Windows 8 64bit GVU-Trojaner

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by SYSTEM on 26-08-2013 11:34:05
Running from D:\
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-13] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1534504 2013-01-14] (McAfee, Inc.)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-17] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [299648 2012-07-24] (McAfee, Inc.)
HKU\SelinaWille\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\SELINA~1\AppData\Local\Temp\toxkfmxgisubeovty.exe [49152 2013-08-24] (Valve Corporation) <===== ATTENTION
HKU\SelinaWille\...\Winlogon: [Shell] cmd.exe [404992 2012-07-26] (Microsoft Corporation) <==== ATTENTION 
HKU\SelinaWille\...\Command Processor: "C:\Users\SELINA~1\AppData\Local\Temp\toxkfmxgisubeovty.exe" <===== ATTENTION!
Startup: C:\Users\SelinaWille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations)
S2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-26] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
S2 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2776256 2013-07-17] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros)

==================== Drivers (Whitelisted) ====================

S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-08-20] (Advanced Micro Devices)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros)
S3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated)
S3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-02-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-24 18:01 - 2013-08-24 18:01 - 01084778 _____ C:\Users\SelinaWille\AppData\Roaming\2433f433
2013-08-24 18:01 - 2013-08-24 18:01 - 01084735 _____ C:\ProgramData\2433f433
2013-08-24 18:01 - 2013-08-24 18:01 - 01084725 _____ C:\Users\SelinaWille\AppData\Local\2433f433
2013-08-22 10:16 - 2013-08-22 10:16 - 00002416 _____ C:\Users\SelinaWille\Desktop\Treffpunkt Martinshof.lnk
2013-08-22 10:15 - 2013-08-22 10:16 - 00000000 ____D C:\Users\SelinaWille\AppData\Roaming\directx9
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 ____D C:\Program Files (x86)\Bibi und Tina
2013-08-19 20:59 - 2013-08-19 20:59 - 00001161 _____ C:\Users\Public\Desktop\Lissy und ihre Freunde - Die Abenteuerliche Pferderallye.lnk
2013-08-19 20:56 - 2013-08-19 20:56 - 00000000 ____D C:\Program Files (x86)\Rondomedia
2013-08-14 12:58 - 2013-08-14 13:01 - 00000000 ____D C:\Windows\System32\MRT
2013-08-14 12:00 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2013-08-14 12:00 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2013-08-14 11:06 - 2013-07-26 06:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-08-14 11:06 - 2013-07-26 06:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-08-14 11:06 - 2013-07-26 04:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-14 11:06 - 2013-07-26 04:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 11:06 - 2013-07-26 04:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-14 11:06 - 2013-07-26 04:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 11:06 - 2013-07-26 04:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 11:06 - 2013-07-26 01:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-14 11:06 - 2013-07-09 07:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-14 11:06 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-14 11:06 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 11:05 - 2013-07-26 06:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-14 11:05 - 2013-07-26 06:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-14 11:05 - 2013-07-26 06:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-08-14 11:05 - 2013-07-26 06:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-14 11:05 - 2013-07-26 06:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-08-14 11:05 - 2013-07-26 04:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 11:05 - 2013-07-26 04:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 11:05 - 2013-07-26 04:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 11:05 - 2013-07-26 03:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 11:04 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-14 11:04 - 2013-07-13 07:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-14 11:04 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-14 11:04 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\System32\apprepapi.dll
2013-08-14 11:04 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\apprepsync.dll
2013-08-14 11:04 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 11:04 - 2013-07-13 05:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 11:04 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-14 11:04 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-10 18:31 - 2013-08-10 18:31 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

==================== One Month Modified Files and Folders =======

2013-08-26 11:33 - 2013-08-26 11:33 - 00000000 ____D C:\FRST
2013-08-26 10:13 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 10:10 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\System32\config\ELAM
2013-08-26 08:44 - 2012-07-26 08:21 - 00029683 _____ C:\Windows\setupact.log
2013-08-26 08:29 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-08-26 08:15 - 2012-10-22 14:40 - 01811549 _____ C:\Windows\WindowsUpdate.log
2013-08-26 08:14 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System32\sru
2013-08-24 19:13 - 2012-10-22 15:03 - 00000000 ____D C:\ProgramData\MOCP
2013-08-24 18:01 - 2013-08-24 18:01 - 01084778 _____ C:\Users\SelinaWille\AppData\Roaming\2433f433
2013-08-24 18:01 - 2013-08-24 18:01 - 01084735 _____ C:\ProgramData\2433f433
2013-08-24 18:01 - 2013-08-24 18:01 - 01084725 _____ C:\Users\SelinaWille\AppData\Local\2433f433
2013-08-24 17:59 - 2012-12-27 22:19 - 00000000 ____D C:\Users\SelinaWille\Documents\Rock It
2013-08-22 23:27 - 2012-12-29 14:59 - 00000000 ____D C:\Users\SelinaWille\AppData\Local\CrashDumps
2013-08-22 10:16 - 2013-08-22 10:16 - 00002416 _____ C:\Users\SelinaWille\Desktop\Treffpunkt Martinshof.lnk
2013-08-22 10:16 - 2013-08-22 10:15 - 00000000 ____D C:\Users\SelinaWille\AppData\Roaming\directx9
2013-08-22 10:16 - 2012-10-22 14:47 - 00000552 _____ C:\Windows\DirectX.log
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 ____D C:\Program Files (x86)\Bibi und Tina
2013-08-22 10:00 - 2012-10-22 15:17 - 00753134 _____ C:\Windows\System32\perfh007.dat
2013-08-22 10:00 - 2012-10-22 15:17 - 00155826 _____ C:\Windows\System32\perfc007.dat
2013-08-22 10:00 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\System32\PerfStringBackup.INI
2013-08-21 23:03 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System32\NDF
2013-08-21 21:52 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-19 20:59 - 2013-08-19 20:59 - 00001161 _____ C:\Users\Public\Desktop\Lissy und ihre Freunde - Die Abenteuerliche Pferderallye.lnk
2013-08-19 20:59 - 2012-12-27 18:35 - 00000000 ____D C:\Users\SelinaWille\AppData\Local\VirtualStore
2013-08-19 20:56 - 2013-08-19 20:56 - 00000000 ____D C:\Program Files (x86)\Rondomedia
2013-08-16 20:36 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-08-15 23:12 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-15 23:12 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-14 13:01 - 2013-08-14 12:58 - 00000000 ____D C:\Windows\System32\MRT
2013-08-14 12:58 - 2012-12-29 13:15 - 78161360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-08-11 12:51 - 2013-03-02 16:18 - 00001129 _____ C:\Users\SelinaWille\Desktop\Call of Atlantis.lnk
2013-08-11 12:51 - 2012-12-30 10:05 - 00000000 ____D C:\Program Files (x86)\Call of Atlantis
2013-08-10 18:31 - 2013-08-10 18:31 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-08-09 21:08 - 2012-12-27 18:44 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3924418898-1453549408-3415575513-1001
2013-08-06 22:14 - 2012-10-22 14:43 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-08-06 22:13 - 2012-08-03 03:22 - 00020480 _____ C:\Windows\PFRO.log

Files to move or delete:
====================
C:\Users\SELINA~1\AppData\Local\Temp\toxkfmxgisubeovty.exe
C:\Users\SelinaWille\AppData\Local\Temp\pkclnwuarbguwkwlp.exe
C:\Users\SelinaWille\AppData\Local\Temp\toxkfmxgisubeovty.exe

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-08-09 13:55:47
Restore point made on: 2013-08-14 12:56:24
Restore point made on: 2013-08-19 20:56:36
Restore point made on: 2013-08-22 10:12:54

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 4043.27 MB
Available physical RAM: 3361.65 MB
Total Pagefile: 4043.27 MB
Available Pagefile: 3378.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:435.9 GB) (Free:378.2 GB) NTFS
Drive d: (HITMANPRO) (Removable) (Total:3.63 GB) (Free:3.6 GB) FAT32
Drive e: (KRD10) (CDROM) (Total:0.28 GB) (Free:0 GB) CDFS
Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3ED58823)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 904E356C)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)


LastRegBack: 2013-08-20 22:41

==================== End Of Log ============================