Qv06 und Spyhunter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by sw (administrator) on 21-08-2013 23:17:00
Running from C:\Users\sw\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Wisair Ltd.) C:\Program Files (x86)\devolo Vianect AIR Manager\Components\Association\CableAssociation.exe
(Lenovo.) C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(iPass, Inc.) C:\Program Files (x86)\iPass\iPassConnect\iPassPeriodicUpdateService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(QUALCOMM, Inc.) C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kLenovo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSvcm.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(iPass, Inc.) C:\Program Files (x86)\iPass\iPassConnect\iPassPeriodicUpdateApp.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\shtctky.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Wisair Ltd.) C:\Program Files (x86)\devolo Vianect AIR Manager\Components\WirelessUSBManager\WirelessUSBManager.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Client Security Solution\password_manager.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380776 2009-12-11] (Lenovo.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-17] ()
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [36864 2009-10-13] ()
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [5990200 2011-06-10] (Lenovo Group Limited)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [44096 2012-01-16] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2962232 2012-10-18] (Synaptics Incorporated)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE [944520 2011-02-12] (Microsoft Corporation)
HKCU\...\Run: [MmDesignPartner.exe] - C:\Program Files (x86)\Mindjet\MindManager 9\MmDesignPartner.exe [x]
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-26] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-04-18] (Samsung Electronics)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2010-05-03] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [6000936 2013-01-09] (Lenovo Group Limited)
HKLM-x32\...\Run: [Message Center Plus] - C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [49976 2009-05-27] ()
HKLM-x32\...\Run: [WirelessUSBManager] - C:\Program Files (x86)\devolo Vianect AIR Manager\Components\WirelessUSBManager\WirelessUSBManager.exe [3404624 2010-07-05] (Wisair Ltd.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-26] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-18] (Avira Operations GmbH & Co. KG)
HKU\Default\...\RunOnce: [wlstart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] -  [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] ()
HKU\Default User\...\RunOnce: [wlstart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-08-20] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [] -  [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] ()
AppInit_DLLs-x32: 0 [159744 2009-03-24] ()
Lsa: [Notification Packages] scecli ACGina C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\Users\sw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\sw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2013 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2013 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {F5D0C715-E8ED-47C6-9A9E-1590062A289A} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{23BD46E8-E80E-4BB2-8723-4946BF8D39EF}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/webhp?hl=en&bav=on.2,or.&ech=1&psi=BiuiUcHRMaz44QSTsYGICw.1369582345874.3&emsg=NCSR&noj=1&ei=BiuiUcHRMaz44QSTsYGICw
CHR RestoreOnStartup: "https://news.google.de/news/section?pz=1&cf=all&ned=de&hl=de&csid=cf3710b6c3d61fc7&siidp=83d55d1b0c86183d21ddc96d3e1a0fd48928&ict=ln", "hxxp://www.gsma.com/newsroom/gsma-blog", "hxxp://ec.europa.eu/digital-agenda/en/telecoms-and-internet/telecoms", "hxxp://www.totaltele.com/", "hxxp://translate.google.com/?hl=de#de/en/familie", "https://twitter.com/", "https://plus.google.com/?partnerid=gplp0", "https://www.xing.com/", "hxxp://www.linkedin.com/home?trk=hb_tab_home_top"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.79) - C:\Users\sw\AppData\Local\Citrix\Plugins\79\npappdetector.dll (Citrix Online)
CHR Plugin: (Microsoft Lync Web App Plug-in) - C:\Users\sw\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Extension: (Google Docs) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (dict-cc) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh\1.6.88_0
CHR Extension: (Google Wallet Service) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_0
CHR Extension: (Gmail) - C:\Users\sw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [ejnmnhkgiphcaeefbaooconkceehicfi] - C:\Program Files (x86)\DealPly\DealPly.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 CableAssociation; C:\Program Files (x86)\devolo Vianect AIR Manager\Components\Association\CableAssociation.exe [1454920 2010-07-05] (Wisair Ltd.)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9321832 2010-05-12] (DisplayLink Corp.)
R2 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2013-01-09] (Lenovo.)
S3 iPassConnectEngine; C:\Program Files (x86)\iPass\iPassConnect\iPassConnectEngine.exe [1757184 2010-04-07] (iPass, Inc.)
R3 iPassPeriodicUpdateApp; C:\Program Files (x86)\iPass\iPassConnect\iPassPeriodicUpdateApp.exe [176128 2010-04-05] (iPass, Inc.)
R2 iPassPeriodicUpdateService; C:\Program Files (x86)\iPass\iPassConnect\iPassPeriodicUpdateService.exe [114688 2010-04-05] (iPass, Inc.)
R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2079520 2012-05-17] (Microsoft Corp.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
R2 QDLService2kLenovo; C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kLenovo.exe [1688384 2011-05-23] (QUALCOMM, Inc.)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1019904 2009-08-28] (Lenovo Group Limited)
S3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1475896 2010-07-06] (Lenovo Group Limited)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3325232 2012-06-25] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.3.24903.0.sys [17408 2012-10-19] (hxxp://libusb-win32.sourceforge.net)
S3 DLCopyFilter; C:\Windows\System32\Drivers\wsr_tbf.sys [51712 2010-02-21] ()
S3 DWA; C:\Windows\System32\DRIVERS\WSR_DWA.SYS [543232 2010-05-10] ()
S3 hwa; C:\Windows\System32\DRIVERS\WSR_HWA.SYS [916480 2010-05-10] ()
S3 HWARadio; C:\Windows\System32\DRIVERS\WSR_RCI.SYS [162304 2010-05-10] ()
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [38536 2010-04-21] ()
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [38536 2010-04-21] ()
R3 qcfilterlno2k; C:\Windows\System32\DRIVERS\qcfilterlno2k.sys [6400 2009-12-08] (QUALCOMM Incorporated)
R3 qcusbnetlno2k; C:\Windows\System32\DRIVERS\qcusbnetlno2k.sys [444416 2011-05-23] (QUALCOMM Incorporated)
R3 qcusbserlno2k; C:\Windows\System32\DRIVERS\qcusbserlno2k.sys [231040 2011-05-23] (QUALCOMM Incorporated)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [12728 2009-09-29] ()
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)
S3 WSR_USF; C:\Windows\System32\Drivers\WSR_USF.sys [48640 2010-05-10] ()
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-21 23:16 - 2013-08-21 23:16 - 00000000 ____D C:\FRST
2013-08-21 22:04 - 2013-08-21 22:05 - 00001124 _____ C:\AdwCleaner[S3].txt
2013-08-21 22:04 - 2013-08-21 22:04 - 00001061 _____ C:\AdwCleaner[R2].txt
2013-08-21 16:48 - 2013-08-21 16:48 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-21 16:39 - 2013-08-21 16:39 - 00000000 ____D C:\Users\sw\AppData\Roaming\Avira
2013-08-21 16:34 - 2013-08-21 16:34 - 00000000 ____D C:\ProgramData\Avira
2013-08-21 16:34 - 2013-08-21 16:34 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-21 16:34 - 2013-07-18 08:02 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-21 16:34 - 2013-07-18 08:02 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-21 16:34 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-21 16:09 - 2013-08-21 16:09 - 00003835 _____ C:\AdwCleaner[S2].txt
2013-08-21 16:08 - 2013-08-21 16:08 - 00000333 _____ C:\AdwCleaner[S1].txt
2013-08-21 16:06 - 2013-08-21 16:06 - 00003808 _____ C:\AdwCleaner[R1].txt
2013-08-21 02:59 - 2013-08-21 02:59 - 00336444 ____N C:\spyhunter.log
2013-08-21 01:00 - 2013-08-21 01:01 - 00313014 _____ C:\sh4_service.log
2013-08-21 00:57 - 2013-08-21 00:57 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-21 00:57 - 2013-08-20 23:50 - 00008192 _____ C:\shldr.mbr
2013-08-21 00:57 - 2012-11-02 16:23 - 00285747 _____ C:\shldr
2013-08-21 00:07 - 2013-08-21 01:00 - 00000388 _____ C:\Windows\Tasks\SpyHunter4.job
2013-08-21 00:07 - 2013-08-21 00:07 - 00003206 _____ C:\Windows\System32\Tasks\SpyHunter4
2013-08-20 23:51 - 2013-08-20 23:51 - 00000000 _____ C:\autoexec.bat
2013-08-20 23:49 - 2013-08-21 01:49 - 00000000 ____D C:\Windows\67E1227ED5534A6A96CD40CCBBC705D8.TMP
2013-08-20 23:25 - 2013-08-20 23:34 - 110344048 _____ C:\Users\sw\Downloads\avira_free_antivirus85_de.exe
2013-08-20 23:22 - 2013-08-20 23:23 - 00666633 _____ C:\Users\sw\Downloads\adwcleaner2306.exe
2013-08-18 23:57 - 2013-08-18 23:57 - 00000000 ____D C:\Users\sw\AppData\Local\CrashRpt
2013-08-18 23:33 - 2013-08-18 23:33 - 00003212 _____ C:\Windows\System32\Tasks\Dealply
2013-08-18 23:32 - 2013-08-18 23:36 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-18 23:32 - 2013-08-18 23:33 - 00003208 _____ C:\Windows\System32\Tasks\DSite
2013-08-17 00:59 - 2013-08-17 01:00 - 17354752 _____ C:\Users\sw\Downloads\Boxcryptor_v2.0.401.229_Setup.msi
2013-08-14 17:07 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 17:07 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 17:07 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 17:07 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 17:07 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 17:07 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 17:07 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 17:07 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 17:07 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 17:07 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 17:07 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 17:07 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 17:07 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 17:07 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 17:07 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 17:07 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 17:07 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 17:06 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 17:06 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 17:06 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 17:06 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 17:06 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 17:06 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 17:06 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 17:06 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 17:06 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 17:06 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 17:06 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 17:06 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 17:06 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 17:06 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 12:40 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 12:40 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 12:40 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 12:40 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 12:40 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 12:40 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 12:40 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 12:40 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 12:40 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 12:40 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 12:39 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 12:39 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 12:39 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 12:39 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 12:39 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 12:39 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 12:39 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 12:39 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 12:39 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 12:39 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 12:39 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 12:39 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 12:39 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 12:39 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 12:39 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 12:39 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 12:39 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-11 22:45 - 2013-08-11 22:45 - 00018246 _____ C:\Users\sw\Desktop\Roaming-Hood.htm
2013-08-07 20:48 - 2013-08-14 17:01 - 00000000 ____D C:\Windows\system32\MRT
2013-08-06 22:32 - 2013-08-21 22:29 - 00000000 ____D C:\Users\sw\Documents\Outlook-Dateien
2013-08-06 22:07 - 2013-08-06 22:07 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-06 19:55 - 2013-08-06 20:00 - 36664234 _____ C:\Users\sw\Downloads\OutlookInfodeskSetup_V8.zip
2013-08-06 17:08 - 2013-08-06 17:08 - 00000000 ____D C:\Users\sw\Documents\Samsung
2013-08-06 13:00 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2013-08-06 13:00 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2013-08-06 12:46 - 2013-08-06 12:46 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-08-01 23:14 - 2013-08-01 23:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-29 14:06 - 2013-07-29 14:06 - 00002992 _____ C:\Windows\System32\Tasks\{03D085B1-327D-4673-BFB7-AE8C5439A6BC}

==================== One Month Modified Files and Folders =======

2013-08-21 23:16 - 2013-08-21 23:16 - 01576476 _____ (Farbar) C:\Users\sw\Downloads\FRST64.exe
2013-08-21 23:16 - 2013-08-21 23:16 - 00000000 ____D C:\FRST
2013-08-21 23:09 - 2013-08-06 22:32 - 00000000 ____D C:\Users\sw\Documents\Outlook-Dateien
2013-08-21 23:09 - 2012-10-29 21:50 - 00000000 ____D C:\Users\sw\Documents\Outlook Files
2013-08-21 23:07 - 2012-12-18 13:56 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A7C1014E-A0B4-459A-B4B6-F3A37B7C8FEE}
2013-08-21 22:23 - 2012-11-03 16:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-21 22:19 - 2012-11-14 21:34 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-21 22:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 22:14 - 2009-07-14 06:45 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-21 22:14 - 2009-07-14 06:45 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 22:07 - 2012-11-14 21:34 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-21 22:07 - 2012-10-19 02:04 - 01693259 _____ C:\Windows\WindowsUpdate.log
2013-08-21 22:06 - 2013-03-02 00:36 - 00196080 _____ C:\Windows\PFRO.log
2013-08-21 22:06 - 2013-03-02 00:07 - 00023210 _____ C:\Windows\setupact.log
2013-08-21 22:06 - 2012-10-19 23:58 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-08-21 22:06 - 2010-04-21 18:37 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-21 22:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-21 22:05 - 2013-08-21 22:04 - 00001124 _____ C:\AdwCleaner[S3].txt
2013-08-21 22:04 - 2013-08-21 22:04 - 00001061 _____ C:\AdwCleaner[R2].txt
2013-08-21 20:24 - 2012-10-19 23:58 - 00003486 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2013-08-21 20:24 - 2012-10-19 23:58 - 00003448 _____ C:\Windows\System32\Tasks\PCDEventLauncher
2013-08-21 16:48 - 2013-08-21 16:48 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-21 16:39 - 2013-08-21 16:39 - 00000000 ____D C:\Users\sw\AppData\Roaming\Avira
2013-08-21 16:34 - 2013-08-21 16:34 - 00000000 ____D C:\ProgramData\Avira
2013-08-21 16:34 - 2013-08-21 16:34 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-21 16:24 - 2012-10-19 02:26 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-21 16:09 - 2013-08-21 16:09 - 00003835 _____ C:\AdwCleaner[S2].txt
2013-08-21 16:08 - 2013-08-21 16:08 - 00000333 _____ C:\AdwCleaner[S1].txt
2013-08-21 16:06 - 2013-08-21 16:06 - 00003808 _____ C:\AdwCleaner[R1].txt
2013-08-21 06:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-21 02:59 - 2013-08-21 02:59 - 00336444 ____N C:\spyhunter.log
2013-08-21 01:49 - 2013-08-20 23:49 - 00000000 ____D C:\Windows\67E1227ED5534A6A96CD40CCBBC705D8.TMP
2013-08-21 01:01 - 2013-08-21 01:00 - 00313014 _____ C:\sh4_service.log
2013-08-21 01:00 - 2013-08-21 00:07 - 00000388 _____ C:\Windows\Tasks\SpyHunter4.job
2013-08-21 00:57 - 2013-08-21 00:57 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-21 00:32 - 2012-10-19 02:10 - 00001432 _____ C:\Users\sw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-21 00:07 - 2013-08-21 00:07 - 00003206 _____ C:\Windows\System32\Tasks\SpyHunter4
2013-08-20 23:51 - 2013-08-20 23:51 - 00000000 _____ C:\autoexec.bat
2013-08-20 23:50 - 2013-08-21 00:57 - 00008192 _____ C:\shldr.mbr
2013-08-20 23:41 - 2013-07-13 08:09 - 00000000 ____D C:\ProgramData\iPass
2013-08-20 23:34 - 2013-08-20 23:25 - 110344048 _____ C:\Users\sw\Downloads\avira_free_antivirus85_de.exe
2013-08-20 23:24 - 2012-11-03 16:06 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 23:24 - 2012-11-03 16:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 23:24 - 2012-11-03 16:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 23:23 - 2013-08-20 23:22 - 00666633 _____ C:\Users\sw\Downloads\adwcleaner2306.exe
2013-08-19 00:01 - 2012-12-18 13:14 - 00000000 ___RD C:\Users\sw\SkyDrive
2013-08-19 00:00 - 2012-10-19 02:04 - 00000000 ____D C:\Users\sw
2013-08-18 23:57 - 2013-08-18 23:57 - 00000000 ____D C:\Users\sw\AppData\Local\CrashRpt
2013-08-18 23:36 - 2013-08-18 23:32 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-18 23:33 - 2013-08-18 23:33 - 00003212 _____ C:\Windows\System32\Tasks\Dealply
2013-08-18 23:33 - 2013-08-18 23:32 - 00003208 _____ C:\Windows\System32\Tasks\DSite
2013-08-18 23:32 - 2013-06-02 14:33 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-18 23:08 - 2013-03-02 01:31 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-08-18 22:44 - 2012-10-19 23:58 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-17 01:00 - 2013-08-17 00:59 - 17354752 _____ C:\Users\sw\Downloads\Boxcryptor_v2.0.401.229_Setup.msi
2013-08-16 21:48 - 2013-03-01 12:01 - 00100352 ___SH C:\Users\sw\Documents\Thumbs.db
2013-08-16 21:44 - 2013-03-15 12:32 - 00000000 ____D C:\Users\sw\AppData\Local\Paint.NET
2013-08-16 21:39 - 2012-10-19 23:58 - 00003690 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2013-08-14 17:04 - 2010-04-22 03:49 - 00714794 _____ C:\Windows\system32\perfh007.dat
2013-08-14 17:04 - 2010-04-22 03:49 - 00153942 _____ C:\Windows\system32\perfc007.dat
2013-08-14 17:04 - 2009-07-14 07:13 - 01672032 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-14 17:01 - 2013-08-07 20:48 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 17:00 - 2012-10-29 22:31 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-13 22:16 - 2012-10-19 02:10 - 00124168 _____ C:\Users\sw\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-13 22:15 - 2009-07-14 06:45 - 00463664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-11 22:45 - 2013-08-11 22:45 - 00018246 _____ C:\Users\sw\Desktop\Roaming-Hood.htm
2013-08-08 21:22 - 2010-04-21 18:21 - 00000000 ____D C:\ProgramData\PCDr
2013-08-07 18:06 - 2012-12-13 10:27 - 00000000 ____D C:\Users\sw\AppData\Roaming\Skype
2013-08-06 22:07 - 2013-08-06 22:07 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-06 20:00 - 2013-08-06 19:55 - 36664234 _____ C:\Users\sw\Downloads\OutlookInfodeskSetup_V8.zip
2013-08-06 17:08 - 2013-08-06 17:08 - 00000000 ____D C:\Users\sw\Documents\Samsung
2013-08-06 13:01 - 2013-06-02 17:20 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-08-06 13:01 - 2013-06-02 17:06 - 00000000 ____D C:\Users\sw\AppData\Local\Downloaded Installations
2013-08-06 13:01 - 2010-04-21 18:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-06 12:46 - 2013-08-06 12:46 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-08-04 22:01 - 2012-10-19 02:10 - 00000000 ___RD C:\Users\sw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-04 21:59 - 2010-04-21 18:23 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-08-04 21:59 - 2010-04-21 18:03 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-08-01 23:27 - 2013-08-01 23:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-01 23:27 - 2012-12-13 10:27 - 00000000 ____D C:\ProgramData\Skype
2013-07-31 10:01 - 2013-05-25 00:00 - 00000000 ___RD C:\Users\sw\SkyDrive @ Roaming-Hood
2013-07-31 09:14 - 2012-11-14 21:34 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-31 09:14 - 2012-11-14 21:34 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-29 14:06 - 2013-07-29 14:06 - 00002992 _____ C:\Windows\System32\Tasks\{03D085B1-327D-4673-BFB7-AE8C5439A6BC}
2013-07-26 07:13 - 2013-08-14 17:07 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 07:13 - 2013-08-14 17:06 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-14 17:06 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-14 17:07 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 07:12 - 2013-08-14 17:06 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-14 17:06 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-14 17:06 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-14 17:06 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-14 17:06 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 05:35 - 2013-08-14 17:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-14 17:06 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-14 17:06 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-14 17:07 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-14 17:07 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-14 17:07 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-14 17:07 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-14 17:07 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-14 17:06 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-14 17:06 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-14 17:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-14 17:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-14 17:07 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-26 05:11 - 2013-08-14 17:06 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-26 04:49 - 2013-08-14 17:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-14 17:07 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-14 17:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 12:39 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 12:39 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-14 14:43

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 02
Ran by sw at 2013-08-21 23:18:12
Running from C:\Users\sw\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Access Help (x32 Version: 3.01)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Anzeige am Bildschirm (Version: 6.67.10)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
Bing-Desktop (x32 Version: 1.3.171.0)
chart-me (x32 Version: 1.1.10)
Client Security - Password Manager (Version: 8.30.0049.00)
Conexant 20585 SmartAudio HD (Version: 4.95.48.50)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
devolo Vianect AIR Manager (Version: 14.2.51.16)
devolo Vianect AIR Manager (x32 Version: 14.2.51.16)
devolo Vianect AIR TV (Version: 5.3.26044.0)
Dienstprogramm "ThinkPad UltraNav" (x32 Version: 2.13.0)
Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00)
DisplayLink Core Software (Version: 5.3.24903.0)
dows-Treiberpaket - Intel System  (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022)
Energie-Manager (x32 Version: 6.40)
Fotogalerie (x32 Version: 16.4.3505.0912)
Google Chrome (x32 Version: 29.0.1547.57)
Google Update Helper (x32 Version: 1.3.21.153)
HP Photosmart 7510 series - Grundlegende Software für das Gerät (Version: 25.0.617.0)
Integrated Camera Driver Installer Package Ver.1.1.0.48 (x32 Version: 1.1.0.48)
Intel PROSet Wireless
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Network Connections Drivers (Version: 16.8)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258)
InterVideo WinDVD 8 (x32 Version: 8.0.20.178)
iPassConnect (x32 Version: 3.72)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 17 (64-bit) (Version: 6.0.170)
Junk Mail filter update (x32 Version: 16.4.3505.0912)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.3.1.1)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo System Interface Driver (Version: 1.05)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo Warranty Information (x32 Version: 1.0.0004.00)
Lenovo Welcome (x32 Version: 2.0.020.0)
Message Center Plus (x32 Version: 2.0.0012.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Lync Web App Plug-in (Version: 15.8.8504.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4517.1509)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Small Business Connectivity Components (x32 Version: 2.0.7024.0)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Online Services-Anmeldeassistent (Version: 7.250.4303.0)
Microsoft Research AutoCollage Touch 2009 (x32 Version: 2.00.2009)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mobile Broadband Connect (x32 Version: 3.5.0010)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyFreeCodec (HKCU)
NVIDIA 3D Vision Treiber 311.00 (Version: 311.00)
NVIDIA Grafiktreiber 311.00 (Version: 311.00)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA nView Desktop Manager (Version: 6.14.10.12142)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100)
NVIDIA Systemsteuerung 311.00 (Version: 311.00)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4517.1509)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4517.1509)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4517.1509)
Paint.NET v3.5.10 (Version: 3.60.0)
PDF-XChange 3
Photo Gallery (x32 Version: 16.4.3505.0912)
Qualcomm Gobi 2000 Package for Lenovo (x32 Version: 1.1.250)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
Rescue and Recovery (x32 Version: 4.30.0025.00)
RICOH R5U230 Media Driver ver.2.06.02.02 (x32 Version: 2.06.02.02)
Samsung Kies (x32 Version: 2.5.3.13043_14)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Skype™ 6.6 (x32 Version: 6.6.106)
Tableau Public 7.0 (x32 Version: 7.0.510)
TeamViewer 8 (x32 Version: 8.0.16642)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.100)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Modem Adapter (Version: 7.80.5.0)
ThinkPad UltraNav Driver (Version: 16.2.19.2)
ThinkVantage Access Connections (x32 Version: 5.61)
ThinkVantage Communications Utility (Version: 2.09)
ThinkVantage Fingerprint Software (Version: 5.9.9.7282)
ThinkVantage GPS (x32 Version: 2.50)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (x32 Version: 9.00.5000.00)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553092) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Windows Driver Package - Broadcom Bluetooth  (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000)
Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Mail (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Live Writer (x32 Version: 16.4.3505.0912)
Windows Live Writer Resources (x32 Version: 16.4.3505.0912)
Windows-Treiberpaket - Intel (e1kexpress) Net  (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0)
Windows-Treiberpaket - Intel (HECIx64) System  (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179)
Windows-Treiberpaket - Intel System  (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002)
Windows-Treiberpaket - Intel USB  (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020)
Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4)
Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07)
Xcelsius 2008 (x32 Version: 12.5.0.0)
XING Connector 1.2 (x32 Version: 1.2)

==================== Restore Points  =========================

20-08-2013 21:50:15 Installed SpyHunter
20-08-2013 23:48:49 Removed SpyHunter

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0799AC24-72A1-4B49-9A82-BCBC550B068E} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {24FC0E6D-ACF9-4A04-BCAE-F64D441D5534} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated)
Task: {32AC8760-2DDE-4585-939E-662F961950D0} - System32\Tasks\Dealply => C:\Users\sw\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE No File
Task: {3777D815-0749-4AF4-858A-7A1649D76460} - System32\Tasks\User_Feed_Synchronization-{A7C1014E-A0B4-459A-B4B6-F3A37B7C8FEE} => C:\Windows\system32\msfeedssync.exe [2013-03-09] (Microsoft Corporation)
Task: {4177957D-53F2-40FF-81A0-93964711AB57} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {46A347D7-0421-418E-8451-96715F34FD88} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {471A0947-EC6D-43C2-8DCA-20411B90DD79} - System32\Tasks\SpyHunter4 => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe No File
Task: {51B25739-37AD-4625-A050-724922508D01} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {5207F6E8-11C0-43E8-A11C-739734E3CD06} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-14] (Google Inc.)
Task: {5FB61EA2-AE72-4962-A7DF-BD6828F3C797} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {68296978-F60B-4A89-859E-1AFDD1DFF4C1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-14] (Google Inc.)
Task: {69E45460-A1E7-483C-8DF6-FB08AB2823D2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {6BCF8880-0F56-4D00-A9FE-43E91C7C58B9} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File
Task: {7461464A-3DEB-4509-9AB3-A6074B933DDD} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {9083FED3-65AE-4DDA-AB6B-D4233DD4DDBF} - System32\Tasks\{03D085B1-327D-4673-BFB7-AE8C5439A6BC} => C:\Program Files (x86)\HP\HP Photosmart 7510 series\bin\HPScan.exe [2011-08-31] (Hewlett-Packard Co.)
Task: {98659923-F8CA-4549-8C44-D16EEE2CE69A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-08-13] (Microsoft Corporation)
Task: {9BD5110A-1915-42CF-8366-D6FB9A69E3C4} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {A8412238-8AE4-42A3-9EC7-DA3E99BAB5CF} - System32\Tasks\Microsoft Office 15 Sync Maintenance for sw-THINK-sw sw-THINK
Task: {B205F5C5-46C1-4BB8-AEBE-2E360775FECD} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {CA694DFE-7A8B-4476-9F47-7EE8CB202C57} - System32\Tasks\ScanToPCActivationApp.exe_{4ADBE2FE-4DBE-4740-B198-5EEF40CD145F} => C:\Program Files\HP\HP Photosmart 7510 series\Bin\ScanToPCActivationApp.exe [2011-08-31] (Hewlett-Packard Co.)
Task: {CD81921A-ECC1-4D40-9ABC-F8F07912244F} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {D815AD8F-F263-4B91-B968-D37DF0C01C12} - System32\Tasks\WPD\SqmUpload_S-1-5-21-193063277-1998266412-2275831118-1003 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {D858C6D1-A0BD-4C66-9AD7-FE7CDB77374D} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File
Task: {E40163B7-5DC2-455E-8FCA-0660B7887653} - System32\Tasks\DSite => C:\Users\sw\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: {E8899CC0-4B10-413C-9997-6F0B2F6869AC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {EE31299C-AB78-4BFE-A89F-2DAB0AF025D4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-08-13] (Microsoft Corporation)
Task: {F2C907B1-5A40-4D46-AEB4-8748A12FB1B9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)
Task: {F2E3C2D9-5CCC-4AC3-826F-F2C94DE5B485} - System32\Tasks\TVT\LaunchRnR => C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrcmd.exe [2009-08-28] (Lenovo Limited Group Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SpyHunter4.job => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/21/2013 08:24:01 PM) (Source: PC-Doctor) (User: )
Description: (6880) Asapi: (20:24:01:2350)(6880) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (08/21/2013 08:24:01 PM) (Source: PC-Doctor) (User: )
Description: (6880) Asapi: (20:24:01:1880)(6880) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (08/21/2013 01:48:57 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service Wsys Service since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/21/2013 01:48:57 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/20/2013 11:58:04 PM) (Source: PC-Doctor) (User: )
Description: (2500) Asapi: (23:58:04:0730)(2500) S3LogPusherPlugin.Helper - Error -- 340 Unable to storage the test log to medium

Error: (08/20/2013 11:57:47 PM) (Source: PC-Doctor) (User: )
Description: (2500) Asapi: (23:57:47:5530)(2500) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12002) failed with error: 317

Error: (08/20/2013 11:57:26 PM) (Source: PC-Doctor) (User: )
Description: (2500) Asapi: (23:57:26:3680)(2500) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12002) failed with error: 317

Error: (08/18/2013 11:33:31 PM) (Source: MsiInstaller) (User: sw-THINK)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\GoogleUpdateHelper.msi

Error: (08/18/2013 10:54:33 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "H:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (08/16/2013 09:43:39 PM) (Source: PC-Doctor) (User: )
Description: (7500) Asapi: (21:43:39:9250)(7500) S3LogPusherPlugin.Helper - Error -- 334 Unable to storage the test log to medium


System errors:
=============
Error: (08/21/2013 10:41:17 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{A7025A5B-9722-48ED-BBEF-1FAB9CD2EF71}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 10:07:47 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/21/2013 05:35:44 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{6D70D29F-4C13-4B16-A65E-DD908E5206BE}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 04:13:55 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/21/2013 04:02:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/21/2013 11:22:39 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/21/2013 06:18:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserDefendert" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (08/21/2013 06:17:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserDefendert" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (08/21/2013 02:01:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserDefendert" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (08/21/2013 02:00:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserDefendert" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3


Microsoft Office Sessions:
=========================
Error: (08/21/2013 08:24:01 PM) (Source: PC-Doctor)(User: )
Description: (6880) Asapi: (20:24:01:2350)(6880) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (08/21/2013 08:24:01 PM) (Source: PC-Doctor)(User: )
Description: (6880) Asapi: (20:24:01:1880)(6880) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (08/21/2013 01:48:57 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service Wsys Service since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/21/2013 01:48:57 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/20/2013 11:58:04 PM) (Source: PC-Doctor)(User: )
Description: (2500) Asapi: (23:58:04:0730)(2500) S3LogPusherPlugin.Helper - Error -- 340 Unable to storage the test log to medium

Error: (08/20/2013 11:57:47 PM) (Source: PC-Doctor)(User: )
Description: (2500) Asapi: (23:57:47:5530)(2500) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12002) failed with error: 317

Error: (08/20/2013 11:57:26 PM) (Source: PC-Doctor)(User: )
Description: (2500) Asapi: (23:57:26:3680)(2500) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12002) failed with error: 317

Error: (08/18/2013 11:33:31 PM) (Source: MsiInstaller)(User: sw-THINK)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (08/18/2013 10:54:33 PM) (Source: Windows Backup)(User: )
Description: H:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (08/16/2013 09:43:39 PM) (Source: PC-Doctor)(User: )
Description: (7500) Asapi: (21:43:39:9250)(7500) S3LogPusherPlugin.Helper - Error -- 334 Unable to storage the test log to medium


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3955.67 MB
Available physical RAM: 2192.66 MB
Total Pagefile: 7909.53 MB
Available Pagefile: 5869.92 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:91.84 GB) (Free:35.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: () (Fixed) (Total:205.08 GB) (Free:177.84 GB) NTFS
Drive f: (SD_CARD) (Removable) (Total:29.71 GB) (Free:8.8 GB) FAT32
Drive g: (HP_WSGS_0307) (CDROM) (Total:3.67 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: D3F0AB1C)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=92 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=205 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=30 GB) - (Type=0C)

==================== End Of Log ============================