-15] ()
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-03-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-07-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-07-15] (DT Soft Ltd)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-07-15] ()
R2 risdpcie; C:\Windows\System32\DRIVERS\risdpe86.sys [49152 2009-07-28] (REDC)
R2 rixdpcie; C:\Windows\System32\DRIVERS\rixdpe86.sys [38400 2009-07-04] (REDC)
S3 Tosrfcom; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-01 01:05 - 2013-08-01 01:05 - 01222064 _____ (Farbar) C:\Users\thomas2\Desktop\FRST.exe
2013-08-01 01:04 - 2013-08-01 01:04 - 00000476 _____ C:\Users\thomas2\Desktop\defogger_disable.log
2013-08-01 01:04 - 2013-08-01 01:04 - 00000000 _____ C:\Users\thomas2\defogger_reenable
2013-08-01 01:00 - 2013-08-01 01:00 - 00050477 _____ C:\Users\thomas2\Desktop\Defogger.exe
2013-07-31 18:45 - 2013-07-31 18:45 - 00471532 _____ C:\Users\thomas2\Downloads\TopEleven Hack 2013.rar
2013-07-31 18:43 - 2013-07-31 18:43 - 00288696 _____ C:\Users\thomas2\Downloads\Setup(1).exe
2013-07-31 18:41 - 2013-07-31 18:41 - 00000000 ____D C:\Program Files\7-Zip
2013-07-31 18:40 - 2013-07-31 18:40 - 00167304 _____ () C:\Users\thomas2\Downloads\7ZipSetup-eHVX0Co.exe
2013-07-31 18:37 - 2013-07-31 18:37 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(3).zip
2013-07-31 18:36 - 2013-07-31 18:36 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(2).zip
2013-07-31 18:36 - 2013-07-31 18:36 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(1).zip
2013-07-31 14:15 - 2013-07-31 14:15 - 00000000 ____D C:\Users\thomas2\Desktop\top11
2013-07-31 14:13 - 2013-07-31 14:21 - 00000000 ____D C:\Program Files\MyPC Backup
2013-07-31 14:13 - 2013-07-31 14:20 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\BabSolution
2013-07-31 14:13 - 2013-07-31 14:13 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-31 14:12 - 2013-07-31 14:15 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\GoforFiles
2013-07-31 14:12 - 2013-07-31 14:12 - 05276296 _____ (hxxp://www.goforfiles.com/) C:\Users\thomas2\Downloads\Top_Eleven_Token_Hack_2013_Version.exe_downloader_de_257.exe
2013-07-31 14:12 - 2013-07-31 14:12 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Babylon
2013-07-31 14:12 - 2013-07-31 14:12 - 00000000 ____D C:\ProgramData\Babylon
2013-07-31 14:05 - 2013-07-31 14:06 - 09831713 _____ C:\Users\thomas2\Downloads\Hack Free Tools - for list...rar
2013-07-31 14:00 - 2013-07-31 14:00 - 00054618 _____ C:\Users\thomas2\Desktop\Notepad(1).rar
2013-07-31 13:58 - 2013-07-31 13:58 - 00054618 _____ C:\Users\thomas2\Desktop\Notepad.rar
2013-07-31 13:57 - 2013-07-31 13:57 - 00277416 _____ C:\Users\thomas2\Downloads\Free Top Eleven Hack 2013.exe
2013-07-31 13:57 - 2013-07-31 13:57 - 00000388 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-31 13:57 - 2013-07-31 13:57 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-31 13:51 - 2013-07-31 13:51 - 00202960 _____ C:\Users\thomas2\Downloads\Setup.exe
2013-07-31 13:49 - 2013-07-31 13:49 - 02658115 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013.zip
2013-07-31 13:43 - 2013-07-31 13:43 - 04639408 _____ (hxxp://yourfiledownloader.com) C:\Users\thomas2\Downloads\top_eleven_hack_token_cash_downloader_de_99370.exe
2013-07-31 12:12 - 2013-07-31 12:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-07-31 12:12 - 2013-07-31 12:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-07-30 15:04 - 2013-07-30 15:05 - 00042043 _____ C:\Users\thomas2\Downloads\video_hd_1.zip
2013-07-30 13:51 - 2013-07-30 13:51 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\AVG2013
2013-07-30 13:50 - 2013-07-31 12:12 - 00000845 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-07-30 13:50 - 2013-07-30 13:51 - 00000000 ____D C:\ProgramData\AVG2013
2013-07-30 13:50 - 2013-07-30 13:50 - 00000000 ___HD C:\$AVG
2013-07-30 13:50 - 2013-07-30 13:50 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\TuneUp Software
2013-07-30 13:49 - 2013-07-31 18:29 - 00000000 ____D C:\Program Files\AVG
2013-07-30 13:47 - 2013-07-31 18:29 - 00000000 ____D C:\ProgramData\MFAData
2013-07-30 13:47 - 2013-07-31 18:09 - 00000000 ____D C:\Users\thomas2\AppData\Local\Avg2013
2013-07-30 13:47 - 2013-07-30 13:47 - 00000000 ____D C:\Users\thomas2\AppData\Local\MFAData
2013-07-30 13:45 - 2013-07-30 13:46 - 140002992 _____ (AVG Technologies) C:\Users\thomas2\Downloads\avg_free_x86_all_2013_3349a6461.exe
2013-07-30 13:37 - 2013-07-30 13:37 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-30 13:36 - 2013-07-30 13:37 - 117478104 _____ C:\Users\thomas2\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe
2013-07-26 23:00 - 2013-07-31 18:07 - 00000000 ____D C:\Users\thomas2\Desktop\Foto Praha
2013-07-22 15:08 - 2013-07-22 15:13 - 00000000 ____D C:\Users\thomas2\Desktop\Prag
2013-07-20 01:51 - 2013-07-20 01:51 - 00246072 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avglogx.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00208184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00171320 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00060216 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys
2013-07-17 00:50 - 2013-07-17 00:50 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Sinvise Systems
2013-07-17 00:50 - 2013-07-17 00:50 - 00000000 ____D C:\Program Files\Sinvise Systems
2013-07-16 23:48 - 2013-07-16 23:48 - 03023360 _____ C:\Users\thomas2\Downloads\ShutdownTimer33.msi
2013-07-16 19:12 - 2013-07-16 19:12 - 00001163 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-07-16 19:12 - 2013-07-16 19:12 - 00000000 ____D C:\ProgramData\Systweak
2013-07-16 19:12 - 2013-07-16 19:12 - 00000000 ____D C:\Program Files\Advanced System Protector
2013-07-16 19:12 - 2012-07-25 12:03 - 00017136 _____ C:\Windows\system32\sasnative32.exe
2013-07-16 19:11 - 2013-07-31 14:23 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Systweak
2013-07-16 19:11 - 2013-07-16 19:11 - 00001053 _____ C:\Users\Public\Desktop\Sleep Moon Xpress.lnk
2013-07-16 19:11 - 2013-07-16 19:11 - 00000000 ____D C:\Program Files\Sleep Moon Xpress
2013-07-16 19:11 - 2013-07-11 13:49 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2013-07-16 19:06 - 2013-07-16 19:08 - 13024768 _____ C:\Users\thomas2\Desktop\Sleep-Moon.msi
2013-07-16 19:06 - 2013-07-16 19:08 - 04702376 _____ (Systweak Inc                                                ) C:\Users\thomas2\Desktop\rcpsetup_softonic_sd_new.exe
2013-07-16 19:05 - 2013-07-16 19:05 - 00000100 _____ C:\Users\Public\sdelevURL.tmp
2013-07-16 19:04 - 2013-07-16 19:04 - 00393056 _____ (Softonic                                        ) C:\Users\thomas2\Downloads\SoftonicDownloader_fuer_sleep-moon-xpress.exe
2013-07-14 22:53 - 2013-07-14 23:33 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Audacity
2013-07-14 22:38 - 2013-07-14 22:38 - 00000969 _____ C:\Users\thomas2\Desktop\Audacity.lnk
2013-07-14 22:38 - 2013-07-14 22:38 - 00000000 ____D C:\Program Files\Audacity
2013-07-14 22:35 - 2013-07-14 22:37 - 21281052 _____ (Audacity Team                                               ) C:\Users\thomas2\Downloads\audacity-win-2.0.3.exe
2013-07-11 17:47 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 17:47 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 17:47 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 17:47 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 17:47 - 2013-06-12 01:43 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 17:47 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 17:47 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 17:47 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 17:47 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 17:47 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 17:47 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 17:47 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 17:47 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 17:46 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 17:46 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 17:46 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 00:57 - 2013-07-11 00:57 - 00000000 ____D C:\371f9056a7043b2d066d59bbb5915734
2013-07-10 20:46 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 20:46 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 20:46 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 20:46 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 01:32 - 2013-07-10 01:32 - 00039224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx86.sys
2013-07-10 00:57 - 2013-07-10 00:57 - 00000955 _____ C:\DelFix.txt
2013-07-10 00:44 - 2013-07-10 00:47 - 41404760 _____ (Apple Inc.) C:\Users\thomas2\Downloads\QuickTimeInstaller(1).exe
2013-07-10 00:41 - 2013-07-10 00:41 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 00:41 - 2013-07-10 00:40 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 00:37 - 2013-07-10 00:37 - 00903080 _____ (Oracle Corporation) C:\Users\thomas2\Downloads\jxpiinstall(1).exe
2013-07-10 00:35 - 2013-07-30 13:31 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-08 16:15 - 2013-07-08 16:15 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Malwarebytes
2013-07-08 16:15 - 2013-07-08 16:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-03 23:54 - 2013-07-31 14:13 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-02 17:30 - 2013-07-02 17:30 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
119

==================== One Month Modified Files and Folders =======

2013-08-01 01:06 - 2013-08-01 01:06 - 00000000 ____D C:\FRST
2013-08-01 01:05 - 2013-08-01 01:05 - 01222064 _____ (Farbar) C:\Users\thomas2\Desktop\FRST.exe
2013-08-01 01:04 - 2013-08-01 01:04 - 00000476 _____ C:\Users\thomas2\Desktop\defogger_disable.log
2013-08-01 01:04 - 2013-08-01 01:04 - 00000000 _____ C:\Users\thomas2\defogger_reenable
2013-08-01 01:04 - 2011-12-20 16:43 - 00000000 ____D C:\Users\thomas2
2013-08-01 01:01 - 2012-01-12 17:26 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Skype
2013-08-01 01:00 - 2013-08-01 01:00 - 00050477 _____ C:\Users\thomas2\Desktop\Defogger.exe
2013-08-01 00:57 - 2012-07-31 12:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-01 00:39 - 2011-09-08 14:37 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-31 22:39 - 2011-09-08 14:37 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-31 19:11 - 2011-08-25 15:18 - 01726876 _____ C:\Windows\WindowsUpdate.log
2013-07-31 18:45 - 2013-07-31 18:45 - 00471532 _____ C:\Users\thomas2\Downloads\TopEleven Hack 2013.rar
2013-07-31 18:43 - 2013-07-31 18:43 - 00288696 _____ C:\Users\thomas2\Downloads\Setup(1).exe
2013-07-31 18:41 - 2013-07-31 18:41 - 00000000 ____D C:\Program Files\7-Zip
2013-07-31 18:40 - 2013-07-31 18:40 - 00167304 _____ () C:\Users\thomas2\Downloads\7ZipSetup-eHVX0Co.exe
2013-07-31 18:37 - 2013-07-31 18:37 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(3).zip
2013-07-31 18:36 - 2013-07-31 18:36 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(2).zip
2013-07-31 18:36 - 2013-07-31 18:36 - 00437269 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013(1).zip
2013-07-31 18:29 - 2013-07-30 13:49 - 00000000 ____D C:\Program Files\AVG
2013-07-31 18:29 - 2013-07-30 13:47 - 00000000 ____D C:\ProgramData\MFAData
2013-07-31 18:09 - 2013-07-30 13:47 - 00000000 ____D C:\Users\thomas2\AppData\Local\Avg2013
2013-07-31 18:07 - 2013-07-26 23:00 - 00000000 ____D C:\Users\thomas2\Desktop\Foto Praha
2013-07-31 18:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-07-31 17:40 - 2009-07-14 06:39 - 00070775 _____ C:\Windows\setupact.log
2013-07-31 14:23 - 2013-07-16 19:11 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Systweak
2013-07-31 14:21 - 2013-07-31 14:13 - 00000000 ____D C:\Program Files\MyPC Backup
2013-07-31 14:20 - 2013-07-31 14:13 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\BabSolution
2013-07-31 14:15 - 2013-07-31 14:15 - 00000000 ____D C:\Users\thomas2\Desktop\top11
2013-07-31 14:15 - 2013-07-31 14:12 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\GoforFiles
2013-07-31 14:13 - 2013-07-31 14:13 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-31 14:13 - 2013-07-03 23:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-31 14:12 - 2013-07-31 14:12 - 05276296 _____ (hxxp://www.goforfiles.com/) C:\Users\thomas2\Downloads\Top_Eleven_Token_Hack_2013_Version.exe_downloader_de_257.exe
2013-07-31 14:12 - 2013-07-31 14:12 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Babylon
2013-07-31 14:12 - 2013-07-31 14:12 - 00000000 ____D C:\ProgramData\Babylon
2013-07-31 14:06 - 2013-07-31 14:05 - 09831713 _____ C:\Users\thomas2\Downloads\Hack Free Tools - for list...rar
2013-07-31 14:00 - 2013-07-31 14:00 - 00054618 _____ C:\Users\thomas2\Desktop\Notepad(1).rar
2013-07-31 13:58 - 2013-07-31 13:58 - 00054618 _____ C:\Users\thomas2\Desktop\Notepad.rar
2013-07-31 13:57 - 2013-07-31 13:57 - 00277416 _____ C:\Users\thomas2\Downloads\Free Top Eleven Hack 2013.exe
2013-07-31 13:57 - 2013-07-31 13:57 - 00000388 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-31 13:57 - 2013-07-31 13:57 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-31 13:51 - 2013-07-31 13:51 - 00202960 _____ C:\Users\thomas2\Downloads\Setup.exe
2013-07-31 13:49 - 2013-07-31 13:49 - 02658115 _____ C:\Users\thomas2\Downloads\Top Eleven Hack 2013.zip
2013-07-31 13:43 - 2013-07-31 13:43 - 04639408 _____ (hxxp://yourfiledownloader.com) C:\Users\thomas2\Downloads\top_eleven_hack_token_cash_downloader_de_99370.exe
2013-07-31 13:24 - 2009-07-14 06:34 - 00022240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-31 13:24 - 2009-07-14 06:34 - 00022240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-31 12:12 - 2013-07-31 12:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-07-31 12:12 - 2013-07-31 12:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-07-31 12:12 - 2013-07-30 13:50 - 00000845 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-07-31 12:05 - 2012-03-11 15:28 - 00000000 ___RD C:\Users\thomas2\Dropbox
2013-07-31 12:05 - 2012-03-11 15:26 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Dropbox
2013-07-31 12:04 - 2013-06-17 00:32 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2013-07-31 12:04 - 2013-06-04 16:55 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-07-31 12:04 - 2012-07-15 20:54 - 00000000 ____D C:\Users\thomas2\AppData\Local\LogMeIn Hamachi
2013-07-31 12:03 - 2010-11-20 23:48 - 00037038 _____ C:\Windows\PFRO.log
2013-07-31 12:03 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-30 18:20 - 2010-11-20 23:01 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-30 15:05 - 2013-07-30 15:04 - 00042043 _____ C:\Users\thomas2\Downloads\video_hd_1.zip
2013-07-30 13:51 - 2013-07-30 13:51 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\AVG2013
2013-07-30 13:51 - 2013-07-30 13:50 - 00000000 ____D C:\ProgramData\AVG2013
2013-07-30 13:50 - 2013-07-30 13:50 - 00000000 ___HD C:\$AVG
2013-07-30 13:50 - 2013-07-30 13:50 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\TuneUp Software
2013-07-30 13:47 - 2013-07-30 13:47 - 00000000 ____D C:\Users\thomas2\AppData\Local\MFAData
2013-07-30 13:46 - 2013-07-30 13:45 - 140002992 _____ (AVG Technologies) C:\Users\thomas2\Downloads\avg_free_x86_all_2013_3349a6461.exe
2013-07-30 13:37 - 2013-07-30 13:37 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-30 13:37 - 2013-07-30 13:36 - 117478104 _____ C:\Users\thomas2\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe
2013-07-30 13:31 - 2013-07-10 00:35 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-30 08:30 - 2011-09-08 14:37 - 00000000 ____D C:\Program Files\Google
2013-07-25 00:40 - 2011-12-20 17:28 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\ICQ
2013-07-25 00:12 - 2012-09-18 15:55 - 00000000 ____D C:\Users\thomas2\AppData\Local\PokerStars.NET
2013-07-24 19:37 - 2012-09-18 15:55 - 00000000 ____D C:\Program Files\PokerStars.NET
2013-07-22 15:13 - 2013-07-22 15:08 - 00000000 ____D C:\Users\thomas2\Desktop\Prag
2013-07-20 01:51 - 2013-07-20 01:51 - 00246072 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avglogx.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00208184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00171320 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys
2013-07-20 01:50 - 2013-07-20 01:50 - 00060216 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys
2013-07-17 00:50 - 2013-07-17 00:50 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Sinvise Systems
2013-07-17 00:50 - 2013-07-17 00:50 - 00000000 ____D C:\Program Files\Sinvise Systems
2013-07-16 23:48 - 2013-07-16 23:48 - 03023360 _____ C:\Users\thomas2\Downloads\ShutdownTimer33.msi
2013-07-16 19:58 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-16 19:12 - 2013-07-16 19:12 - 00001163 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-07-16 19:12 - 2013-07-16 19:12 - 00000000 ____D C:\ProgramData\Systweak
2013-07-16 19:12 - 2013-07-16 19:12 - 00000000 ____D C:\Program Files\Advanced System Protector
2013-07-16 19:11 - 2013-07-16 19:11 - 00001053 _____ C:\Users\Public\Desktop\Sleep Moon Xpress.lnk
2013-07-16 19:11 - 2013-07-16 19:11 - 00000000 ____D C:\Program Files\Sleep Moon Xpress
2013-07-16 19:08 - 2013-07-16 19:06 - 13024768 _____ C:\Users\thomas2\Desktop\Sleep-Moon.msi
2013-07-16 19:08 - 2013-07-16 19:06 - 04702376 _____ (Systweak Inc                                                ) C:\Users\thomas2\Desktop\rcpsetup_softonic_sd_new.exe
2013-07-16 19:05 - 2013-07-16 19:05 - 00000100 _____ C:\Users\Public\sdelevURL.tmp
2013-07-16 19:05 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-07-16 19:04 - 2013-07-16 19:04 - 00393056 _____ (Softonic                                        ) C:\Users\thomas2\Downloads\SoftonicDownloader_fuer_sleep-moon-xpress.exe
2013-07-14 23:33 - 2013-07-14 22:53 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Audacity
2013-07-14 22:38 - 2013-07-14 22:38 - 00000969 _____ C:\Users\thomas2\Desktop\Audacity.lnk
2013-07-14 22:38 - 2013-07-14 22:38 - 00000000 ____D C:\Program Files\Audacity
2013-07-14 22:37 - 2013-07-14 22:35 - 21281052 _____ (Audacity Team                                               ) C:\Users\thomas2\Downloads\audacity-win-2.0.3.exe
2013-07-14 12:21 - 2009-07-14 06:33 - 00412160 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 17:49 - 2011-08-26 10:06 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-11 17:46 - 2010-11-21 02:33 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 17:41 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 13:49 - 2013-07-16 19:11 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2013-07-11 00:57 - 2013-07-11 00:57 - 00000000 ____D C:\371f9056a7043b2d066d59bbb5915734
2013-07-10 01:32 - 2013-07-10 01:32 - 00039224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx86.sys
2013-07-10 00:57 - 2013-07-10 00:57 - 00000955 _____ C:\DelFix.txt
2013-07-10 00:56 - 2012-07-12 14:51 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-10 00:56 - 2011-12-23 13:31 - 00000000 ____D C:\Users\thomas2\AppData\Local\Adobe
2013-07-10 00:56 - 2011-08-26 10:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-10 00:51 - 2013-05-05 16:01 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-10 00:51 - 2013-05-05 16:01 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-10 00:51 - 2011-08-26 10:15 - 00000000 ____D C:\ProgramData\Adobe
2013-07-10 00:47 - 2013-07-10 00:44 - 41404760 _____ (Apple Inc.) C:\Users\thomas2\Downloads\QuickTimeInstaller(1).exe
2013-07-10 00:41 - 2013-07-10 00:41 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 00:40 - 2013-07-10 00:41 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 00:40 - 2013-07-10 00:40 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 00:40 - 2013-03-18 02:57 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-10 00:40 - 2011-09-12 14:16 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-10 00:40 - 2011-09-12 14:16 - 00000000 ____D C:\Program Files\Java
2013-07-10 00:37 - 2013-07-10 00:37 - 00903080 _____ (Oracle Corporation) C:\Users\thomas2\Downloads\jxpiinstall(1).exe
2013-07-08 16:15 - 2013-07-08 16:15 - 00000000 ____D C:\Users\thomas2\AppData\Roaming\Malwarebytes
2013-07-08 16:15 - 2013-07-08 16:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-06 18:47 - 2012-05-04 10:18 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-02 17:30 - 2013-07-02 17:30 - 00000000 ____D C:\Program Files\LogMeIn Hamachi

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 13:42

==================== End Of Log ============================