Virenscan bei neuem, gebrauchtem netbook bedrohungen gefunden

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-08-2013
Ran by Zwergie at 2013-08-05 21:08:07
Running from C:\Users\Zwergie\Documents\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Reader 9.0.1 - Deutsch (Version: 9.0.1)
Apple Software Update (Version: 2.1.3.127)
avast! Free Antivirus (Version: 8.0.1489.0)
Bonjour (Version: 3.0.0.10)
D3DX10 (Version: 15.4.2368.0902)
Energy Management (Version: 4.3.1.6)
Google Chrome (Version: 28.0.1500.95)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4209.2358)
Google Update Helper (Version: 1.3.21.153)
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2117)
Intel(R) Rapid Storage Technology (Version: 9.6.0.1014)
iTunes (Version: 10.7.0.21)
Junk Mail filter update (Version: 15.4.3502.0922)
Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.2100)
Lenovo DirectShare (Version: 1.0.1.38)
Lenovo EasyCamera (Version: 5.38.2.4)
Lenovo Games Console (Version: 0.38.389.2)
Lenovo OneKey Recovery (Version: 7.0.0723)
Lenovo Quick Start (Version: 2.0.10.11)
Lenovo ReadyComm 5 (Version: 5.1.1.20)
Lenovo ReadyComm 5.0 Service (Version: 5.0.0.1)
Lenovo_Wireless_Driver (Version: 1.02.01)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.4763.1000)
Microsoft PowerPoint Viewer (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
MSVCRT (Version: 15.4.2862.0708)
Realtek Ethernet Controller Driver For Windows Vista and Later (Version: 1.00.0009)
Realtek High Definition Audio Driver (Version: 6.0.1.6113)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30123)
SweetIM for Messenger 3.5 (Version: 3.5.0008)
SweetIM Toolbar for Internet Explorer 4.1 (Version: 4.1.0003)
Synaptics Pointing Device Driver (Version: 14.0.17.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
VeriFace (Version: 3.6.0.1209)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth  (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3502.0922)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
 

==================== Restore Points  =========================

30-11-2012 17:28:20 Windows Update
19-12-2012 21:58:41 Windows Update
25-12-2012 13:30:44 Windows Update
26-12-2012 21:08:18 Windows Update
24-01-2013 19:20:39 Windows Update
01-08-2013 16:57:41 Windows Update
02-08-2013 19:25:49 Removed Apple Application Support
02-08-2013 19:29:07 Removed Apple Application Support
02-08-2013 19:31:23 Removed Apple Mobile Device Support
02-08-2013 20:01:28 Windows Update
03-08-2013 09:30:19 Sprachpaketdeinstallation
04-08-2013 16:43:57 Windows Update
05-08-2013 12:34:57 avast! Free Antivirus Setup
05-08-2013 12:58:47 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D85207B-5D84-499A-9810-314288266FBC} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {0E910900-BCD0-4CD7-AD20-9A0C56FA972B} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe [2012-10-31] (Systweak)
Task: {184D4089-1DB0-4B91-AF67-D7DDD21EAE28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {352A42E6-EFFF-439F-A9A9-41582FFE26D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {37584AF1-CFD1-4045-9C8F-A5EB7B07F22C} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4012A404-76F3-4026-95EB-D6D80CC00665} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {E63CC049-0353-4245-8125-3D0A0117DFCB} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2009-07-14] (Microsoft Corporation)
Task: {EC9E2470-1E53-4FF1-AE69-E33A58214A3F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {EFBCB981-94D0-4B64-8722-23F2D6DC2C50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1813153

Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1813153

Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/05/2013 04:36:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (08/05/2013 03:31:48 PM) (Source: Application Hang) (User: )
Description: Programm AdvancedSystemProtector.exe, Version 2.1.1000.10225 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 7c0

Startzeit: 01ce91de0176e9c4

Endzeit: 250

Anwendungspfad: C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe

Berichts-ID:

Error: (08/05/2013 02:47:15 PM) (Source: Application Hang) (User: )
Description: Programm avast.setup, Version 8.0.1489.300 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1264

Startzeit: 01ce91d7564a6bf0

Endzeit: 32

Anwendungspfad: C:\Users\Zwergie\AppData\Local\Temp\_av_sfx.tm~8cd320df-134d-4692-8087-4d4abe1d8283\avast.setup

Berichts-ID:

Error: (08/05/2013 01:49:15 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (08/04/2013 06:53:23 PM) (Source: Application Hang) (User: )
Description: Programm AdvancedSystemProtector.exe, Version 2.1.1000.10225 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 224

Startzeit: 01ce913124917f02

Endzeit: 234

Anwendungspfad: C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe

Berichts-ID: 40aaa207-fd26-11e2-8627-60eb69d6f412

Error: (08/03/2013 11:39:33 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (08/02/2013 10:08:09 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.


System errors:
=============
Error: (08/05/2013 07:45:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst eventlog erreicht.

Error: (08/05/2013 03:24:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (08/04/2013 07:11:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Windows 7 Service Pack 1 (KB976932)

Error: (08/04/2013 07:11:14 PM) (Source: Microsoft-Windows-Service Pack Installer) (User: NT-AUTORITÄT)
Description: Fehler bei der Service Pack-Installation. Fehlercode: 0x800f0829.

Error: (08/04/2013 07:11:14 PM) (Source: Microsoft-Windows-Service Pack Installer) (User: NT-AUTORITÄT)
Description: Das Service Pack kann nicht installiert werden, wenn der Computer im Akkubetrieb ausgeführt wird.

Error: (08/04/2013 06:34:09 PM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (08/04/2013 06:33:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (08/03/2013 07:32:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (08/02/2013 09:35:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/02/2013 08:57:10 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎01.‎08.‎2013 um 19:53:09 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1813153

Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1813153

Error: (08/05/2013 05:31:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/05/2013 04:36:35 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\silicon motion\lenovo easycamera\driverpackage\DPInst64.exe

Error: (08/05/2013 03:31:48 PM) (Source: Application Hang)(User: )
Description: AdvancedSystemProtector.exe2.1.1000.102257c001ce91de0176e9c4250C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe

Error: (08/05/2013 02:47:15 PM) (Source: Application Hang)(User: )
Description: avast.setup8.0.1489.300126401ce91d7564a6bf032C:\Users\Zwergie\AppData\Local\Temp\_av_sfx.tm~8cd320df-134d-4692-8087-4d4abe1d8283\avast.setup

Error: (08/05/2013 01:49:15 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (08/04/2013 06:53:23 PM) (Source: Application Hang)(User: )
Description: AdvancedSystemProtector.exe2.1.1000.1022522401ce913124917f02234C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe40aaa207-fd26-11e2-8627-60eb69d6f412

Error: (08/03/2013 11:39:33 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\silicon motion\lenovo easycamera\driverpackage\DPInst64.exe

Error: (08/02/2013 10:08:09 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.


==================== Memory info =========================== 

Percentage of memory in use: 85%
Total physical RAM: 1013.42 MB
Available physical RAM: 150.21 MB
Total Pagefile: 2037.42 MB
Available Pagefile: 857.58 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.43 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:187.67 GB) (Free:148.57 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:30.27 GB) (Free:29.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 289D9B3C)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=188 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=15 GB) - (Type=12)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-08-2013
Ran by Zwergie (administrator) on 05-08-2013 21:04:50
Running from C:\Users\Zwergie\Documents\Downloads
Microsoft Windows 7 Starter  (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(DeviceVM, Inc.) C:\QSTART.SYS\config\DVMExportService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
(Microsoft Corporation) C:\windows\System32\IgrsSvcs.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9210400 2010-05-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1407520 2010-05-18] (Realtek Semiconductor)
HKLM\...\Run: [Adobe Reader Speed Launcher] - c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35184 2008-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKU\Default\...\RunOnce: [LenovoWallpaper] - C:\Program Files\desktop\ChangeDesktop.exe [ 2009-09-30] ()
HKU\Default User\...\RunOnce: [LenovoWallpaper] - C:\Program Files\desktop\ChangeDesktop.exe [ 2009-09-30] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?st=1
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&st=1&q={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\AVASTS~1\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: SweetIM Toolbar Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\AVASTS~1\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} hxxp://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20111123062837
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - c:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Zwergie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Zwergie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Zwergie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Zwergie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Zwergie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [619808 2010-05-10] (Broadcom Corporation.)
R2 DvmMDES; C:\QSTART.SYS\config\DVMExportService.exe [331776 2009-12-29] (DeviceVM, Inc.)
R2 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-14] (Lenovo Group Limited)
S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [509192 2009-08-14] (Lenovo Group Limited)
S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [579400 2009-09-22] (Lenovo Group Limited)
S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo Group Limited)
R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-14] (Lenovo Group Limited)

==================== Drivers (Whitelisted) ====================

R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [21520 2009-05-19] (Lenovo Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-05] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-05] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-08-05] ()
S3 Bridge0; C:\Windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo)
R3 usbsmi; C:\Windows\System32\DRIVERS\SMIksdrv.sys [172160 2010-01-22] (SMI)
R3 wdmirror; C:\Windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Windows (R) Codename Longhorn DDK provider)
S3 wsvd; C:\Windows\System32\DRIVERS\wsvd.sys [81704 2009-07-21] (CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-05 21:04 - 2013-08-05 21:04 - 00000000 ____D C:\FRST
2013-08-05 17:33 - 2013-08-05 17:33 - 00000000 _____ C:\windows\system32\sho92FD.tmp
2013-08-05 15:06 - 2013-08-05 15:06 - 00000000 ____D C:\ProgramData\Google
2013-08-05 15:04 - 2013-08-05 15:04 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-05 15:02 - 2013-08-05 20:12 - 00001100 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-05 15:02 - 2013-08-05 19:43 - 00001096 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-05 15:02 - 2013-08-05 15:19 - 00000000 ____D C:\Users\Zwergie\AppData\Local\Google
2013-08-05 15:02 - 2013-08-05 15:06 - 00000000 ____D C:\Program Files\Google
2013-08-05 15:02 - 2013-08-05 15:02 - 00770344 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00369584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00175176 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00002075 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswVmm.sys.sum
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswSP.sys.sum
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswSnx.sys.sum
2013-08-05 15:02 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-08-05 15:02 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-08-05 15:02 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-08-05 15:02 - 2013-05-09 10:59 - 00049376 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-08-05 15:02 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-08-05 15:02 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-08-05 14:57 - 2013-05-02 02:06 - 00238872 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-08-05 14:37 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\windows\avastSS.scr
2013-08-05 14:35 - 2013-08-05 14:35 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-05 14:28 - 2013-08-05 14:59 - 00000000 ____D C:\ProgramData\AVAST Software
2013-08-05 14:15 - 2013-08-05 14:15 - 00000002 _____ C:\AvastSetup.log
2013-08-04 19:13 - 2012-12-16 16:25 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-08-04 19:13 - 2012-12-16 16:25 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-08-04 19:08 - 2013-08-04 19:08 - 00000000 ____D C:\windows\system32\EventProviders
2013-08-04 19:03 - 2013-02-22 06:05 - 12324352 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-04 19:03 - 2013-02-22 05:47 - 09738752 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-04 19:03 - 2013-02-22 05:46 - 01800704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-04 19:03 - 2013-02-22 05:38 - 01129472 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-04 19:03 - 2013-02-22 05:38 - 01104384 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-04 19:03 - 2013-02-22 05:37 - 01427968 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-08-04 19:03 - 2013-02-22 05:36 - 00231936 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-08-04 19:03 - 2013-02-22 05:35 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-04 19:03 - 2013-02-22 05:34 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-04 19:03 - 2013-02-22 05:34 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-08-04 19:03 - 2013-02-22 05:34 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-08-04 19:03 - 2013-02-22 05:33 - 00607744 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-04 19:03 - 2013-02-22 05:32 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-04 19:03 - 2013-02-22 05:31 - 02382848 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-04 19:03 - 2013-02-22 05:31 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-08-04 19:03 - 2013-02-22 05:28 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-08-03 10:00 - 2013-01-04 06:50 - 00169984 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-08-03 10:00 - 2013-01-04 06:46 - 00868352 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-08-03 10:00 - 2013-01-04 06:46 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 04:59 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-08-03 10:00 - 2013-01-04 04:43 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 04:43 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 04:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-03 10:00 - 2013-01-04 04:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-03 09:59 - 2013-04-12 15:58 - 01210728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2013-08-03 09:59 - 2013-02-12 15:51 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys
2013-08-03 09:59 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-03 09:59 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2013-08-03 09:57 - 2013-03-01 05:11 - 02345984 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-08-03 09:57 - 2013-01-24 06:51 - 00195816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys
2013-08-03 09:57 - 2012-11-09 06:49 - 00492032 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-08-03 09:56 - 2013-03-19 07:06 - 03958120 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2013-08-03 09:56 - 2013-03-19 07:06 - 03902312 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-08-03 09:56 - 2013-03-19 06:54 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-08-03 09:56 - 2013-03-19 04:50 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-08-03 09:56 - 2013-02-12 17:13 - 02691072 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2013-08-03 09:55 - 2013-02-12 17:07 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2013-08-03 09:55 - 2013-02-12 15:59 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2013-08-03 09:53 - 2013-01-04 06:55 - 01287528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-03 09:53 - 2013-01-04 06:55 - 00187240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2013-08-03 09:53 - 2012-11-02 06:50 - 01388544 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2013-08-03 09:52 - 2012-11-30 01:21 - 00420032 _____ C:\windows\system32\locale.nls
2013-08-02 21:54 - 2013-08-02 21:54 - 00000000 ____D C:\windows\pss
2013-08-02 21:35 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2013-08-02 21:35 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\windows\system32\gameux.dll
2013-08-02 21:35 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\windows\system32\fpb.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\windows\system32\oflc-nz.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\windows\system32\pegibbfc.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\windows\system32\csrr.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\windows\system32\cob-au.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\windows\system32\usk.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\windows\system32\grb.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\windows\system32\pegi-pt.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\windows\system32\pegi.rs
2013-08-02 21:35 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\windows\system32\djctq.rs
2013-08-02 21:21 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\windows\system32\esrb.rs
2013-08-02 21:20 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\windows\system32\pegi-fi.rs
2013-08-02 21:19 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\windows\system32\oflc.rs
2013-08-02 21:18 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\windows\system32\cero.rs
2013-08-02 21:07 - 2012-11-20 07:10 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-08-01 19:05 - 2013-08-01 19:09 - 00000000 ____D C:\Program Files\iPod
2013-08-01 19:05 - 2013-08-01 19:05 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
134

==================== One Month Modified Files and Folders =======

2013-08-05 21:04 - 2013-08-05 21:04 - 00000000 ____D C:\FRST
2013-08-05 21:04 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-08-05 21:01 - 2011-05-25 16:47 - 00000000 ____D C:\Users\Zwergie
2013-08-05 20:56 - 2009-07-14 06:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-05 20:56 - 2009-07-14 06:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-05 20:53 - 2011-03-11 17:54 - 00000177 ____H C:\dvmexp.idx
2013-08-05 20:12 - 2013-08-05 15:02 - 00001100 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-05 19:49 - 2011-03-11 17:17 - 01500242 _____ C:\windows\system32\PerfStringBackup.INI
2013-08-05 19:43 - 2013-08-05 15:02 - 00001096 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-05 19:43 - 2011-03-11 18:08 - 00020221 _____ C:\windows\setupact.log
2013-08-05 19:43 - 2011-03-11 18:00 - 01592923 _____ C:\FaceProv.log
2013-08-05 19:43 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-08-05 17:33 - 2013-08-05 17:33 - 00000000 _____ C:\windows\system32\sho92FD.tmp
2013-08-05 17:32 - 2011-03-11 17:06 - 01510975 _____ C:\windows\WindowsUpdate.log
2013-08-05 17:31 - 2011-03-11 18:09 - 00000000 ____D C:\windows\sysprep32
2013-08-05 16:48 - 2009-07-14 04:37 - 00000000 ____D C:\windows\rescache
2013-08-05 15:41 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-08-05 15:19 - 2013-08-05 15:02 - 00000000 ____D C:\Users\Zwergie\AppData\Local\Google
2013-08-05 15:17 - 2011-03-11 17:36 - 00000000 ____D C:\ProgramData\McAfee
2013-08-05 15:17 - 2011-03-11 17:36 - 00000000 ____D C:\Program Files\McAfee
2013-08-05 15:16 - 2011-11-10 08:50 - 00008988 _____ C:\windows\PFRO.log
2013-08-05 15:06 - 2013-08-05 15:06 - 00000000 ____D C:\ProgramData\Google
2013-08-05 15:06 - 2013-08-05 15:02 - 00000000 ____D C:\Program Files\Google
2013-08-05 15:04 - 2013-08-05 15:04 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-05 15:02 - 2013-08-05 15:02 - 00770344 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00369584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00175176 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-08-05 15:02 - 2013-08-05 15:02 - 00002075 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswVmm.sys.sum
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswSP.sys.sum
2013-08-05 15:02 - 2013-08-05 15:02 - 00000175 _____ C:\windows\system32\Drivers\aswSnx.sys.sum
2013-08-05 15:02 - 2009-07-14 04:04 - 00002577 _____ C:\windows\system32\config.nt
2013-08-05 14:59 - 2013-08-05 14:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-08-05 14:35 - 2013-08-05 14:35 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-05 14:15 - 2013-08-05 14:15 - 00000002 _____ C:\AvastSetup.log
2013-08-05 10:36 - 2009-07-14 06:33 - 00277168 _____ C:\windows\system32\FNTCACHE.DAT
2013-08-05 10:35 - 2011-03-11 17:49 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-04 19:14 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\de-DE
2013-08-04 19:08 - 2013-08-04 19:08 - 00000000 ____D C:\windows\system32\EventProviders
2013-08-04 18:34 - 2009-07-14 06:56 - 00000000 ____D C:\windows\system32\winrm
2013-08-04 18:34 - 2009-07-14 06:56 - 00000000 ____D C:\windows\system32\WCN
2013-08-04 18:34 - 2009-07-14 06:56 - 00000000 ____D C:\windows\system32\slmgr
2013-08-04 18:34 - 2009-07-14 06:56 - 00000000 ____D C:\windows\system32\Printing_Admin_Scripts
2013-08-04 18:34 - 2009-07-14 06:56 - 00000000 ____D C:\windows\DigitalLocker
2013-08-04 18:34 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-04 18:34 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-04 18:34 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-04 18:34 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-04 18:34 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\MUI
2013-08-04 18:34 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\com
2013-08-04 18:34 - 2009-07-14 04:37 - 00000000 ____D C:\windows\IME
2013-08-04 18:34 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-02 21:54 - 2013-08-02 21:54 - 00000000 ____D C:\windows\pss
2013-08-02 21:50 - 2011-03-11 17:41 - 00000000 ____D C:\ProgramData\VeriFace
2013-08-02 21:39 - 2012-11-08 21:14 - 00000000 ____D C:\Program Files\RegClean Pro
2013-08-02 21:39 - 2011-12-10 17:45 - 00000000 ____D C:\Users\Zwergie\AppData\Roaming\SoftGrid Client
2013-08-02 21:38 - 2012-11-08 21:14 - 00000000 ____D C:\Users\Zwergie\AppData\Roaming\Systweak
2013-08-02 21:36 - 2011-08-31 21:22 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-08-02 21:35 - 2012-09-21 13:52 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-08-01 19:09 - 2013-08-01 19:05 - 00000000 ____D C:\Program Files\iPod
2013-08-01 19:09 - 2012-09-21 13:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-01 19:05 - 2013-08-01 19:05 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-08-01 19:05 - 2012-09-21 13:57 - 00000000 ____D C:\ProgramData\Apple Computer

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2012-12-25 15:29] - [2012-09-06 18:48] - 0245616 ____A (Microsoft Corporation) 59F06B4968E58BC83DFC56CA4517960E



LastRegBack: 2013-08-03 11:23

==================== End Of Log ============================