Umleitung auf "QV06-Suchmaschine" im Firefox

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-09-2013 03
Ran by Nathalie at 2013-09-03 21:36:46
Running from D:\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Agere Systems HDA Modem
AVG 2013 (Version: 13.0.3222)
AVG 2013 (Version: 13.0.3392)
AVG 2013 (Version: 2013.0.3392)
Canon MP Navigator EX 3.0
Canon MP550 series Benutzerregistrierung
Canon MP550 series MP Drivers
Canon Utilities Easy-PhotoPrint EX
CDBurnerXP (Version: 4.5.0.3661)
dm-Fotowelt (Version: 5.0.1)
Dropbox (HKCU Version: 2.0.22)
Google Chrome (Version: 28.0.1500.95)
Java 7 Update 15 (Version: 7.0.150)
Java Auto Updater (Version: 2.1.9.0)
Logitech High Quality Video (Version: 11.70.1200)
Logitech QuickCam-Treiberpaket
Malwarebytes Anti-Malware Version 1.70.0.1100 (Version: 1.70.0.1100)
Mein CEWE FOTOBUCH (Version: 5.0.1)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
PDFCreator (Version: 1.6.1)
PDF-Viewer (Version: 2.5.207.0)
PeaZip 4.8
Skype™ 6.7 (Version: 6.7.102)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
VLC media player 2.0.5 (Version: 2.0.5)
WebConnect 3.0.0 (Version: 3.0.0)
 

==================== Restore Points  =========================

26-08-2013 05:13:53 Windows Update
27-08-2013 14:19:27 Gerätetreiber-Paketinstallation: Canon Drucker
27-08-2013 14:20:25 Gerätetreiber-Paketinstallation: Canon Bildverarbeitungsgeräte
30-08-2013 15:29:34 Geplanter Prüfpunkt
01-09-2013 17:21:50 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2006-11-02] (Microsoft Corporation)
Task: {73E3EB1D-D62D-462A-A25E-D66A15A7AB8C} - System32\Tasks\PC Performer => C:\Program Files\PC Performer\PCPerformer.exe No File
Task: {9EB44560-63F6-4CA3-8294-048D3F7D340B} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2006-11-02] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2006-11-02] (Microsoft Corporation)
Task: {B77B2D66-F0C5-4ABE-80F4-833C8F15F1FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.)
Task: {CA3527EF-64EE-4535-8142-710012F02700} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2006-11-02] ()
Task: {F72A6355-1E35-45E5-8272-93D78C47EF51} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-31] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2006-11-02 10:44 - 2006-11-02 11:46 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\SLWGA.dll
2006-11-02 10:42 - 2006-11-02 11:46 - 02014720 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll
2006-11-02 10:45 - 2006-11-02 11:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\pautoenr.dll
2006-11-02 10:45 - 2006-11-02 11:46 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\certenroll.dll
2006-11-02 14:34 - 2006-11-02 14:34 - 01298432 _____ (Microsoft Corporation) C:\Windows\System32\TMM.dll
2007-08-07 02:31 - 2007-08-07 02:31 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2007-08-07 02:31 - 2007-08-07 02:31 - 00262144 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdlxx.dll
2006-11-02 11:12 - 2006-11-02 11:46 - 00215552 _____ (Microsoft Corporation) C:\Windows\System32\msshsq.dll
2006-11-02 14:34 - 2006-11-02 14:34 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll
2006-11-02 14:34 - 2006-11-02 14:34 - 02159104 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll
2006-11-02 14:34 - 2006-11-02 14:34 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll
2006-11-02 10:44 - 2006-11-02 11:46 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\SLWGA.dll
2013-03-28 02:48 - 2013-03-28 02:48 - 00229424 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgse.dll
2011-02-20 00:03 - 2011-02-20 00:03 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP100.dll
2011-02-19 01:40 - 2011-02-19 01:40 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR100.dll
2013-06-27 01:54 - 2013-06-27 01:54 - 00848432 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgsysx.dll
2013-02-19 04:01 - 2013-02-19 04:01 - 00890928 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgntopensslx.dll
2011-02-20 00:03 - 2011-02-20 00:03 - 04422992 _____ (Microsoft Corporation) C:\Windows\system32\mfc100u.dll
2011-02-20 00:03 - 2011-02-20 00:03 - 00064336 _____ (Microsoft Corporation) C:\Windows\system32\MFC100DEU.DLL
2013-02-19 04:01 - 2013-02-19 04:01 - 00309808 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avglogx.dll
2013-07-23 01:31 - 2013-07-23 01:31 - 02853936 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgkrnlapix.dll
2013-03-21 03:09 - 2013-03-21 03:09 - 01028144 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcfgx.dll
2013-07-26 01:33 - 2013-07-26 01:33 - 00455216 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcommx.dll
2013-02-19 04:01 - 2013-02-19 04:01 - 00273968 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidpmx.dll
2013-02-19 04:01 - 2013-02-19 04:01 - 00174640 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avglngx.dll
2013-03-29 02:54 - 2013-03-29 02:54 - 01799216 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avguires.dll
2013-02-19 04:00 - 2013-02-19 04:00 - 00279088 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgclitx.dll
2013-02-19 04:01 - 2013-02-19 04:01 - 00025648 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgapps.dll
2013-03-14 03:16 - 2013-03-14 03:16 - 00409648 _____ (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgdecider.dll
2006-11-02 10:43 - 2006-11-02 11:43 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\security.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Nathalie\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Nathalie\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Nathalie\AppData\Roaming\Dropbox\bin\icudt.dll
2013-08-25 22:17 - 2013-08-25 22:17 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2006-11-02 10:35 - 2006-11-02 11:46 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2006-11-02 11:11 - 2006-11-02 11:46 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2013-07-25 08:52 - 2013-07-25 08:52 - 00088944 ____R (Skype Technologies) C:\Program Files\Skype\Updater\Updater.dll
2007-08-07 02:31 - 2007-08-07 02:31 - 02861056 _____ (ATI Technologies Inc. ) C:\Windows\system32\atiumdag.dll
2007-08-07 02:31 - 2007-08-07 02:31 - 03773952 _____ (ATI Technologies Inc. ) C:\Windows\system32\atiumdva.dll
2006-11-02 10:49 - 2006-11-02 11:46 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\ImgUtil.dll
2012-12-23 14:11 - 2012-12-23 14:11 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2012-12-23 14:12 - 2012-12-23 14:12 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/03/2013 09:34:22 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (09/03/2013 08:52:10 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (09/01/2013 06:52:42 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (09/01/2013 06:52:37 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (08/25/2013 02:48:29 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (08/25/2013 02:48:22 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/31/2013 08:24:30 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/31/2013 08:22:45 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/30/2013 06:58:59 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/30/2013 06:58:55 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.


System errors:
=============
Error: (09/03/2013 09:14:34 PM) (Source: Service Control Manager) (User: )
Description: Update WebConnect%%3

Error: (09/03/2013 09:14:34 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (09/03/2013 09:13:10 PM) (Source: atikmdag) (User: )
Description: Unknown EDID version

Error: (09/03/2013 07:00:11 PM) (Source: atikmdag) (User: )
Description: Unknown EDID version

Error: (09/02/2013 06:51:31 PM) (Source: Service Control Manager) (User: )
Description: ScRegSetValueExWFailureActions%%5

Error: (09/02/2013 06:51:27 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/02/2013 05:45:03 PM) (Source: Service Control Manager) (User: )
Description: ScRegSetValueExWFailureActions%%5

Error: (09/02/2013 05:45:03 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (09/02/2013 05:43:26 PM) (Source: atikmdag) (User: )
Description: Unknown EDID version

Error: (09/02/2013 05:43:03 PM) (Source: ACPI) (User: )
Description: IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz 7, Funktion 0. 
Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.


Microsoft Office Sessions:
=========================
Error: (01/03/2013 07:41:07 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 26666 seconds with 14640 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-09-03 21:36:27.171
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-03 21:36:27.120
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-03 21:36:27.069
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-03 21:36:27.006
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:50.511
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETD38F.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:50.417
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETD38F.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:50.292
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETD38F.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:50.230
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETD38F.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:49.122
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETCE8D.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-31 20:24:49.091
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SETCE8D.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 56%
Total physical RAM: 2045.56 MB
Available physical RAM: 883.13 MB
Total Pagefile: 4324.36 MB
Available Pagefile: 3056.68 MB
Total Virtual: 2047.88 MB
Available Virtual: 1936.33 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:48.83 GB) (Free:19.38 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:174.06 GB) (Free:153.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: D621EA1A)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=174 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-09-2013 03
Ran by Nathalie (administrator) on NATHALIE-PC on 03-09-2013 21:34:58
Running from D:\Desktop
Microsoft® Windows Vista™ Home Premium  (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Nathalie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1006264 2012-12-23] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2013\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2006-11-02] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2006-11-02] (Microsoft Corporation)
Startup: C:\Users\Nathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nathalie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\b91it7vu.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\qvo6.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flashblock - C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\b91it7vu.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
FF Extension: No Name - C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\b91it7vu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: 		"urls_to_restore_on_startup": [
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\pdf.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.89\npGoogleUpdate3.dll No File
CHR Extension: (Google Drive) - C:\Users\Nathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Google Search) - C:\Users\Nathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Nathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Nathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM\...\Chrome\Extension: [phhgoabefhaeaobjdlegmfcagljecfcn] - C:\ProgramData\SaveByclick\phhgoabefhaeaobjdlegmfcagljecfcn.crx

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
S2 Update WebConnect; "C:\Program Files\WebConnect\updateWebConnect.exe" [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-03-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-07-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2013-03-21] (AVG Technologies CZ, s.r.o.)
R0 CLFS; C:\Windows\System32\CLFS.sys [224824 2012-12-23] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-03 21:34 - 2013-09-03 21:34 - 01084575 _____ (Farbar) D:\Desktop\FRST.exe
2013-09-03 21:34 - 2013-09-03 21:34 - 00001880 _____ C:\Users\Public\Desktop\Skype.lnk
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ___RD C:\Program Files\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\ProgramData\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\FRST
2013-09-03 21:31 - 2013-09-03 21:31 - 00000478 _____ D:\Desktop\defogger_disable.log
2013-09-03 21:31 - 2013-09-03 21:31 - 00000000 _____ C:\Users\Nathalie\defogger_reenable
2013-09-03 21:30 - 2013-09-03 21:30 - 00050477 _____ D:\Desktop\Defogger.exe
2013-09-03 21:10 - 2013-09-03 21:16 - 00000000 ____D C:\AdwCleaner
2013-09-03 20:58 - 2013-09-03 21:00 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Nathalie\Downloads\SkypeSetupFull_6.7.102.exe
2013-09-03 20:52 - 2013-09-03 20:52 - 00000000 __RSH C:\MSDOS.SYS
2013-09-03 20:52 - 2013-09-03 20:52 - 00000000 __RSH C:\IO.SYS
2013-08-27 16:20 - 2009-04-03 16:00 - 01310720 _____ (CANON INC.) C:\Windows\system32\CNC550C.dll
2013-08-27 16:20 - 2009-04-03 15:59 - 00110592 _____ (CANON INC.) C:\Windows\system32\CNC550I.dll
2013-08-27 16:20 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC550U.dll
2013-08-27 16:19 - 2010-04-24 05:00 - 00272384 _____ (CANON INC.) C:\Windows\system32\CNMLM9Z.DLL
2013-08-27 16:15 - 2013-08-27 16:15 - 21286032 _____ D:\Desktop\mp68-win-mp550-1_05-ea24.exe
2013-08-25 22:17 - 2013-08-26 07:28 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-09-03 21:36 - 2012-12-23 15:10 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-03 21:34 - 2013-09-03 21:34 - 01084575 _____ (Farbar) D:\Desktop\FRST.exe
2013-09-03 21:34 - 2013-09-03 21:34 - 00001880 _____ C:\Users\Public\Desktop\Skype.lnk
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ___RD C:\Program Files\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\ProgramData\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-03 21:34 - 2013-09-03 21:34 - 00000000 ____D C:\FRST
2013-09-03 21:31 - 2013-09-03 21:31 - 00000478 _____ D:\Desktop\defogger_disable.log
2013-09-03 21:31 - 2013-09-03 21:31 - 00000000 _____ C:\Users\Nathalie\defogger_reenable
2013-09-03 21:31 - 2012-12-23 11:14 - 00000000 ____D C:\Users\Nathalie
2013-09-03 21:30 - 2013-09-03 21:30 - 00050477 _____ D:\Desktop\Defogger.exe
2013-09-03 21:22 - 2013-02-22 12:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 21:16 - 2013-09-03 21:10 - 00000000 ____D C:\AdwCleaner
2013-09-03 21:16 - 2006-11-02 14:52 - 01800571 _____ C:\Windows\WindowsUpdate.log
2013-09-03 21:14 - 2013-01-12 20:05 - 00000000 ___RD C:\Users\Nathalie\Dropbox
2013-09-03 21:14 - 2013-01-12 19:56 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\Dropbox
2013-09-03 21:13 - 2012-12-23 15:10 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-03 21:13 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-03 21:13 - 2006-11-02 14:47 - 00003552 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-03 21:13 - 2006-11-02 14:47 - 00003552 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-03 21:12 - 2006-11-02 15:01 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-03 21:11 - 2012-12-23 11:14 - 00000987 _____ C:\Users\Nathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-03 21:00 - 2013-09-03 20:58 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Nathalie\Downloads\SkypeSetupFull_6.7.102.exe
2013-09-03 20:52 - 2013-09-03 20:52 - 00000000 __RSH C:\MSDOS.SYS
2013-09-03 20:52 - 2013-09-03 20:52 - 00000000 __RSH C:\IO.SYS
2013-09-03 19:05 - 2013-01-15 17:57 - 00000000 ____D C:\ProgramData\MFAData
2013-08-27 16:25 - 2012-12-23 16:03 - 00356040 _____ C:\Windows\PFRO.log
2013-08-27 16:22 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\twain_32
2013-08-27 16:18 - 2013-01-16 18:33 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\Canon
2013-08-27 16:15 - 2013-08-27 16:15 - 21286032 _____ D:\Desktop\mp68-win-mp550-1_05-ea24.exe
2013-08-27 15:23 - 2012-12-27 12:29 - 00000000 ____D D:\Desktop\Verschiedenes
2013-08-27 13:54 - 2006-11-02 12:33 - 01470336 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 13:20 - 2012-12-23 13:56 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-26 07:28 - 2013-08-25 22:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-26 07:15 - 2013-07-12 09:17 - 00000000 ____D C:\Windows\system32\MRT
2013-08-26 07:14 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

Files to move or delete:
====================
C:\Users\Nathalie\AppData\Local\Temp\AskSLib.dll
C:\Users\Nathalie\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Nathalie\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Nathalie\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Nathalie\AppData\Local\Temp\ose00000.exe
C:\Users\Nathalie\AppData\Local\Temp\uninst1.exe
C:\Users\Nathalie\AppData\Local\Temp\vpnclient_setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\VSTOR30\vstor30.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\VSTOR30\vstor30sp1-KB949258-x86.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\Office2007PIARedist\ComponentCheck.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\DotNetFX35SP1\dotNetFx35setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\DotNetFX35\dotNetFx35setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD37D4.tmp\DotNetFX\dotnetchk.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\VSTOR30\vstor30.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\VSTOR30\vstor30sp1-KB949258-x86.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\Office2007PIARedist\ComponentCheck.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\DotNetFX35SP1\dotNetFx35setup.exe
C:\Users\Nathalie\AppData\Local\Temp\VSD17D3.tmp\DotNetFX\dotnetchk.exe
C:\Users\Nathalie\AppData\Local\Temp\O&O UnErase\setup.exe
C:\Users\Nathalie\AppData\Local\Temp\nso2D77.tmp\nsExec.dll
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\mcbrwsr2.dll
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\McInstallerRes.dll
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\McInstallerRes_LD.dll
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\McInstallerStartup.dll
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\McUICnt.exe
C:\Users\Nathalie\AppData\Local\Temp\MSS\3.0.313.1\SecurityScanner.dll
C:\Users\Nathalie\AppData\Local\Temp\is1275519350\cor_ar_201381417179_qvo6.exe
C:\Users\Nathalie\AppData\Local\Temp\is1275519350\DeltaTB.exe
C:\Users\Nathalie\AppData\Local\Temp\is1275519350\WebConnect.exe
C:\Users\Nathalie\AppData\Local\Temp\ICD1.tmp\FP_AX_CAB_INSTALLER64.exe
C:\Users\Nathalie\AppData\Local\Temp\gun9138\GU_test.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\reslib.dll
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Setup.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\sqlite3.dll
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\BrowserManagerSetup.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\GUninstaller.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\IECookieLow.dll
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\IEHelper.dll
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\MyBabylonTB.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\reslib.dll
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\Setup.exe
C:\Users\Nathalie\AppData\Local\Temp\263FFA6A-BAB0-7891-912B-AE775DD07CB2\Latest\sqlite3.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-03 21:19

==================== End Of Log ============================
         

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:31 on 03/09/2013 (Nathalie)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-