Delta Search

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-08-2013
Ran by Schwarzfischer (administrator) on 08-08-2013 11:29:40
Running from C:\Users\Schwarzfischer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
(Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(CyberLink) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16335464 2009-09-29] (NVIDIA Corporation)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610360 2009-09-14] ()
HKLM\...\Run: [PC-Doctor for Windows localizer] - C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-17] (PC-Doctor, Inc.)
HKLM-x32\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Remote Solution] - C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe [656896 2009-08-25] (Hewlett-Packard)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [600936 2009-06-29] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [60464 2009-09-02] (EasyBits Software AS)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated)
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1685048 2009-09-29] (Hewlett-Packard)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52272 2009-12-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-05] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-08 11:29 - 2013-08-08 11:29 - 00000000 ____D C:\FRST
2013-08-08 11:28 - 2013-08-08 11:29 - 01790059 _____ (Farbar) C:\Users\Schwarzfischer\Downloads\FRST64.exe
2013-08-08 11:08 - 2013-08-08 11:08 - 00001056 _____ C:\Users\Schwarzfischer\Desktop\JRT.txt
2013-08-08 11:04 - 2013-08-08 11:04 - 00957230 _____ (Oleg N. Scherbakov) C:\Users\Schwarzfischer\Desktop\JRT.exe
2013-08-08 11:04 - 2013-08-08 11:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-08 11:03 - 2013-08-08 11:04 - 00957230 _____ (Oleg N. Scherbakov) C:\Users\Schwarzfischer\Downloads\JRT.exe
2013-08-08 10:54 - 2013-08-08 10:54 - 00020310 _____ C:\Users\Schwarzfischer\Desktop\combofix.txt
2013-08-08 10:52 - 2013-08-08 10:52 - 00020310 _____ C:\ComboFix.txt
2013-08-08 10:44 - 2013-08-08 10:52 - 00000000 ____D C:\Qoobox
2013-08-08 10:44 - 2013-08-08 10:51 - 00000000 ____D C:\Windows\erdnt
2013-08-08 10:44 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-08 10:44 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-08 10:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-08 10:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-08 10:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-08 10:44 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-08 10:44 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-08 10:44 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-08 10:43 - 2013-08-08 10:43 - 05100713 ____R (Swearware) C:\Users\Schwarzfischer\Desktop\ComboFix.exe
2013-08-08 10:43 - 2013-08-08 10:43 - 05100713 _____ (Swearware) C:\Users\Schwarzfischer\Downloads\ComboFix.exe
2013-08-08 10:26 - 2013-05-02 02:06 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-08 09:56 - 2013-08-08 09:58 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\08.08.2013
2013-08-08 09:55 - 2013-08-08 09:55 - 00014345 _____ C:\Users\Schwarzfischer\Desktop\dds.txt
2013-08-08 09:55 - 2013-08-08 09:55 - 00005918 _____ C:\Users\Schwarzfischer\Desktop\attach.txt
2013-08-08 09:54 - 2013-08-08 09:54 - 00700783 ____R (Swearware) C:\Users\Schwarzfischer\Downloads\dds+.exe
2013-08-08 09:51 - 2013-08-08 09:51 - 00000996 _____ C:\AdwCleaner[S2].txt
2013-08-08 09:50 - 2013-08-08 09:50 - 00666633 _____ C:\Users\Schwarzfischer\Downloads\adwcleaner (1).exe
2013-08-08 08:16 - 2013-08-08 08:16 - 02347384 _____ (ESET) C:\Users\Schwarzfischer\Downloads\esetsmartinstaller_enu.exe
2013-08-08 07:51 - 2013-08-08 07:51 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-08 07:51 - 2013-08-08 07:51 - 00000000 ____D C:\Users\Schwarzfischer\AppData\Roaming\Malwarebytes
2013-08-08 07:51 - 2013-08-08 07:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-08 07:50 - 2013-08-08 07:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-08 07:50 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-08 07:49 - 2013-08-08 07:50 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Schwarzfischer\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-08 07:41 - 2013-08-08 07:41 - 00010173 _____ C:\Users\Schwarzfischer\Desktop\AdwCleaner[S1].txt
2013-08-08 07:39 - 2013-08-08 07:40 - 00010173 _____ C:\AdwCleaner[S1].txt
2013-08-08 07:39 - 2013-08-08 07:39 - 00010162 _____ C:\Users\Schwarzfischer\Desktop\AdwCleaner[R1].txt
2013-08-08 07:38 - 2013-08-08 07:38 - 00010162 _____ C:\AdwCleaner[R1].txt
2013-08-08 07:37 - 2013-08-08 07:37 - 00666633 _____ C:\Users\Schwarzfischer\Downloads\adwcleaner.exe
2013-08-08 07:31 - 2013-08-08 07:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Schwarzfischer\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-06 14:32 - 2013-08-08 07:15 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\Bewerbungsunterlagen, Deutschlandstipendium
2013-08-06 14:23 - 2013-08-06 14:23 - 00004937 _____ C:\Users\Schwarzfischer\Downloads\bewerbung (1).xml
2013-08-06 14:23 - 2013-08-06 14:23 - 00004937 _____ C:\Users\Schwarzfischer\Desktop\bewerbung.xml
2013-08-06 14:22 - 2013-08-06 14:23 - 00004937 _____ C:\Users\Schwarzfischer\Downloads\bewerbung.xml
2013-08-04 18:50 - 2013-08-06 13:36 - 00000005 _____ C:\Users\Schwarzfischer\AppData\Roaming\WBPU-TTL.DAT
2013-08-04 17:45 - 2013-08-04 17:46 - 00000000 ____D C:\Windows\system32\MRT
2013-08-04 15:31 - 2013-08-04 15:31 - 00000000 ____D C:\Windows\system32\IO
2013-08-04 15:13 - 2013-08-08 07:23 - 00000000 ____D C:\Program Files\CCleaner
2013-08-04 15:13 - 2013-08-04 15:13 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-03 21:48 - 2013-08-03 21:48 - 00007066 _____ C:\Users\Schwarzfischer\Downloads\LS_6500BAUBA_B3_praxisbegleitende_Fächer.ics
2013-08-03 17:29 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-03 17:29 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-03 17:29 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-03 17:29 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-03 17:29 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-03 17:29 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-03 16:30 - 2013-08-03 16:31 - 04618595 _____ C:\Users\Schwarzfischer\Downloads\xpclean58.zip
2013-08-03 16:08 - 2013-08-03 16:08 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (2).zip
2013-08-03 15:00 - 2013-08-03 15:00 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-03 15:00 - 2013-08-03 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-03 10:26 - 2013-08-03 15:18 - 00000000 ____D C:\Program Files (x86)\nLite
2013-08-03 09:26 - 2013-08-03 09:26 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (1).zip
2013-08-03 09:26 - 2013-08-03 09:26 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (1) (1).zip
2013-08-03 09:25 - 2013-08-03 09:26 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202.zip
2013-07-26 21:33 - 2013-08-08 07:20 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\Neuer Ordner (3)
2013-07-19 22:20 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-19 22:20 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-19 22:20 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet(77).dll
2013-07-19 22:20 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon(76).dll
2013-07-19 22:20 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-19 22:20 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-19 22:20 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-19 22:20 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-19 22:20 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil(75).dll
2013-07-19 22:20 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-19 22:20 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-19 22:20 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-19 22:20 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-19 22:20 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet(74).dll
2013-07-19 22:20 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon(72).dll
2013-07-19 22:20 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-19 22:20 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil(71).dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-19 22:20 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-19 22:20 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-19 22:20 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-19 22:20 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-19 22:20 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-19 16:12 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-19 16:12 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-19 16:12 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-19 16:12 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-19 16:12 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-19 16:12 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-19 16:09 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
146

==================== One Month Modified Files and Folders =======

2013-08-08 11:29 - 2013-08-08 11:29 - 00000000 ____D C:\FRST
2013-08-08 11:29 - 2013-08-08 11:28 - 01790059 _____ (Farbar) C:\Users\Schwarzfischer\Downloads\FRST64.exe
2013-08-08 11:21 - 2009-07-14 06:45 - 00019888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-08 11:21 - 2009-07-14 06:45 - 00019888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-08 11:20 - 2013-01-25 22:40 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-08 11:19 - 2009-12-22 11:10 - 00653928 _____ C:\Windows\system32\perfh007.dat
2013-08-08 11:19 - 2009-12-22 11:10 - 00129800 _____ C:\Windows\system32\perfc007.dat
2013-08-08 11:19 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-08 11:18 - 2013-01-25 20:20 - 01548970 _____ C:\Windows\WindowsUpdate.log
2013-08-08 11:14 - 2013-01-25 22:40 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-08 11:14 - 2009-12-22 02:18 - 00482710 _____ C:\Windows\PFRO.log
2013-08-08 11:14 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-08 11:14 - 2009-07-14 06:51 - 00050101 _____ C:\Windows\setupact.log
2013-08-08 11:08 - 2013-08-08 11:08 - 00001056 _____ C:\Users\Schwarzfischer\Desktop\JRT.txt
2013-08-08 11:04 - 2013-08-08 11:04 - 00957230 _____ (Oleg N. Scherbakov) C:\Users\Schwarzfischer\Desktop\JRT.exe
2013-08-08 11:04 - 2013-08-08 11:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-08 11:04 - 2013-08-08 11:03 - 00957230 _____ (Oleg N. Scherbakov) C:\Users\Schwarzfischer\Downloads\JRT.exe
2013-08-08 10:58 - 2013-01-26 11:34 - 00000678 _____ C:\Windows\Tasks\WebContent AutoUpdate 2012.job
2013-08-08 10:54 - 2013-08-08 10:54 - 00020310 _____ C:\Users\Schwarzfischer\Desktop\combofix.txt
2013-08-08 10:52 - 2013-08-08 10:52 - 00020310 _____ C:\ComboFix.txt
2013-08-08 10:52 - 2013-08-08 10:44 - 00000000 ____D C:\Qoobox
2013-08-08 10:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-08 10:51 - 2013-08-08 10:44 - 00000000 ____D C:\Windows\erdnt
2013-08-08 10:50 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-08 10:43 - 2013-08-08 10:43 - 05100713 ____R (Swearware) C:\Users\Schwarzfischer\Desktop\ComboFix.exe
2013-08-08 10:43 - 2013-08-08 10:43 - 05100713 _____ (Swearware) C:\Users\Schwarzfischer\Downloads\ComboFix.exe
2013-08-08 10:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-08 09:58 - 2013-08-08 09:56 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\08.08.2013
2013-08-08 09:55 - 2013-08-08 09:55 - 00014345 _____ C:\Users\Schwarzfischer\Desktop\dds.txt
2013-08-08 09:55 - 2013-08-08 09:55 - 00005918 _____ C:\Users\Schwarzfischer\Desktop\attach.txt
2013-08-08 09:54 - 2013-08-08 09:54 - 00700783 ____R (Swearware) C:\Users\Schwarzfischer\Downloads\dds+.exe
2013-08-08 09:51 - 2013-08-08 09:51 - 00000996 _____ C:\AdwCleaner[S2].txt
2013-08-08 09:50 - 2013-08-08 09:50 - 00666633 _____ C:\Users\Schwarzfischer\Downloads\adwcleaner (1).exe
2013-08-08 09:49 - 2013-02-11 11:14 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-08-08 08:16 - 2013-08-08 08:16 - 02347384 _____ (ESET) C:\Users\Schwarzfischer\Downloads\esetsmartinstaller_enu.exe
2013-08-08 08:00 - 2013-01-26 11:34 - 00000522 _____ C:\Windows\Tasks\AutoUpdate Allplan 2012.job
2013-08-08 07:51 - 2013-08-08 07:51 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-08 07:51 - 2013-08-08 07:51 - 00000000 ____D C:\Users\Schwarzfischer\AppData\Roaming\Malwarebytes
2013-08-08 07:51 - 2013-08-08 07:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-08 07:51 - 2013-08-08 07:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-08 07:50 - 2013-08-08 07:49 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Schwarzfischer\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-08 07:41 - 2013-08-08 07:41 - 00010173 _____ C:\Users\Schwarzfischer\Desktop\AdwCleaner[S1].txt
2013-08-08 07:40 - 2013-08-08 07:39 - 00010173 _____ C:\AdwCleaner[S1].txt
2013-08-08 07:39 - 2013-08-08 07:39 - 00010162 _____ C:\Users\Schwarzfischer\Desktop\AdwCleaner[R1].txt
2013-08-08 07:38 - 2013-08-08 07:38 - 00010162 _____ C:\AdwCleaner[R1].txt
2013-08-08 07:37 - 2013-08-08 07:37 - 00666633 _____ C:\Users\Schwarzfischer\Downloads\adwcleaner.exe
2013-08-08 07:32 - 2013-08-08 07:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Schwarzfischer\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-08 07:25 - 2013-01-25 20:20 - 00000000 ____D C:\Users\Schwarzfischer
2013-08-08 07:24 - 2013-03-09 21:17 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\kramer 411s
2013-08-08 07:24 - 2013-02-11 11:00 - 00000000 ____D C:\ProgramData\HP
2013-08-08 07:24 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-08 07:24 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-08 07:24 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-08 07:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-08-08 07:24 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-08 07:23 - 2013-08-04 15:13 - 00000000 ____D C:\Program Files\CCleaner
2013-08-08 07:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-08-08 07:20 - 2013-07-26 21:33 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\Neuer Ordner (3)
2013-08-08 07:19 - 2013-02-01 16:31 - 00000000 ____D C:\ProgramData\Adobe
2013-08-08 07:15 - 2013-08-06 14:32 - 00000000 ____D C:\Users\Schwarzfischer\Desktop\Bewerbungsunterlagen, Deutschlandstipendium
2013-08-07 18:02 - 2013-01-25 20:52 - 00000000 ____D C:\Users\SCHWAR~1\AppData\Local\DoNotTrackPlus
2013-08-06 14:35 - 2013-02-11 11:18 - 00000000 ____D C:\Users\Schwarzfischer\Documents\Eigene Scans
2013-08-06 14:23 - 2013-08-06 14:23 - 00004937 _____ C:\Users\Schwarzfischer\Downloads\bewerbung (1).xml
2013-08-06 14:23 - 2013-08-06 14:23 - 00004937 _____ C:\Users\Schwarzfischer\Desktop\bewerbung.xml
2013-08-06 14:23 - 2013-08-06 14:22 - 00004937 _____ C:\Users\Schwarzfischer\Downloads\bewerbung.xml
2013-08-06 13:36 - 2013-08-04 18:50 - 00000005 _____ C:\Users\Schwarzfischer\AppData\Roaming\WBPU-TTL.DAT
2013-08-04 17:46 - 2013-08-04 17:45 - 00000000 ____D C:\Windows\system32\MRT
2013-08-04 15:31 - 2013-08-04 15:31 - 00000000 ____D C:\Windows\system32\IO
2013-08-04 15:20 - 2009-12-22 11:07 - 00000000 ____D C:\Windows\Panther
2013-08-04 15:13 - 2013-08-04 15:13 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-03 21:48 - 2013-08-03 21:48 - 00007066 _____ C:\Users\Schwarzfischer\Downloads\LS_6500BAUBA_B3_praxisbegleitende_Fächer.ics
2013-08-03 16:31 - 2013-08-03 16:30 - 04618595 _____ C:\Users\Schwarzfischer\Downloads\xpclean58.zip
2013-08-03 16:08 - 2013-08-03 16:08 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (2).zip
2013-08-03 15:18 - 2013-08-03 10:26 - 00000000 ____D C:\Program Files (x86)\nLite
2013-08-03 15:03 - 2013-01-26 02:00 - 00000000 ____D C:\ProgramData\Recovery
2013-08-03 15:00 - 2013-08-03 15:00 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-03 15:00 - 2013-08-03 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-03 09:26 - 2013-08-03 09:26 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (1).zip
2013-08-03 09:26 - 2013-08-03 09:26 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202 (1) (1).zip
2013-08-03 09:26 - 2013-08-03 09:25 - 00451990 _____ C:\Users\Schwarzfischer\Downloads\0603-202.zip
2013-07-27 14:27 - 2009-07-14 07:38 - 00067584 ____S C:\Windows\bootstat(70).dat
2013-07-20 07:10 - 2009-07-14 06:45 - 00427496 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-19 22:21 - 2013-01-26 00:15 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-19 16:24 - 2013-01-25 22:42 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-19 16:15 - 2013-01-25 22:40 - 00004122 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-19 16:15 - 2013-01-25 22:40 - 00003870 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-02 05:52

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-08-2013
Ran by Schwarzfischer at 2013-08-08 11:30:10
Running from C:\Users\Schwarzfischer\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
2007 Microsoft Office Suite Service Pack 1 (SP1) (x32)
64 Bit HP CIO Components Installer (Version: 6.2.1)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.1)
Adobe Flash Player 11 ActiveX (x32 Version: 11.5.502.146)
Adobe Reader XI (11.0.01) - Deutsch (x32 Version: 11.0.01)
Allplan IBD Hochbau  - CAD Planungsdaten für Allplan 2008 (x32 Version: 2008.0)
Allplan IBD Industriebau  - CAD Planungsdaten für Allplan 2008 (x32 Version: 2008.0)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
BufferChm (x32 Version: 130.0.331.000)
Copy (x32 Version: 130.0.366.000)
CyberLink DVD Suite Deluxe (x32 Version: 7.0.2115)
Destinations (x32 Version: 130.0.0.0)
DeviceDiscovery (x32 Version: 130.0.372.000)
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904)
DJ_AIO_06_F2400_SW_Min (x32 Version: 130.0.373.000)
DVD Menu Pack for HP MediaSmart Video (x32 Version: 3.1.3224)
ESS Energie Indikator (x32 Version: 2012.0)
F2400 (x32 Version: 130.0.373.000)
General Runtime Files for Allplan 2012-0-1 (x32 Version: 1.6.0.0)
General Runtime Files for Nemetschek Allplan 2009 (x32 Version: 1.5.2.0)
Google Chrome (x32 Version: 28.0.1500.72)
Google Update Helper (x32 Version: 1.3.21.153)
GPBaseService2 (x32 Version: 130.0.371.000)
Hardwarediagnosetools (Version: 6.0.5247.34)
HP Advisor (x32 Version: 3.3.9512.3162)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6 (Version: 13.0)
HP Games (x32 Version: 1.0.0.71)
HP MediaSmart DVD (x32 Version: 3.1.3317)
HP MediaSmart Music/Photo/Video (x32 Version: 3.1.3422)
HP MediaSmart SmartMenu (Version: 3.1.0.1)
HP Odometer (x32 Version: 2.10.0000)
HP Print Projects 1.0 (Version: 1.0)
HP Remote Solution (x32 Version: 1.1.11.0)
HP Setup (x32 Version: 1.2.3560.3170)
HP Smart Web Printing 4.5 (Version: 4.5)
HP Solution Center 13.0 (Version: 13.0)
HP Support Assistant (x32 Version: 4.2.5.3)
HP Support Information (x32 Version: 10.1.0002)
HP Update (x32 Version: 5.003.001.001)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3)
HPPhotoGadget (x32 Version: 130.0.282.000)
hpPrintProjects (x32 Version: 130.0.303.000)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 130.0.371.000)
hpWLPGInstaller (x32 Version: 130.0.303.000)
Imaging Device Functions 13.0 (Version: 13.0)
Junk Mail filter update (x32 Version: 14.0.8089.726)
LabelPrint (x32 Version: 2.5.2017)
LightScribe System Software (x32 Version: 1.18.8.1)
Magic Desktop (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MarketResearch (x32 Version: 130.0.374.000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6215.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6213.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6213.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6213.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6213.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6215.1000)
Microsoft Report Viewer Redistributable 2008 SP1 (x32 Version: 9.0.30729)
Microsoft Report Viewer Redistributable 2008 SP1 (x32)
Microsoft Search Enhancement Pack (x32 Version: 1.2.123.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Theme Pack for HP MediaSmart Video (x32 Version: 3.1.3310)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nemetschek Allplan 2008 (x32 Version: 2008.0)
Nemetschek Allplan 2009 (x32 Version: 2009.0)
Nemetschek Allplan 2012 (x32 Version: 2012.0)
Nemetschek SoftLock 2006 (x32 Version: 1.26.55)
Norton Online Backup (x32 Version: 1.2.20.0)
NVIDIA Drivers (Version: 1.9)
NVIDIA PhysX (x32 Version: 9.09.0814)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Power2Go (x32 Version: 6.0.3304)
PowerDirector (x32 Version: 7.0.3405)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5938)
Recovery Manager (x32 Version: 5.5.2216)
Scan (x32 Version: 13.0.0.0)
Shop for HP Supplies (Version: 13.0)
SmartWebPrinting (x32 Version: 130.0.373.000)
SolutionCenter (x32 Version: 130.0.373.000)
Status (x32 Version: 130.0.373.000)
Toolbox (x32 Version: 130.0.648.000)
TrayApp (x32 Version: 130.0.376.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
WebReg (x32 Version: 130.0.132.017)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Toolbar (x32 Version: 14.0.8064.206)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

==================== Restore Points  =========================

03-08-2013 13:05:32 Wiederherstellungsvorgang
03-08-2013 14:08:17 Windows Update
03-08-2013 15:24:07 Windows Update
04-08-2013 15:44:58 Windows Update
07-08-2013 16:03:42 Windows Update
08-08-2013 05:17:45 Wiederherstellungsvorgang
08-08-2013 08:26:45 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03257A9A-C11D-4F2B-A272-07F5DED64CD4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-25] (Google Inc.)
Task: {105814FA-7F5A-4328-89BA-7D4C4F90312D} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File
Task: {34B96D75-90D5-4BE7-B68C-4567C1D6DBFD} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {3F9C6532-0559-4A0A-96FF-86E3C549487B} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe No File
Task: {43A3D7D4-5A7F-453D-AD3D-A1B441B7D1C3} - System32\Tasks\CLMLSvc => c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [2009-10-22] (CyberLink)
Task: {7494F8D8-F08A-4B0A-8972-4AD444AFC5A2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-25] (Google Inc.)
Task: {7E6764BB-C66B-474D-9478-ED5EC6743C6B} - System32\Tasks\WebContent AutoUpdate 2012 => C:\Program Files (x86)\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe [2011-09-22] (Nemetschek Allplan GmbH)
Task: {A9613EC1-38B5-481F-90BF-E87BD0909C9C} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
Task: {C9E59CE3-5571-427D-87E1-1D3567F2D453} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
Task: {DFA0FB5A-A8FE-4D9A-87F6-73935FB79856} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {FCEB43B8-3318-4601-9169-A3828F150148} - System32\Tasks\AutoUpdate Allplan 2012 => C:\Program Files (x86)\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe [2011-09-22] (Nemetschek Allplan GmbH)
Task: C:\Windows\Tasks\AutoUpdate Allplan 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WebContent AutoUpdate 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================
Error: (05/31/2013 09:10:03 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 8 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/05/2013 07:56:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6214.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 8341 seconds with 3480 seconds of active time.  This session ended with a crash.

Error: (03/05/2013 10:14:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 12 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (02/17/2013 10:54:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (02/12/2013 10:01:04 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 29 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (02/12/2013 03:02:47 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 21 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 6143.24 MB
Available physical RAM: 4573.46 MB
Total Pagefile: 12284.66 MB
Available Pagefile: 10174.6 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:685.44 GB) (Free:620.32 GB) NTFS (Disk=0 Partition=2)
Drive d: (FACTORY_IMAGE) (Fixed) (Total:13.1 GB) (Free:1.81 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=685 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

SystemLook 30.07.11 by jpshortstuff
Log created at 11:31 on 08/08/2013 by Schwarzfischer
Administrator - Elevation successful

========== filefind ==========

Searching for "*LyriXeeker*"
No files found.

========== folderfind ==========

Searching for "*LyriXeeker*"
No folders found.

========== regfind ==========

Searching for "LyriXeeker"
No data found.

-= EOF =-