Computersperrung durch Interpol

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by SYSTEM on 28-08-2013 16:26:23
Running from D:\
Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-12-28] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-09-27] (Synaptics Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-28] ( (Atheros Communications))
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] -  [x]
HKU\WICK Roland\...\Run: [HP Photosmart 5520 series (NET)] - C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\WICK Roland\...\RunOnce: [Uninstall C:\Users\WICK Roland\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] - C:\Windows\system32\cmd.exe [404992 2012-07-26] (Microsoft Corporation)
HKU\WICK Roland\...\RunOnce: [Uninstall C:\Users\WICK Roland\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] - C:\Windows\system32\cmd.exe [404992 2012-07-26] (Microsoft Corporation)
Startup: C:\Users\WICK Roland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bmyihnrrqsiavqfjfem.lnk
ShortcutTarget: bmyihnrrqsiavqfjfem.lnk -> C:\Users\WICKRO~1\AppData\Local\Temp\mefjfqvaisqrrnhiymb.bfg (Microsoft Corporation)
Startup: C:\Users\WICK Roland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series (Netzwerk).lnk

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-28] (Qualcomm Atheros Commnucations)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
S2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-28] (Atheros)
S2 McOobeSv2; "C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [x]

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-02] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-02] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-02] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-28] (Qualcomm Atheros)
S3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [428008 2012-12-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-09-27] (Synaptics Incorporated)
S3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 iscFlash; \??\C:\ProgramData\Sony Corporation\Sony Packaging Manager\PackagingTemp\{35BF5A2F-4A8E-4813-BBEE-AFC1B4637060}\Tool_Win\iscflashx64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-28 14:08 - 2013-08-28 14:08 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-08-27 21:31 - 2013-08-27 21:31 - 00000165 _____ C:\ProgramData\bmyihnrrqsiavqfjfem.reg
2013-08-27 21:31 - 2013-08-27 21:31 - 00000070 _____ C:\ProgramData\bmyihnrrqsiavqfjfem.bat
2013-08-18 11:30 - 2013-08-18 11:32 - 00000000 ____D C:\Windows\System32\MRT
2013-08-15 22:59 - 2013-05-23 23:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-15 22:59 - 2013-05-23 22:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 22:58 - 2013-07-09 06:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-15 22:57 - 2013-07-26 05:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-15 22:57 - 2013-07-26 05:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-15 22:57 - 2013-07-26 05:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-08-15 22:57 - 2013-07-26 05:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-08-15 22:57 - 2013-07-26 05:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-08-15 22:57 - 2013-07-26 05:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-15 22:57 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-08-15 22:57 - 2013-07-26 03:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-15 22:57 - 2013-07-26 03:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 22:57 - 2013-07-26 03:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 22:57 - 2013-07-26 03:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 22:57 - 2013-07-26 03:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 22:57 - 2013-07-26 03:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 22:57 - 2013-07-26 03:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 22:57 - 2013-07-26 02:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 22:57 - 2013-07-26 00:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-15 22:57 - 2013-07-02 00:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2013-08-15 22:57 - 2013-07-01 22:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2013-08-15 22:56 - 2013-07-13 06:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-15 22:56 - 2013-07-13 06:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-15 22:56 - 2013-07-13 06:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-15 22:56 - 2013-07-13 06:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\System32\apprepapi.dll
2013-08-15 22:56 - 2013-07-13 06:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\apprepsync.dll
2013-08-15 22:56 - 2013-07-13 04:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 22:56 - 2013-07-13 04:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 22:56 - 2013-07-13 04:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-15 22:56 - 2013-07-13 04:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-04 09:36 - 2013-08-04 09:36 - 00019134 _____ C:\Users\WICK Roland\Documents\1.Augustfeier.xlsx

==================== One Month Modified Files and Folders =======

2013-08-28 16:25 - 2013-08-28 16:25 - 00000000 ____D C:\FRST
2013-08-28 14:08 - 2013-08-28 14:08 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-08-28 14:08 - 2012-07-26 07:21 - 00024441 _____ C:\Windows\setupact.log
2013-08-28 14:07 - 2013-05-11 10:26 - 00001144 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 14:07 - 2012-07-26 07:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 13:36 - 2013-05-11 10:26 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 11:16 - 2013-02-15 20:02 - 00000000 ____D C:\users\WICK Roland
2013-08-28 11:06 - 2013-02-21 17:23 - 00000000 ____D C:\Users\WICK Roland\AppData\Local\CrashDumps
2013-08-28 11:04 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\System32\sru
2013-08-28 10:56 - 2012-11-21 10:24 - 01565801 _____ C:\Windows\WindowsUpdate.log
2013-08-27 21:31 - 2013-08-27 21:31 - 00000165 _____ C:\ProgramData\bmyihnrrqsiavqfjfem.reg
2013-08-27 21:31 - 2013-08-27 21:31 - 00000070 _____ C:\ProgramData\bmyihnrrqsiavqfjfem.bat
2013-08-27 20:21 - 2013-02-21 17:45 - 00000000 ____D C:\Users\WICK Roland\Documents\Outlook-Dateien
2013-08-22 17:01 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\rescache
2013-08-21 22:27 - 2012-11-21 09:36 - 00753134 _____ C:\Windows\System32\perfh007.dat
2013-08-21 22:27 - 2012-11-21 09:36 - 00155826 _____ C:\Windows\System32\perfc007.dat
2013-08-21 22:27 - 2012-07-26 07:28 - 01745416 _____ C:\Windows\System32\PerfStringBackup.INI
2013-08-19 21:34 - 2012-08-03 02:22 - 00036782 _____ C:\Windows\PFRO.log
2013-08-19 21:31 - 2012-07-26 05:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-08-19 21:29 - 2012-07-26 08:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-19 21:29 - 2012-07-26 08:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-18 11:32 - 2013-08-18 11:30 - 00000000 ____D C:\Windows\System32\MRT
2013-08-18 11:30 - 2013-02-17 12:44 - 78161360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-08-13 21:01 - 2013-03-07 21:29 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-08-06 22:22 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-04 21:13 - 2013-06-02 12:27 - 00000000 ____D C:\Users\WICK Roland\AppData\Roaming\HpUpdate
2013-08-04 09:36 - 2013-08-04 09:36 - 00019134 _____ C:\Users\WICK Roland\Documents\1.Augustfeier.xlsx
2013-08-01 21:37 - 2013-05-11 10:26 - 00000000 ____D C:\Program Files (x86)\Google

Files to move or delete:
====================
C:\Windows\system32\cmd.exe
C:\ProgramData\bmyihnrrqsiavqfjfem.bat
C:\ProgramData\bmyihnrrqsiavqfjfem.reg
C:\Users\WICK Roland\AppData\Local\Temp\AskSLib.dll
C:\Users\WICK Roland\AppData\Local\Temp\OfficeSetup.exe
C:\Users\WICK Roland\AppData\Local\Temp\ose00000.exe
C:\Users\WICK Roland\AppData\Local\Temp\Setup00000934\ose00000.exe
C:\Users\WICK Roland\AppData\Local\Temp\Setup00000934\OSETUP.DLL
C:\Users\WICK Roland\AppData\Local\Temp\Setup00000934\OSETUPUI.DLL
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\mcbrwsr2.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\McInstallerStartup.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\McInstallerUtil.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\mcuicnt.exe
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\OcpStartup.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\Ocp_LD.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\OCP_UI.dll
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\UnInstallOcp.exe
C:\Users\WICK Roland\AppData\Local\Temp\nsp6E72.tmp\UnMfp.exe
C:\Users\WICK Roland\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\HP-DQEX5.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\Setup.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\HPInstallLogCollector.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\hpUrlLauncher.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\x86\DIFxAPI.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\x86\RemovePreinstalledDrivers.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\x64\DIFxAPI.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\utils\x64\RemovePreinstalledDrivers.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\Toolbar\BingBarSetup.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\Toolbar\smartprintsetup.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\Optional\RLBootstrap.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpfime51.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpinkcoiB111.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpinkinsB111.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpinkstsB111.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpinkstsB111LM.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpvpldrv09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpvplres09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\hpvplui09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\unidrv.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\unidrvui.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\i386\unires.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\HP\Setup\hpssres.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x64\HPScanTRDrv_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x64\HPWia1_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x64\HPWia2_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x32\HPScanTRDrv_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x32\HPWia1_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\drivers\scanner\x32\HPWia2_PS5520.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpfime51.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpinkcoiB111.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpinkinsB111.exe
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpinkstsB111.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpinkstsB111LM.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpvpldrv09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpvplres09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\hpvplui09.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\unidrv.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\unidrvui.dll
C:\Users\WICK Roland\AppData\Local\Temp\7zS33F3\amd64\unires.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\Leap.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\WICK Roland\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-08-18 11:28:38
Restore point made on: 2013-08-21 22:26:17
Restore point made on: 2013-08-21 22:26:26
Restore point made on: 2013-08-21 22:26:37
Restore point made on: 2013-08-21 22:26:53
Restore point made on: 2013-08-21 22:27:06
Restore point made on: 2013-08-21 22:27:19
Restore point made on: 2013-08-21 22:27:29
Restore point made on: 2013-08-21 22:27:36
Restore point made on: 2013-08-21 22:27:43
Restore point made on: 2013-08-21 22:27:53
Restore point made on: 2013-08-21 22:28:01
Restore point made on: 2013-08-21 22:28:10
Restore point made on: 2013-08-21 22:28:28
Restore point made on: 2013-08-21 22:28:46
Restore point made on: 2013-08-21 22:29:19
Restore point made on: 2013-08-21 22:29:29
Restore point made on: 2013-08-21 22:29:37
Restore point made on: 2013-08-21 22:29:43
Restore point made on: 2013-08-27 06:06:31
Restore point made on: 2013-08-28 11:10:03
Restore point made on: 2013-08-28 13:04:27
Restore point made on: 2013-08-28 13:27:37

==================== Memory info =========================== 

Percentage of memory in use: 20%
Total physical RAM: 3975.27 MB
Available physical RAM: 3168.79 MB
Total Pagefile: 3975.27 MB
Available Pagefile: 3210.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:564.34 GB) (Free:507.05 GB) NTFS
Drive d: () (Removable) (Total:14.9 GB) (Free:13.62 GB) FAT32
Drive e: (KAP-Rescue) (CDROM) (Total:0.31 GB) (Free:0 GB) UDF
Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 31CBC900)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 15 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


LastRegBack: 2013-08-22 16:31

==================== End Of Log ============================