Abuse Brief von Telekom Schadprogramm ZeuS/ZBot mehrere Geräte im Netzwerk

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:15 on 26/08/2013 (Notebook)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by Notebook (administrator) on 26-08-2013 20:51:45
Running from C:\Users\Notebook\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(HP) C:\Windows\SysWOW64\HPZipm12.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
() C:\Users\Notebook\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_94_ActiveX.exe
() C:\Users\Notebook\Desktop\Defogger.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-08-23] (Google Inc.)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [x]
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Notebook\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\RunOnce: [DeleteMarkAny] - C:\Windows\SysWOW64\MASetupCleaner.exe C:\Program Files (x86)\MarkAny\ContentSafer [24576 2013-06-14] ((주)마크애니)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Musik\...\Policies\system: [LogonHoursAction] 2
HKU\Musik\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
URLSearchHook: (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} -  No File
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F8D674DE2BD9517B&affID=121271&tsp=4985
SearchScopes: HKCU - {4EA506A4-53AA-4E0C-AAE8-64D9D5B49B52} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=3A1D1EBD-FC09-4261-A039-121AE5E91051&apn_sauid=6908D154-CC79-4268-8949-AB7121D932A6
SearchScopes: HKCU - {CFFDF7C8-2246-4B69-9975-E596696F2DDC} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3241949
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\gcswf32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.0.379_0
CHR Extension: (Iminent) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\7.33.3.1_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Gmail) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_0

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-08-02] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [36456 2011-05-30] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
R2 Pml Driver HPZ12; C:\Windows\SysWOW64\HPZipm12.exe [69632 2004-09-29] (HP)
S2 HPSLPSVC; C:\Users\Notebook\AppData\Local\Temp\7zS7A58\hpslpsvc64.dll [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-20] (Avira Operations GmbH & Co. KG)
S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [203672 2013-06-21] (DEVGURU Co., LTD.(www.devguru.co.kr))

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-26 20:49 - 2013-08-26 20:49 - 01577068 _____ (Farbar) C:\Users\Notebook\Desktop\FRST64.exe
2013-08-26 20:48 - 2013-08-26 20:48 - 00000478 _____ C:\Users\Notebook\Desktop\defogger_disable.log
2013-08-26 20:48 - 2013-08-26 20:48 - 00000000 _____ C:\Users\Notebook\defogger_reenable
2013-08-26 20:47 - 2013-08-26 20:47 - 00050477 _____ C:\Users\Notebook\Desktop\Defogger.exe
2013-08-26 20:45 - 2013-08-26 20:45 - 00050477 _____ C:\Users\Notebook\Downloads\Defogger.exe
2013-08-26 17:42 - 2013-08-26 17:42 - 00002088 _____ C:\Users\Notebook\Desktop\Entfernen des Avira DE-Cleaners.lnk
2013-08-26 17:42 - 2013-08-26 17:42 - 00002017 _____ C:\Users\Notebook\Desktop\Avira DE-Cleaner.lnk
2013-08-26 07:20 - 2013-08-26 07:20 - 00001878 _____ C:\Windows\system32\.crusader
2013-08-25 22:57 - 2013-08-26 17:13 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\PerformerSoft
2013-08-25 22:57 - 2013-08-26 17:13 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\BabSolution
2013-08-25 22:57 - 2013-08-25 22:57 - 00001142 _____ C:\Users\Notebook\Desktop\SpeedAnalysis.lnk
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\File Scout
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Babylon
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\ProgramData\Babylon
2013-08-25 22:32 - 2013-08-25 22:41 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2013-08-25 22:32 - 2013-08-25 22:32 - 00000000 ____D C:\ProgramData\Simply Super Software
2013-08-25 22:24 - 2013-08-26 17:13 - 00000000 ____D C:\Program Files\HitmanPro
2013-08-25 22:24 - 2013-08-26 07:20 - 00000000 ____D C:\ProgramData\HitmanPro
2013-08-25 22:09 - 2013-08-26 17:13 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Systweak
2013-08-25 22:09 - 2013-06-19 14:58 - 00019456 _____ (PerformerSoft LLC) C:\Windows\system32\roboot64.exe
2013-08-25 22:08 - 2013-08-26 17:11 - 00000866 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-08-25 22:08 - 2013-08-26 17:11 - 00000000 ____D C:\Program Files (x86)\Iminent
2013-08-25 22:08 - 2013-08-26 17:10 - 00000000 ____D C:\Program Files (x86)\IminentToolbar
2013-08-25 22:08 - 2013-08-25 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 22:06 - 2013-08-25 22:06 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Malwarebytes
2013-08-25 22:06 - 2013-08-25 22:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\Documents\Amazon MP3
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Amazon
2013-08-15 12:53 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 12:53 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 12:53 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 12:53 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 12:53 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 12:53 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 12:53 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 12:53 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 12:53 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 12:53 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 12:53 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 12:53 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 12:53 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-15 12:52 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 12:52 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 12:52 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 12:52 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 23:48 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 23:48 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 23:48 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 23:48 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 23:48 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 23:48 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 23:48 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 23:48 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 23:46 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 23:46 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 23:46 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 23:46 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 23:46 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 23:46 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 23:46 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 23:46 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 23:46 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 23:46 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 23:46 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 23:46 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 23:46 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 23:46 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 23:46 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 23:46 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 23:46 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 23:46 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 23:46 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-07-29 22:09 - 2013-07-29 22:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 22:02 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudobex.sys
2013-07-29 22:02 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2013-07-29 22:02 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2013-07-29 21:59 - 2013-08-26 17:18 - 00000000 ____D C:\Users\Notebook\AppData\Local\Samsung
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____D C:\Users\Notebook\Documents\samsung
2013-07-29 21:58 - 2013-06-21 02:07 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2013-07-29 21:58 - 2013-06-21 02:07 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2013-07-29 21:57 - 2013-07-29 21:57 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-07-29 21:56 - 2013-08-26 17:18 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 21:56 - 2013-08-26 17:18 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 21:56 - 2013-06-14 19:57 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-07-29 21:48 - 2013-08-26 17:18 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Samsung
2013-07-29 21:48 - 2013-07-29 21:48 - 00000000 ____D C:\Users\Public\Documents\SmartSwitch
2013-07-29 19:43 - 2013-07-29 19:43 - 00001232 _____ C:\Users\Public\Desktop\Amazon Music Importer.lnk
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Users\Notebook\Documents\Amazon Music Importer
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\com.amazon.music.uploader
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-07-27 19:28 - 2013-07-27 19:28 - 00000000 ____D C:\Program Files (x86)\Ask.com
2013-07-27 19:03 - 2013-08-26 17:05 - 00007769 _____ C:\Windows\setupact.log
2013-07-27 19:03 - 2013-08-25 23:02 - 00001496 _____ C:\Windows\PFRO.log
2013-07-27 19:03 - 2013-07-27 19:03 - 00000000 _____ C:\Windows\setuperr.log
2013-07-27 18:59 - 2013-07-27 19:21 - 00000000 ____D C:\Users\Notebook\Documents\Registry
2013-07-27 18:42 - 2013-07-27 18:42 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-27 18:42 - 2013-07-27 18:42 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-27 18:42 - 2013-07-27 18:42 - 00000000 ____D C:\Program Files\CCleaner

==================== One Month Modified Files and Folders =======

2013-08-26 20:51 - 2013-08-26 20:51 - 00000000 ____D C:\FRST
2013-08-26 20:49 - 2013-08-26 20:49 - 01577068 _____ (Farbar) C:\Users\Notebook\Desktop\FRST64.exe
2013-08-26 20:48 - 2013-08-26 20:48 - 00000478 _____ C:\Users\Notebook\Desktop\defogger_disable.log
2013-08-26 20:48 - 2013-08-26 20:48 - 00000000 _____ C:\Users\Notebook\defogger_reenable
2013-08-26 20:48 - 2012-07-01 16:52 - 00000000 ____D C:\Users\Notebook
2013-08-26 20:47 - 2013-08-26 20:47 - 00050477 _____ C:\Users\Notebook\Desktop\Defogger.exe
2013-08-26 20:45 - 2013-08-26 20:45 - 00050477 _____ C:\Users\Notebook\Downloads\Defogger.exe
2013-08-26 20:39 - 2012-07-06 16:06 - 00000000 ____D C:\Users\Notebook\Documents\Outlook-Dateien
2013-08-26 20:13 - 2012-08-23 22:00 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-26 19:43 - 2012-03-18 01:51 - 02041744 _____ C:\Windows\WindowsUpdate.log
2013-08-26 17:42 - 2013-08-26 17:42 - 00002088 _____ C:\Users\Notebook\Desktop\Entfernen des Avira DE-Cleaners.lnk
2013-08-26 17:42 - 2013-08-26 17:42 - 00002017 _____ C:\Users\Notebook\Desktop\Avira DE-Cleaner.lnk
2013-08-26 17:18 - 2013-07-29 21:59 - 00000000 ____D C:\Users\Notebook\AppData\Local\Samsung
2013-08-26 17:18 - 2013-07-29 21:56 - 00000000 ____D C:\ProgramData\Samsung
2013-08-26 17:18 - 2013-07-29 21:56 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-08-26 17:18 - 2013-07-29 21:48 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Samsung
2013-08-26 17:18 - 2012-02-07 11:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-26 17:16 - 2012-10-22 20:39 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9FF6709E-E060-4315-A05B-2A7F681B9D41}
2013-08-26 17:15 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-26 17:15 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 17:13 - 2013-08-25 22:57 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\PerformerSoft
2013-08-26 17:13 - 2013-08-25 22:57 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\BabSolution
2013-08-26 17:13 - 2013-08-25 22:24 - 00000000 ____D C:\Program Files\HitmanPro
2013-08-26 17:13 - 2013-08-25 22:09 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Systweak
2013-08-26 17:11 - 2013-08-25 22:08 - 00000866 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-08-26 17:11 - 2013-08-25 22:08 - 00000000 ____D C:\Program Files (x86)\Iminent
2013-08-26 17:11 - 2012-07-04 21:57 - 00000000 ____D C:\Users\Notebook\AppData\Local\CrashDumps
2013-08-26 17:10 - 2013-08-25 22:08 - 00000000 ____D C:\Program Files (x86)\IminentToolbar
2013-08-26 17:05 - 2013-07-27 19:03 - 00007769 _____ C:\Windows\setupact.log
2013-08-26 17:05 - 2012-08-23 22:00 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-26 17:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 07:23 - 2012-07-06 22:26 - 00000000 ____D C:\Users\Notebook\AppData\Local\Google
2013-08-26 07:20 - 2013-08-26 07:20 - 00001878 _____ C:\Windows\system32\.crusader
2013-08-26 07:20 - 2013-08-25 22:24 - 00000000 ____D C:\ProgramData\HitmanPro
2013-08-25 23:02 - 2013-07-27 19:03 - 00001496 _____ C:\Windows\PFRO.log
2013-08-25 22:57 - 2013-08-25 22:57 - 00001142 _____ C:\Users\Notebook\Desktop\SpeedAnalysis.lnk
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 22:57 - 2013-08-25 22:57 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\File Scout
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Babylon
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-08-25 22:56 - 2013-08-25 22:56 - 00000000 ____D C:\ProgramData\Babylon
2013-08-25 22:41 - 2013-08-25 22:32 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2013-08-25 22:32 - 2013-08-25 22:32 - 00000000 ____D C:\ProgramData\Simply Super Software
2013-08-25 22:08 - 2013-08-25 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 22:06 - 2013-08-25 22:06 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Malwarebytes
2013-08-25 22:06 - 2013-08-25 22:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-25 21:51 - 2012-07-01 16:55 - 00000000 ____D C:\Users\Notebook\AppData\Local\Adobe
2013-08-22 21:28 - 2012-03-18 10:44 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-22 21:28 - 2012-03-18 10:44 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-22 21:28 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-19 20:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-18 15:31 - 2012-07-06 15:50 - 00000000 ____D C:\Users\Notebook\AppData\Local\Microsoft Help
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\Documents\Amazon MP3
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-08-16 09:27 - 2013-08-16 09:27 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Amazon
2013-08-15 13:26 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-08-15 12:48 - 2013-07-14 16:45 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 12:46 - 2012-07-07 09:00 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-05 07:08 - 2012-07-10 11:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-04 21:29 - 2012-07-16 14:40 - 00000000 ____D C:\Users\Notebook\AppData\Local\FreePDF_XP
2013-08-04 14:18 - 2012-07-10 11:52 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-04 14:18 - 2012-07-10 11:52 - 00003824 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-04 14:18 - 2012-02-07 11:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-29 22:30 - 2013-07-29 22:09 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 21:59 - 2013-07-29 21:59 - 00000000 ____D C:\Users\Notebook\Documents\samsung
2013-07-29 21:57 - 2013-07-29 21:57 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-07-29 21:55 - 2013-06-25 20:42 - 00000000 ____D C:\Users\Notebook\AppData\Local\Downloaded Installations
2013-07-29 21:48 - 2013-07-29 21:48 - 00000000 ____D C:\Users\Public\Documents\SmartSwitch
2013-07-29 19:43 - 2013-07-29 19:43 - 00001232 _____ C:\Users\Public\Desktop\Amazon Music Importer.lnk
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Users\Notebook\Documents\Amazon Music Importer
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\com.amazon.music.uploader
2013-07-29 19:43 - 2013-07-29 19:43 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-07-27 19:33 - 2009-07-14 06:45 - 00415392 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-27 19:29 - 2012-07-01 16:52 - 00110560 _____ C:\Users\Notebook\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-27 19:28 - 2013-07-27 19:28 - 00000000 ____D C:\Program Files (x86)\Ask.com
2013-07-27 19:24 - 2012-12-31 18:14 - 00000000 ____D C:\Users\Notebook\AppData\Local\Conduit
2013-07-27 19:21 - 2013-07-27 18:59 - 00000000 ____D C:\Users\Notebook\Documents\Registry
2013-07-27 19:14 - 2012-02-07 11:50 - 00000000 ____D C:\ProgramData\Adobe
2013-07-27 19:14 - 2012-02-07 11:50 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-27 19:03 - 2013-07-27 19:03 - 00000000 _____ C:\Windows\setuperr.log
2013-07-27 19:02 - 2012-12-31 18:18 - 00000000 ____D C:\Program Files\Tracker Software
2013-07-27 18:54 - 2013-07-23 11:00 - 00000000 ____D C:\Windows\Minidump
2013-07-27 18:54 - 2013-04-03 15:20 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Winamp
2013-07-27 18:42 - 2013-07-27 18:42 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-27 18:42 - 2013-07-27 18:42 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-27 18:42 - 2013-07-27 18:42 - 00000000 ____D C:\Program Files\CCleaner

Files to move or delete:
====================
C:\Users\Notebook\AppData\Local\Temp\HitmanPro.exe
C:\Users\Notebook\AppData\Local\Temp\IminentSetup.exe
C:\Users\Notebook\AppData\Local\Temp\tbFile.dll
C:\Users\Notebook\AppData\Local\Temp\uftx2edz.dll
C:\Users\Notebook\AppData\Local\Temp\uninst1.exe
C:\Users\Notebook\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Notebook\AppData\Local\Temp\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\AskPartnerCobrandingTool.exe
C:\Users\Notebook\AppData\Local\Temp\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\instApp.exe
C:\Users\Notebook\AppData\Local\Temp\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\RunIE.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\avnetworkloader.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\avnetworkLoaderGUI.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\avwebloader.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\DE-Cleaner-Install.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\msvcr90.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\rcimage.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\rcNwLoad_de.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\scewxmlw.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\update.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aebb.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aecore.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aeemu.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aeexp.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aegen.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aehelp.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aeheur.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aeoffice.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aepack.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aerdl.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aesbx.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aescn.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aescript.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\aevdf.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avevtlog.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avevtrc.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avipc.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\Avira-DE-Cleaner-starten.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avpref.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avreg.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avrep.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avscan.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avscan.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avscplr.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\avwinll.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\ccavscanex.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\ccavscanexrc.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\ccwkrlib.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\cfglib.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\decleaner.exe
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\extdlgfw.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\luke.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\mfc90u.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\msvcp90.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\msvcr90.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\rcimage.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\rctext.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\scewxmlw.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\sqlite3.dll
C:\Users\Notebook\AppData\Local\Temp\decleaner\decleaner\setup\unacev2.dll
C:\Users\Notebook\AppData\Local\Temp\85594162-BAB0-7891-A975-504F17E05E10\Setup.exe
C:\Users\Notebook\AppData\Local\Temp\85594162-BAB0-7891-A975-504F17E05E10\sqlite3.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-26 20:21

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-08-2013
Ran by Notebook at 2013-08-26 20:52:40
Running from C:\Users\Notebook\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Adobe AIR (x32 Version: 2.7.1.19610)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Download Assistant (x32 Version: 1.2.3)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Photoshop Elements 9 (x32 Version: 9.0)
Adobe Photoshop Lightroom 3.6 64-bit (Version: 3.6.1)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
AiO_Scan (x32 Version: 47.0.1.000)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Amazon Music Importer (x32 Version: 2.1.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Ask Toolbar (x32 Version: 1.15.2.0)
Ask Toolbar Updater (HKCU Version: 1.2.1.23037)
Audible Download Manager (x32 Version: 6.6.0.15)
AudibleManager (x32 Version: 2004565230.48.56.34213234)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
AVNavigator 2012.I (HKCU Version: 1.13.0.007.1)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Bewerbungsfoto-/Passbild-Generator v3.5b (x32)
Bonjour (Version: 3.0.0.10)
Broadcom Card Reader Driver Installer (Version: 14.8.2.2)
Broadcom NetLink Controller (Version: 14.8.4.1)
Canon Utilities EOS Utility (x32 Version: 2.11.4.0)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97)
CyberLink MediaEspresso (x32 Version: 6.5.1720_38230)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eaner (Version: 4.04)
eBay Worldwide (x32 Version: 2.2.0409)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
EOSInfo (x32 Version: 0.2.0)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.5.1 (x32 Version: 4.5.1.5451)
FATE (x32 Version: 2.2.0.97)
Final Drive: Nitro (x32 Version: 2.2.0.95)
Fooz Kids (x32 Version: 3.0.8)
Fooz Kids Platform (x32 Version: 2.1)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
FreePDF (Remove only) (x32)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 29.0.1547.57)
Google Earth (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
GPL Ghostscript (Version: 9.04)
High-Definition Video Playback (x32 Version: 7.1.13400.42.0)
HomeMedia (x32 Version: 2.0.8920)
HP Image Zone 4.7 (x32 Version: 4.7)
HP Managed Printing Admin (x32 Version: 2.5.9)
HP PSC & OfficeJet 4.7 (x32)
Identity Card (x32 Version: 1.00.3501)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2418)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Jewel Match 3 (x32 Version: 2.2.0.97)
Jewel Quest Solitaire (x32 Version: 2.2.0.95)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Launch Manager (x32 Version: 5.1.7)
Logitech SetPoint 6.32 (Version: 6.32.20)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyFreeCodec (HKCU)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Nero 10 ClipartPack (x32 Version: 10.2.10000.11.0)
Nero 10 Menu TemplatePack 1 (x32 Version: 10.2.10000.0.0)
Nero 10 Menu TemplatePack 2 (x32 Version: 10.2.10000.0.0)
Nero 10 Menu TemplatePack 3 (x32 Version: 10.2.10100.1.0)
Nero 10 Menu TemplatePack Basic (x32 Version: 10.2.10000.0.0)
Nero 10 Movie ThemePack 1 (x32 Version: 10.2.10000.11.0)
Nero 10 Movie ThemePack 2 (x32 Version: 10.2.10100.1.0)
Nero 10 Movie ThemePack 3 (x32 Version: 10.2.10100.1.0)
Nero 10 Movie ThemePack 4 (x32 Version: 10.2.10100.1.0)
Nero 10 Movie ThemePack Basic (x32 Version: 10.2.10000.0.0)
Nero 10 PiP EffectPack 1 (x32 Version: 10.2.10000.0.0)
Nero 10 Sample ImagePack (x32 Version: 10.2.10000.11.0)
Nero 10 Sample Videos (x32 Version: 10.2.10000.11.0)
Nero 10 Video TransitionPack 1 (x32 Version: 10.2.10000.0.0)
Nero BackItUp 10 (x32 Version: 5.8.11000.8.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Burning ROM 10 (x32 Version: 10.2.11000.12.100)
Nero BurningROM 10 Help (CHM) (x32 Version: 10.5.10100)
Nero BurnRights 10 (x32 Version: 4.2.10300.0.102)
Nero BurnRights 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Core Components 10 (x32 Version: 2.0.18100.8.8)
Nero CoverDesigner 10 (x32 Version: 5.2.10700.7.100)
Nero CoverDesigner 10 Help (CHM) (x32 Version: 10.5.10000)
Nero DiscSpeed 10 (x32 Version: 6.2.10500.2.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Dolby Files 10 (x32 Version: 2.0.12100.0.10)
Nero Express 10 (x32 Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700)
Nero InfoTool 10 (x32 Version: 7.2.10300.5.100)
Nero InfoTool 10 Help (CHM) (x32 Version: 10.5.10000)
Nero MediaHub 10 (x32 Version: 1.2.12300.27.100)
Nero MediaHub 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.5.10300)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300)
Nero Multimedia Suite 10 Platinum HD (x32 Version: 10.5.10900)
Nero Recode 10 (x32 Version: 4.8.10400.3.100)
Nero Recode 10 Help (CHM) (x32 Version: 10.5.10000)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10700)
Nero SoundTrax 10 (x32 Version: 4.8.10200.1.100)
Nero SoundTrax 10 Help (CHM) (x32 Version: 10.5.10000)
Nero StartSmart 10 (x32 Version: 10.2.11600.14.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Update (x32 Version: 1.0.10900.31.0)
Nero Vision 10 (x32 Version: 7.2.14700.9.100)
Nero Vision 10 Help (CHM) (x32 Version: 10.5.10000)
Nero WaveEditor 10 (x32 Version: 5.8.10400.2.100)
Nero WaveEditor 10 Help (CHM) (x32 Version: 10.5.10000)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA PhysX (x32 Version: 9.10.0514)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Packard Bell Games (x32 Version: 1.0.2.5)
Packard Bell Power Management (x32 Version: 6.00.3008)
Packard Bell Recovery Management (x32 Version: 5.00.3504)
Packard Bell Registration (x32 Version: 1.04.3505)
Packard Bell ScreenSaver (x32 Version: 1.1.0915.2011)
Packard Bell Social Networks (x32 Version: 3.0.3106)
Packard Bell Updater (x32 Version: 1.02.3500)
Penguins! (x32 Version: 2.2.0.95)
Photomatix Pro version 4.0.2 (Version: 4.0.2)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
QFolder (x32 Version: 1.00.0000)
QuickTime (x32 Version: 7.74.80.86)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6339)
RedMon - Redirection Port Monitor
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Scan (x32 Version: 4.5.0.0)
Similarity 1.8.2 (x32 Version: 1.8.1656)
Skype™ 5.10 (x32 Version: 5.10.116)
Slingo Deluxe (x32 Version: 2.2.0.95)
Synaptics Pointing Device Driver (Version: 15.1.6.0)
TomTom HOME (x32 Version: 2.9.5)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)
Torchlight (x32 Version: 2.2.0.97)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553092) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update Installer for WildTangent Games App (x32)
Video Web Camera (x32 Version: 1.0.1904)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97)
Wedding Dash (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3505)
WildTangent Games App (Packard Bell Games) (x32 Version: 4.0.5.14)
Winamp (x32 Version: 5.63 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922)
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
بريد Windows Live (x32 Version: 15.4.3502.0922)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

29-07-2013 19:55:43 Installed Samsung Kies
08-08-2013 18:05:39 Geplanter Prüfpunkt
15-08-2013 10:44:09 Windows Update
26-08-2013 15:16:22 Removed Samsung Kies

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {096E0B30-399B-47B0-AF39-FABF17778A91} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23] (Google Inc.)
Task: {1B701259-B915-4573-88F3-D43EC9EBEA53} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {271CAC9F-174C-437B-9E03-9FA84D951A98} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {525F6A71-49A6-4292-8DD3-77EC904DC5E4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {6DA20BF6-19AB-4CB1-9E53-4E078711BC96} - System32\Tasks\User_Feed_Synchronization-{9FF6709E-E060-4315-A05B-2A7F681B9D41} => C:\Windows\system32\msfeedssync.exe [2013-05-13] (Microsoft Corporation)
Task: {713AA79B-4EBB-459D-83AD-C452DBD571AE} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Notification.exe [2011-08-10] (Acer)
Task: {7FFA39E8-2A58-4B13-AE8B-A5426ED0D1B5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23] (Google Inc.)
Task: {949B6010-011F-4FF0-87FA-FE96F68869BE} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {A469B675-EAC0-4601-8020-DF03EE37A85D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {B8FF9018-1C8A-411D-A9BC-EAFB74359635} - System32\Tasks\AdobeAAMUpdater-1.0-Notebook-PC-Notebook => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {CF9F97BE-0283-4BAE-A4BB-9894B6483AC7} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-07-06] (Nero AG)
Task: {D2FEC1D9-2A83-4FD7-BF90-CACC61CC4A55} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {D4B2CDC2-D234-47E1-A15B-A040F3DA2D60} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {DDF4D42C-B36D-4FBB-A642-87D2E6296F53} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-04] (Adobe Systems Incorporated)
Task: {EA237CAE-908A-4331-A72B-098038A9C22A} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2260390926-3199480439-1231461465-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/26/2013 08:23:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "NFD,type="win32",version="5.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "NFD,type="win32",version="5.2.0.0"2" in Zeile  NFD,type="win32",version="5.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: NFD,type="win32",version="5.2.0.0".
Definition: NFD,type="win32",version="5.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (08/26/2013 05:11:04 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: MSI81C1.tmp, Version: 0.0.0.0, Zeitstempel: 0x52136a3e
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0009ca87
ID des fehlerhaften Prozesses: 0x1bc4
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3

Error: (08/26/2013 05:06:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/26/2013 07:21:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/26/2013 07:08:50 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/25/2013 11:04:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/25/2013 10:39:02 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 13.6.0.1722 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ddc

Startzeit: 01cea1cb7c578308

Endzeit: 60000

Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

Berichts-ID: 315ccc8b-0dc6-11e3-a378-dc0ea19a3d7b

Error: (08/25/2013 10:08:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ChromeInstaller.exe, Version: 1.9.3.0, Zeitstempel: 0x5216122d
Name des fehlerhaften Moduls: ChromeInstaller.exe, Version: 1.9.3.0, Zeitstempel: 0x5216122d
Ausnahmecode: 0xc0000417
Fehleroffset: 0x000998b5
ID des fehlerhaften Prozesses: 0x1f64
Startzeit der fehlerhaften Anwendung: 0xChromeInstaller.exe0
Pfad der fehlerhaften Anwendung: ChromeInstaller.exe1
Pfad des fehlerhaften Moduls: ChromeInstaller.exe2
Berichtskennung: ChromeInstaller.exe3

Error: (08/25/2013 10:04:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/25/2013 10:04:46 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (08/26/2013 05:09:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/26/2013 05:09:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/26/2013 05:09:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (08/26/2013 05:07:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/26/2013 05:07:37 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (08/26/2013 05:07:37 PM) (Source: DCOM) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (08/26/2013 07:24:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/26/2013 07:24:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/26/2013 07:23:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (08/26/2013 07:21:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HitmanPro 3.7 Crusader (Boot)" wurde mit folgendem dienstspezifischem Fehler beendet: %%0.


Microsoft Office Sessions:
=========================
Error: (08/26/2013 08:23:10 PM) (Source: SideBySide)(User: )
Description: NFD,type="win32",version="5.2.0.0"NFD,type="win32",version="5.0.0.0"C:\Program Files (x86)\Nero\Nero 10\Nero SoundTrax\NMDllHost.exe.ManifestC:\Program Files (x86)\Nero\Nero 10\Nero SoundTrax\NFD\NFD.MANIFEST3

Error: (08/26/2013 05:11:04 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.7601.175144ce792c4MSI81C1.tmp0.0.0.052136a3ec00004170009ca871bc401cea26e6b97b598C:\Windows\syswow64\MsiExec.exeC:\Windows\Installer\MSI81C1.tmpb96633f4-0e61-11e3-902f-dc0ea19a3d7b

Error: (08/26/2013 05:06:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/26/2013 07:21:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/26/2013 07:08:50 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/25/2013 11:04:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/25/2013 10:39:02 PM) (Source: Application Hang)(User: )
Description: avscan.exe13.6.0.1722ddc01cea1cb7c57830860000C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe315ccc8b-0dc6-11e3-a378-dc0ea19a3d7b

Error: (08/25/2013 10:08:43 PM) (Source: Application Error)(User: )
Description: ChromeInstaller.exe1.9.3.05216122dChromeInstaller.exe1.9.3.05216122dc0000417000998b51f6401cea1cedf4b6655C:\Users\Notebook\AppData\Local\Temp\RarSFX0\Binaries\ChromeInstaller.exeC:\Users\Notebook\AppData\Local\Temp\RarSFX0\Binaries\ChromeInstaller.exe23a04a79-0dc2-11e3-a378-dc0ea19a3d7b

Error: (08/25/2013 10:04:48 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Notebook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEU0WUS1\COMPUTER_BILD_Download_Manager_fuer_malwarebytes-anti-malware.exe

Error: (08/25/2013 10:04:46 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Notebook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEU0WUS1\COMPUTER_BILD_Download_Manager_fuer_malwarebytes-anti-malware.exe


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 8043.86 MB
Available physical RAM: 5040.95 MB
Total Pagefile: 16085.9 MB
Available Pagefile: 12887.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:340.32 GB) (Free:247.71 GB) NTFS
Drive d: (Volume) (Fixed) (Total:338.22 GB) (Free:127.88 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 118EEA2B)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=340 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=338 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-26 21:05:15
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.JE4O 698,64GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Notebook\AppData\Local\Temp\kxrdikow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                                                                fffff800031b9000 45 bytes [00, 10, 00, 00, 00, 00, 00, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 591                                                                                                fffff800031b902f 16 bytes [00, 00, 20, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\SysWOW64\HPZipm12.exe[2648] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                                           0000000072221a22 2 bytes [22, 72]
.text     C:\Windows\SysWOW64\HPZipm12.exe[2648] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                                           0000000072221ad0 2 bytes [22, 72]
.text     C:\Windows\SysWOW64\HPZipm12.exe[2648] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                                           0000000072221b08 2 bytes [22, 72]
.text     C:\Windows\SysWOW64\HPZipm12.exe[2648] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                                           0000000072221bba 2 bytes [22, 72]
.text     C:\Windows\SysWOW64\HPZipm12.exe[2648] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                                           0000000072221bda 2 bytes [22, 72]
.text     C:\Users\Notebook\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe[4024] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075f11465 2 bytes [F1, 75]
.text     C:\Users\Notebook\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe[4024] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000075f114bb 2 bytes [F1, 75]
.text     ...                                                                                                                                                               * 2
.text     C:\Windows\SysWOW64\rundll32.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                    0000000075f11465 2 bytes [F1, 75]
.text     C:\Windows\SysWOW64\rundll32.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                   0000000075f114bb 2 bytes [F1, 75]
.text     ...                                                                                                                                                               * 2
.text     C:\Program Files (x86)\Launch Manager\LManager.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                  0000000075f11465 2 bytes [F1, 75]
.text     C:\Program Files (x86)\Launch Manager\LManager.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                 0000000075f114bb 2 bytes [F1, 75]
.text     ...                                                                                                                                                               * 2

---- EOF - GMER 2.1 ----