Trojaner Versucht zu entfernen bin nicht sicher lade die log files bite um hilfe.?

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-08-2013
Ran by ayrtonsenna (administrator) on 19-08-2013 09:07:51
Running from H:\trojaner erntferner\TRojaner Boardan\Log file almak icin64
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe
() C:\Program Files (x86)\EZ-RC\ez-rc-tray.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Nero AG) C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe
() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
() C:\Users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Ocs_SM] - C:\Users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2013-03-28] (OCS)
HKCU\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe [205976 2009-09-18] (Alcohol Soft Development Team)
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-06] (Facebook Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [iFunBoxConnector] - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe [812544 2012-11-20] ()
HKCU\...\Run: [ieuzqziq] - C:\Users\ayrtonsenna\AppData\Roaming\Fcnyrocpnr\mvtwodqziq.exe [x]
MountPoints2: {46796d75-12f3-11e2-a5af-005056c00008} - H:\Windows/Setup.exe
MountPoints2: {5df21f6f-e146-11e0-bb6c-806e6f6e6963} - G:\Windows/Setup.exe
MountPoints2: {84bf3b6a-e14c-11e0-8a92-005056c00008} - G:\Windows/Setup.exe
MountPoints2: {a248f3cf-12fd-11e2-bc4c-806e6f6e6963} - G:\Windows/Setup.exe
MountPoints2: {e7c10525-e176-11e0-bfc4-005056c00008} - H:\Windows/Setup.exe
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-07-27] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [facemoods] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe [323584 2010-10-26] (facemoods.com)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1234216 2010-04-03] (Nero AG)
HKLM-x32\...\Run: [vmware-tray] - C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [129584 2010-09-21] (VMware, Inc.)
HKLM-x32\...\Run: [RemoteControl11] - C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [230696 2011-08-24] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-06-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TaskTray] -  [x]
HKLM-x32\...\Run: [MPlayerForWindows_UpdateReminder] - C:\Program Files (x86)\MPlayer für Windows\AutoUpdate.exe [235002 2011-06-09] ()
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1718920 2013-02-02] (Ask)
HKLM-x32\...\Run: [MCM] - C:\Program Files (x86)\Mp3 Convert Master\Mp3ConvertMaster.exe [x]
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort12reminder] - C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2010-12-23] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [x]
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\EZ-RC System Tray.lnk
ShortcutTarget: EZ-RC System Tray.lnk -> C:\Program Files (x86)\EZ-RC\ez-rc-tray.exe ()
Startup: C:\Users\ayrtonsenna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Turkcell 3G VINN.lnk
ShortcutTarget: Turkcell 3G VINN.lnk -> C:\Program Files (x86)\Turkcell\Turkcell 3G VINN\Turkcell 3G VINN.exe (Turkcell Teknoloji)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.3.0.36
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119828&tt=190313_wctrl&babsrc=SP_ss&mntrId=726F002682CE4FAF
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: CescrtHlpr Object - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll (facemoods.com BHO)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll (facemoods.com)
Toolbar: HKLM-x32 - toolplugin - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - C:\Users\ayrtonsenna\AppData\Roaming\toolplugin\toolbar.dll No File
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 11 C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll [346672] (VMware, Inc.)
Winsock: Catalog9 12 C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll [346672] (VMware, Inc.)
Winsock: Catalog9-x64 11 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll [446512] (VMware, Inc.)
Winsock: Catalog9-x64 12 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll [446512] (VMware, Inc.)
Tcpip\..\Interfaces\{D7BCC13E-14D1-4A28-9863-451F9C086F1B}: [NameServer]192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default
FF user.js: detected! => C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\user.js
FF SelectedSearchEngine: Search the web
FF Homepage: hxxp://beceriksizler.beep.to/forum.php|hxxp://www.ulusalkanal.com.tr/|hxxp://www.sat-ulc.eu/index.php|hxxp://www.odatv.com/
FF Keyword.URL: hxxp://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\ayrtonsenna\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\searchplugins\browsemngr.xml
FF SearchPlugin: C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\searchplugins\delta.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.src
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\_desktop.ini
FF Extension: Default Manager - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\DefaultManager@Microsoft
FF Extension: Facemoods - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\ffxtlbr@Facemoods.com
FF Extension: KMPlayer Toolbar - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\toolbar@ask.com
FF Extension: toolplugin - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\welcome@toolmin.com
FF Extension: FT SleekDark - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{a21cd440-41d6-11e0-9207-0800200c9a66}
FF Extension: Green-Fox - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\Green-Fox@loic.com.xpi
FF Extension: nasanightlaunch - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\nasanightlaunch@example.com.xpi
FF Extension: utopia_ffse_white_options - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\utopia_ffse_white_options@www.theme-oasis.org.xpi
FF Extension: No Name - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{20C3BDFF-DA68-468d-8D9A-F5A6C76B0F9E}.xpi
FF Extension: No Name - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{535531f0-c4f8-11df-851a-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{6C4BAFB6-2AC2-4405-A98D-546B55B3AE92}.xpi
FF Extension: No Name - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi
FF Extension: No Name - C:\Users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\Extensions\{f36c6cd1-da73-491d-b290-8fc9115bfa55}.xpi
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\_desktop.ini
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\IPSFFPlgn\

Chrome: 
=======
CHR Extension: (Facemoods) - C:\Users\AYRTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.2.1_0
CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.crx
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-08-24] ()
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-09-02] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-09-02] (CyberLink)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-06-13] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625816 2012-06-22] (Pandora.TV)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 SearchAnonymizer; C:\Users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2013-03-28] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S3 ufad-ws60; C:\Program Files (x86)\VMware\VMware Workstation\vmware-ufad.exe [191024 2010-08-19] (VMware, Inc.)
S2 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [x]
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [x]

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-01-31] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-01-31] (Symantec Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2010-07-15] ()
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2010-07-15] ()
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-08-13] (Symantec Corporation)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2010-07-15] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2010-07-15] ()
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130813.001\IDSvia64.sys [513184 2013-08-10] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130813.001\IDSvia64.sys [513184 2013-08-10] (Symantec Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2009-02-10] (EZB Systems, Inc.)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2009-02-10] (EZB Systems, Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130817.006\ENG64.SYS [126040 2013-08-14] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130817.006\ENG64.SYS [126040 2013-08-14] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130817.006\EX64.SYS [2098776 2013-08-14] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130817.006\EX64.SYS [2098776 2013-08-14] (Symantec Corporation)
R2 ntk_PowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [75248 2011-08-24] (Cyberlink Corp.)
R2 ntk_PowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [75248 2011-08-24] (Cyberlink Corp.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2011-08-25] ()
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-08-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R2 vstor2-ws60; C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys [32816 2010-08-19] (VMware, Inc.)
R2 vstor2-ws60; C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys [32816 2010-08-19] (VMware, Inc.)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-07-15] (Jungo)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2013-01-22] (WinISO.com)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-09-02] (CyberLink Corp.)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-09-02] (CyberLink Corp.)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S3 EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-18 12:04 - 2013-08-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 18:40 - 2013-08-17 18:42 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\CrashDumps
2013-08-16 21:59 - 2013-08-16 21:59 - 00000000 __SHD C:\bfdbdffdfd
2013-08-14 15:19 - 2013-08-14 15:19 - 00002086 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\Thunderbird
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Thunderbird
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-14 07:40 - 2013-08-14 07:40 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-14 02:04 - 2013-08-14 07:31 - 00067632 _____ (Symantec Corporation) C:\Windows\system32\msln.exe
2013-08-13 21:08 - 2013-08-14 07:33 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-13 21:08 - 2013-08-13 23:06 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-13 21:08 - 2013-08-13 23:06 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-13 21:08 - 2013-08-13 21:08 - 00000000 ____D C:\Program Files\Symantec
2013-08-13 21:08 - 2013-08-13 21:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-13 21:07 - 2013-08-14 07:34 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-13 21:07 - 2013-08-14 07:33 - 00002501 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-13 21:07 - 2013-08-13 21:17 - 00000000 ____D C:\ProgramData\Norton
2013-08-13 21:07 - 2013-08-13 21:07 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-13 20:58 - 2013-08-17 22:54 - 00000000 ___HD C:\Users\ayrtonsenna\AppData\Roaming\Fcnyrocpnr
2013-08-01 15:58 - 2013-08-01 15:58 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-01 09:51 - 2013-08-01 09:51 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Avg2013
2013-08-01 09:44 - 2013-08-01 09:44 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files\iTunes
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files\iPod
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-01 08:45 - 2013-08-01 08:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-01 08:45 - 2013-08-01 08:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software

==================== One Month Modified Files and Folders =======

2013-08-19 09:07 - 2013-08-19 09:07 - 00000000 ____D C:\FRST
2013-08-19 09:07 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-19 09:07 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-19 09:06 - 2009-07-14 19:58 - 00699554 _____ C:\Windows\system32\perfh007.dat
2013-08-19 09:06 - 2009-07-14 19:58 - 00149344 _____ C:\Windows\system32\perfc007.dat
2013-08-19 09:06 - 2009-07-14 07:13 - 01620602 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-19 09:03 - 2011-08-25 11:32 - 02033824 _____ C:\Windows\WindowsUpdate.log
2013-08-19 09:02 - 2013-01-14 23:33 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\Skype
2013-08-19 09:00 - 2011-09-17 18:00 - 00000000 ____D C:\Users\ayrtonsenna\Documents\VINN
2013-08-19 09:00 - 2011-08-25 17:06 - 00000000 ____D C:\ProgramData\VMware
2013-08-19 09:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files (x86)\Windows NT
2013-08-19 08:59 - 2013-02-25 12:18 - 00039200 _____ C:\Windows\SysWOW64\debug.log
2013-08-19 08:59 - 2011-08-31 11:09 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-19 08:59 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-19 08:59 - 2009-07-14 06:51 - 00038954 _____ C:\Windows\setupact.log
2013-08-19 08:58 - 2012-04-26 14:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-19 08:58 - 2011-08-25 14:01 - 00384992 _____ C:\Windows\PFRO.log
2013-08-18 22:16 - 2013-01-13 12:27 - 00000952 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001UA.job
2013-08-18 21:56 - 2011-08-31 11:09 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-18 21:53 - 2012-04-03 12:25 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-18 21:13 - 2013-08-18 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 22:54 - 2013-08-13 20:58 - 00000000 ___HD C:\Users\ayrtonsenna\AppData\Roaming\Fcnyrocpnr
2013-08-17 19:10 - 2011-08-25 14:50 - 00000000 ____D C:\Jdownload
2013-08-17 18:51 - 2013-04-26 09:42 - 00001090 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-08-17 18:42 - 2013-08-17 18:40 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\CrashDumps
2013-08-16 21:59 - 2013-08-16 21:59 - 00000000 __SHD C:\bfdbdffdfd
2013-08-15 10:16 - 2013-01-13 12:27 - 00000930 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001Core.job
2013-08-14 18:08 - 2011-08-25 11:37 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\FileZilla
2013-08-14 15:19 - 2013-08-14 15:19 - 00002086 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\Thunderbird
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Thunderbird
2013-08-14 15:19 - 2013-08-14 15:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-14 07:40 - 2013-08-14 07:40 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-14 07:34 - 2013-08-13 21:07 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-14 07:33 - 2013-08-13 21:08 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-14 07:33 - 2013-08-13 21:07 - 00002501 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-14 07:31 - 2013-08-14 02:04 - 00067632 _____ (Symantec Corporation) C:\Windows\system32\msln.exe
2013-08-13 23:06 - 2013-08-13 21:08 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-13 23:06 - 2013-08-13 21:08 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-13 22:14 - 2013-06-02 21:06 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\Winamp
2013-08-13 21:17 - 2013-08-13 21:07 - 00000000 ____D C:\ProgramData\Norton
2013-08-13 21:08 - 2013-08-13 21:08 - 00000000 ____D C:\Program Files\Symantec
2013-08-13 21:08 - 2013-08-13 21:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-13 21:07 - 2013-08-13 21:07 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-12 18:10 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-04 15:15 - 2012-12-30 17:31 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Xorion
2013-08-03 19:29 - 2013-02-24 11:17 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\iFunbox_UserCache
2013-08-01 15:58 - 2013-08-01 15:58 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-01 09:51 - 2013-08-01 09:51 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Avg2013
2013-08-01 09:51 - 2013-07-16 19:53 - 00000000 ____D C:\ProgramData\MFAData
2013-08-01 09:44 - 2013-08-01 09:44 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files\iTunes
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files\iPod
2013-08-01 09:44 - 2013-08-01 09:44 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-01 08:57 - 2011-08-31 11:09 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-01 08:45 - 2013-08-01 08:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-01 08:45 - 2013-08-01 08:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-07-31 10:10 - 2012-07-24 22:41 - 00000000 ____D C:\Users\ayrtonsenna\AppData\Roaming\GHISLER
2013-07-29 15:52 - 2011-08-25 14:05 - 00000000 ____D C:\Users\AYRTON~1\AppData\Local\Adobe
2013-07-29 15:51 - 2012-04-03 12:25 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-29 15:51 - 2012-04-03 12:25 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-29 15:51 - 2011-08-25 12:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-21 10:11 - 2013-02-23 13:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-21 10:11 - 2013-01-14 23:33 - 00000000 ____D C:\ProgramData\Skype

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-14 03:37

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-08-2013
Ran by ayrtonsenna at 2013-08-19 09:09:44
Running from H:\trojaner erntferner\TRojaner Boardan\Log file almak icin64
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Leawo Blu-ray zu MKV Converter Version  2.0.0.0 (x32 Version: 2.0.0.0)
3D World Atlas (x32)
7-Zip 9.20 (x32)
A.F.7 Merge your files 1.3 (x32 Version: 1.3.0.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
AMD Accelerated Video Transcoding (Version: 2.00.0002)
AMD APP SDK Runtime (Version: 10.0.938.1)
AMD Catalyst Install Manager (Version: 8.0.881.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.70611.1329)
Any Video Converter 3.3.0 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Aqua 3D Screensaver 1.52 (x32 Version: 1.52)
AVS Image Converter 1.2.1.100 (x32)
Bing Bar (x32 Version: 7.0.619.0)
Bonjour (Version: 3.0.0.10)
Brother MFL-Pro Suite MFC-J825DW (x32 Version: 1.0.10.0)
Canon Inkjet Printer Driver Add-On Module
Canon MP780
Canon ScanGear Starter (x32)
Carbon (x32 Version: 1.0.0)
CAS Studio (x32 Version: 9.3.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0611.1251.21046)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0611.1251.21046)
Catalyst Control Center InstallProxy (x32 Version: 2012.0611.1251.21046)
Catalyst Control Center Localization All (x32 Version: 2012.0611.1251.21046)
CCC Help Chinese Standard (x32 Version: 2012.0611.1250.21046)
CCC Help Chinese Traditional (x32 Version: 2012.0611.1250.21046)
CCC Help Czech (x32 Version: 2012.0611.1250.21046)
CCC Help Danish (x32 Version: 2012.0611.1250.21046)
CCC Help Dutch (x32 Version: 2012.0611.1250.21046)
CCC Help English (x32 Version: 2012.0611.1250.21046)
CCC Help Finnish (x32 Version: 2012.0611.1250.21046)
CCC Help French (x32 Version: 2012.0611.1250.21046)
CCC Help German (x32 Version: 2012.0611.1250.21046)
CCC Help Greek (x32 Version: 2012.0611.1250.21046)
CCC Help Hungarian (x32 Version: 2012.0611.1250.21046)
CCC Help Italian (x32 Version: 2012.0611.1250.21046)
CCC Help Japanese (x32 Version: 2012.0611.1250.21046)
CCC Help Korean (x32 Version: 2012.0611.1250.21046)
CCC Help Norwegian (x32 Version: 2012.0611.1250.21046)
CCC Help Polish (x32 Version: 2012.0611.1250.21046)
CCC Help Portuguese (x32 Version: 2012.0611.1250.21046)
CCC Help Russian (x32 Version: 2012.0611.1250.21046)
CCC Help Spanish (x32 Version: 2012.0611.1250.21046)
CCC Help Swedish (x32 Version: 2012.0611.1250.21046)
CCC Help Thai (x32 Version: 2012.0611.1250.21046)
CCC Help Turkish (x32 Version: 2012.0611.1250.21046)
ccc-utility64 (Version: 2012.0611.1251.21046)
CD-LabelPrint (x32)
Clarke Tech Editor Studio 3.17 (x32 Version: 3.17)
CrystalDiskMark 3.0.2f (Version: 3.0.2f)
Cuttermaran 1.70 (x32 Version: 1.7.0)
CyberLink PowerDirector (Version: 9.0.0.2316)
CyberLink PowerDirector (x32 Version: 9.0.0.2316)
CyberLink PowerDVD 11 (x32 Version: 11.0.2024.53)
CyberLink WaveEditor (x32 Version: 1.0.1.2228b)
D3DX10 (x32 Version: 15.4.2368.0902)
DB Bildschirmschoner 2002 (x32)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
Desktop Icon für Amazon (Version: 1.0.1 (de))
dows-Treiberpaket - Prolific (Ser2pl) Ports  (07/31/2007 3.2.0.0) (Version: 07/31/2007 3.2.0.0)
dreamboxEDIT -- The one and only settings editor for your Dreambox (x32)
Driver Genius Professional Edition (x32 Version: 10.0)
DVD-CLONER V7.80 Build 1000 (x32 Version: 7.70.0.1000)
DVDFab 8.0.0.5 (25/08/2010) (x32)
EASEUS Data Recovery Wizard Professional 5.0.1 (x32)
Easy CD-DA Extractor 2010 (x32 Version: 2010.1)
EZ-RC (x32 Version: 1.0.0.308)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Facemoods Toolbar (x32)
FileZilla Client 3.5.1 (x32 Version: 3.5.1)
Freemake Video Converter Version 4.0.1 (x32 Version: 4.0.1)
Google Chrome (x32 Version: 28.0.1500.95)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0)
HUAWEI DataCard Driver 4.23.13.00 (x32 Version: 4.23.13.00)
iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731)
ImTOO Audio Maker (x32 Version: 3.0.49.0717)
Incomedia WebSite X5 v8 - Evolution (x32)
iPhone Backup Extractor (x32 Version: 3.2.4.0)
IrfanView (remove only) (x32 Version: 4.27)
iTunes (Version: 11.0.4.4)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 30 (64-bit) (Version: 6.0.300)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
KMPlayer Toolbar (x32 Version: 1.17.3.0)
KMPlayer Toolbar Updater (HKCU Version: 1.4.2.36670)
LightScribe System Software (x32 Version: 1.18.6.1)
Logitech Vid HD (x32 Version: 7.2 (7259))
Logitech Webcam Software (Version: 12.10.1113)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MKVToolNix 6.1.0 (x32 Version: 6.1.0)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MPlayer für Windows (Full Package) (x32)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0)
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0)
Nero BackItUp 10 (x32 Version: 5.4.11800.21.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Burning ROM 10 (x32 Version: 10.0.11100.10.100)
Nero BurningROM 10 Help (CHM) (x32 Version: 1.0.10700)
Nero BurnRights 10 (x32 Version: 4.0.11000.12.100)
Nero BurnRights 10 Help (CHM) (x32 Version: 1.0.10600)
Nero Control Center 10 (x32 Version: 10.0.12000.1.4)
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Core Components 10 (x32 Version: 2.0.13700.0.1)
Nero CoverDesigner 10 (x32 Version: 5.0.10900.11.100)
Nero CoverDesigner 10 Help (CHM) (x32 Version: 1.0.10600)
Nero DiscSpeed 10 (x32 Version: 6.0.10800.7.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 1.0.10600)
Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10)
Nero Express 10 (x32 Version: 10.0.11000.10.100)
Nero Express 10 Help (CHM) (x32 Version: 1.0.10700)
Nero InfoTool 10 (x32 Version: 7.0.10800.8.100)
Nero InfoTool 10 Help (CHM) (x32 Version: 1.0.10600)
Nero MediaHub 10 (x32 Version: 1.0.13400.11.100)
Nero MediaHub 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Multimedia Suite 10 (x32 Version: 10.0.13200)
Nero Recode 10 (x32 Version: 4.6.10900.4.100)
Nero Recode 10 Help (CHM) (x32 Version: 1.0.10600)
Nero RescueAgent 10 (x32 Version: 3.0.10900.9.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 1.0.10700)
Nero SoundTrax 10 (x32 Version: 4.6.10600.2.100)
Nero SoundTrax 10 Help (CHM) (x32 Version: 1.0.10600)
Nero StartSmart 10 (x32 Version: 10.0.11200.12.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Vision 10 (x32 Version: 7.0.11100.8.100)
Nero Vision 10 Help (CHM) (x32 Version: 1.0.10600)
Nero WaveEditor 10 (x32 Version: 5.6.10600.2.100)
Nero WaveEditor 10 Help (CHM) (x32 Version: 1.0.10600)
Norton Internet Security (x32 Version: 20.4.0.40)
Notepad++ (x32 Version: 5.9.3)
Nuance PaperPort 12 (x32 Version: 12.1.0000)
Nuance PDF Viewer Plus (x32 Version: 5.30.3290)
Opera 12.16 (x32 Version: 12.16.1860)
Pandora Service (x32)
PaperPort Image Printer 64-bit (Version: 1.00.0001)
Picon Manager (x32)
PowerISO (x32)
QuickTime (x32 Version: 7.73.80.64)
Readon TV Movie Radio Player 5.5.5.0 (x32 Version: 5.5.5)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.4.0)
Scansoft PDF Professional (x32)
SearchAnonymizer (Version: 1.0.1 (de))
SereneScreen Marine Aquarium 3 (x32 Version: 3.0)
Skype™ 6.6 (x32 Version: 6.6.106)
SmartSound Quicktracks 5 (x32 Version: 5.1.7)
SMWLink3.0 (x32)
TeamViewer 8 (x32 Version: 8.0.20202)
The KMPlayer (remove only) (x32 Version: 3.4.0.59)
tools-freebsd (x32 Version: 8.4.4.14247)
tools-linux (x32 Version: 8.4.4.14247)
tools-netware (x32 Version: 8.4.4.14247)
tools-solaris (x32 Version: 8.4.4.14247)
tools-windows (x32 Version: 8.4.4.14247)
tools-winPre2k (x32 Version: 8.4.4.14247)
Total Commander 64-bit (Remove or Repair) (Version: 8.0)
Turkcell 3G VINN (x32 Version: 2.2.3)
UltraISO Premium V9.35 (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2597091) 64-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2589345) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2553248) 64-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition
URL Snooper v2.29.01 (x32)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.1 (x32 Version: 2.0.1)
VMware Workstation (x32 Version: 7.1.2.14247)
Winamp (x32 Version: 5.63 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
WinAVI All-in-One Converter (x32 Version: 1.7.0.4653)
Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinISO (x32 Version: 6.3.0.4770)
WinRAR (x32)
XBMC (HKCU)
Xilisoft iPhone to PC Copy (x32 Version: 5.4.7.20121205)
XMedia Recode Version 3.1.3.6 (x32 Version: 3.1.3.6)
ZTE USB Driver (Version: 1.0.1.5_Turkcell)

==================== Restore Points  =========================

16-07-2013 17:55:22 Installed AVG 2013
16-07-2013 17:55:54 Installed AVG 2013
23-07-2013 19:24:18 Geplanter Prüfpunkt
01-08-2013 07:45:47 Removed AVG 2013
01-08-2013 07:51:17 Removed AVG 2013
09-08-2013 13:44:03 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-05-30 17:33 - 00000000 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0959EC4A-1279-457B-8E6E-BD047BF1FA25} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {1352AB99-E5D6-4136-B32E-7B450D1E6890} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-02] ()
Task: {27337A3B-4C1C-4D22-8A49-668581CC60AD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001Core => C:\Users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {61BEE0C9-A5EF-4840-B3B3-F769BA17FCAC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-29] (Adobe Systems Incorporated)
Task: {7085D866-5C30-4DB3-9A30-44281EBA9F9B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31] (Google Inc.)
Task: {7B22B6E3-B43A-4417-9B5C-5FB34CE1EAD8} - System32\Tasks\{8CA4C749-028D-45A2-8CEF-397D5BA82A2B} => c:\program files (x86)\opera\opera.exe [2013-07-19] (Opera Software)
Task: {A9D5D604-C428-4082-B9B6-E0006ECCDD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {B060C314-0754-4F1E-9252-EC7AF8DF4129} - System32\Tasks\ayrtonsenna NBAgent 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-04-03] (Nero AG)
Task: {B36210C0-9F7D-4C58-9B53-C2B457FEEBA1} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {BA86F979-773B-426F-91A4-6D3B701F3F17} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001UA => C:\Users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {BB2814D9-0490-49A7-89F4-9837EED3113C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31] (Google Inc.)
Task: {BD8C4BE3-7BDB-4B96-9300-7D6959D881C5} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {ED4F9F02-3F10-456C-9B4F-8CA3E4E05912} - System32\Tasks\ayrtonsenna Local Autobackup 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe [2010-04-03] (Nero AG)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001Core.job => C:\Users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001UA.job => C:\Users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: pcouffin device ...
Description: pcouffin device ...
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/19/2013 09:09:21 AM) (Source: BackItUp5) (User: )
Description: Backup process failed.

Error: (08/19/2013 09:09:21 AM) (Source: BackItUp5) (User: )
Description: Job execution failed because the selected target for job does not exist.

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: 452: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service) (User: )
Description: 452: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)


System errors:
=============
Error: (08/19/2013 09:00:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%3

Error: (08/19/2013 08:59:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Freemake Improver" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/19/2013 08:59:56 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Freemake Improver erreicht.

Error: (08/19/2013 08:59:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Log Rotator Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/19/2013 08:59:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (08/19/2013 08:59:12 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{ef08cf54-cefb-11e0-9e19-806e6f6e6963}" können nicht gelesen werden.

Error: (08/18/2013 09:03:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%3

Error: (08/18/2013 09:02:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Freemake Improver" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/18/2013 09:02:37 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Freemake Improver erreicht.

Error: (08/18/2013 09:02:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Log Rotator Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (08/19/2013 09:09:21 AM) (Source: BackItUp5)(User: )
Description: Sicherung ist fehlgeschlagen.

Error: (08/19/2013 09:09:21 AM) (Source: BackItUp5)(User: )
Description: Die Ausführung des Jobs ist fehlgeschlagen, da das gewählte Ziel (P:\) für Job (ayrtonsenna Local Autobackup) nicht existiert oder nicht darauf zugegriffen werden kann.

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: 452: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (08/19/2013 09:00:51 AM) (Source: Bonjour Service)(User: )
Description: 452: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)


CodeIntegrity Errors:
===================================
  Date: 2013-07-16 19:44:45.281
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-12 20:21:54.779
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-06 22:36:27.439
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-06 10:53:34.087
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 09:19:06.856
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 21:26:42.841
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-30 14:21:32.329
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-28 18:20:17.044
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 17:24:51.048
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 14:06:10.971
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00087_011\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 7989.86 MB
Available physical RAM: 5782.32 MB
Total Pagefile: 15977.86 MB
Available Pagefile: 13569.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:281.98 GB) (Free:114.35 GB) NTFS
Drive d: (yedek) (Fixed) (Total:15.82 GB) (Free:15.69 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
Drive h: () (Fixed) (Total:931.51 GB) (Free:278.58 GB) NTFS
Drive i: (Elements) (Fixed) (Total:931.51 GB) (Free:176.27 GB) NTFS
Drive m: (CDROM) (CDROM) (Total:1.06 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: CB9E9924)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 00FB04A6)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 00021631)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================