Virus, weisser Bildschirm nach Start (Win7 64Bit)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 03
Ran by SYSTEM on MININT-TODPTCH on 04-09-2013 17:52:33
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411440 2013-06-30] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2236080 2013-07-21] ()
HKU\Smail\...\Winlogon: [Shell] explorer.exe,C:\Users\Smail\AppData\Roaming\cache.dat [66560 2013-08-28] () <==== ATTENTION 

==================== Services (Whitelisted) =================

S2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2013-08-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
S2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [831272 2013-06-20] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-06-20] ()
S2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [548136 2013-06-20] ()
S2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [1598128 2013-07-21] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-07-19] (AVG Technologies CZ, s.r.o.)
S0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-19] (AVG Technologies CZ, s.r.o.)
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-19] (AVG Technologies CZ, s.r.o.)
S0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-19] (AVG Technologies CZ, s.r.o.)
S0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-06-30] (AVG Technologies CZ, s.r.o.)
S0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-07-09] (AVG Technologies CZ, s.r.o.)
S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-20] (AVG Technologies CZ, s.r.o.)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-21] (AVG Technologies)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [138752 2013-07-04] (Huawei Technologies Co., Ltd.)
S1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-06-20] (AnchorFree Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-20] (Anchorfree Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-28 14:05 - 2013-09-04 07:29 - 00000004 _____ C:\Users\Smail\AppData\Roaming\cache.ini
2013-08-28 14:01 - 2013-08-28 14:03 - 00000000 ____D C:\Users\Smail\AppData\Roaming\Dirty
2013-08-28 14:01 - 2013-08-28 14:03 - 00000000 ____D C:\Users\Smail\AppData\Local\Dirty
2013-08-28 14:01 - 2013-08-28 14:03 - 00000000 ____D C:\{F57BBEB0-6615-D7B0-485A-B9E55FBBE827}
2013-08-28 14:01 - 2013-08-28 14:01 - 00000093 _____ C:\Users\Public\sdelevURL.tmp
2013-08-28 14:01 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Local\ZukCuCDj
2013-08-28 14:01 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Local\RnnwMXfe
2013-08-26 16:46 - 2013-07-25 21:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-26 16:46 - 2013-07-25 21:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-26 16:46 - 2013-07-25 21:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-08-26 16:46 - 2013-07-25 21:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-26 16:46 - 2013-07-25 21:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-08-26 16:46 - 2013-07-25 19:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-26 16:46 - 2013-07-25 19:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-26 16:46 - 2013-07-25 19:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-26 16:46 - 2013-07-25 19:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-26 16:46 - 2013-07-25 19:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-26 16:46 - 2013-07-25 19:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-26 16:46 - 2013-07-25 18:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-26 16:46 - 2013-07-25 18:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-08-26 16:46 - 2013-07-25 17:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-26 16:31 - 2013-08-26 16:31 - 04491824 _____ (AVG Technologies) C:\Users\Smail\Downloads\avg_avct_stb_all_2013_3392_cm10.exe
2013-08-19 09:47 - 2013-07-08 22:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-08-19 09:47 - 2013-07-08 21:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-08-19 09:47 - 2013-07-08 21:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-08-19 09:47 - 2013-07-08 21:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-19 09:47 - 2013-07-08 21:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-19 09:47 - 2013-07-08 20:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-19 09:47 - 2013-07-08 20:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-19 09:47 - 2013-07-08 18:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-19 09:47 - 2013-07-08 18:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-19 09:47 - 2013-07-08 18:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-19 09:47 - 2013-07-08 18:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 21:33 - 2013-07-18 17:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-08-15 21:33 - 2013-07-18 17:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 21:21 - 2013-07-08 21:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-15 21:21 - 2013-07-08 21:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-15 21:21 - 2013-07-08 21:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-15 21:21 - 2013-07-08 21:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-08-15 21:21 - 2013-07-08 20:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 21:21 - 2013-07-08 20:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 21:21 - 2013-07-08 20:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 21:21 - 2013-07-08 20:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 21:15 - 2013-07-25 01:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-08-15 21:15 - 2013-07-25 00:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-15 21:13 - 2013-07-08 21:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-15 21:13 - 2013-07-08 20:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 21:12 - 2013-07-05 22:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-15 21:12 - 2013-06-14 20:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2013-08-13 14:54 - 2013-08-13 14:54 - 00003100 _____ C:\Windows\System32\Tasks\{E0AE5CBE-E576-41B9-9896-7EF56653D58A}
2013-08-07 16:10 - 2013-08-07 16:10 - 00000430 _____ C:\Users\Smail\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-07 15:55 - 2013-08-07 15:55 - 00003032 _____ C:\Windows\System32\Tasks\{0CF66BC6-DACC-4AD1-96BD-9F444E8FBC49}

==================== One Month Modified Files and Folders =======

2013-09-04 17:49 - 2013-09-04 17:49 - 00000000 ____D C:\FRST
2013-09-04 07:29 - 2013-08-28 14:05 - 00000004 _____ C:\Users\Smail\AppData\Roaming\cache.ini
2013-09-04 07:28 - 2013-07-21 13:57 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-04 07:26 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-04 07:26 - 2009-07-13 20:51 - 00026255 _____ C:\Windows\setupact.log
2013-09-01 07:10 - 2013-07-09 11:14 - 00000000 ____D C:\ProgramData\MFAData
2013-09-01 07:04 - 2013-07-23 01:49 - 00001426 _____ C:\Users\Smail\Desktop\Registry kostenlos entrümpeln!.lnk
2013-09-01 07:01 - 2013-07-23 02:42 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-09-01 07:01 - 2013-07-21 13:58 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-01 07:00 - 2013-07-09 10:08 - 00000276 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-08-30 15:06 - 2013-07-23 02:24 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-08-29 11:38 - 2013-07-04 15:15 - 01249244 _____ C:\Windows\WindowsUpdate.log
2013-08-29 04:42 - 2013-07-21 13:44 - 00058232 _____ C:\Windows\PFRO.log
2013-08-28 14:03 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Roaming\Dirty
2013-08-28 14:03 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Local\Dirty
2013-08-28 14:03 - 2013-08-28 14:01 - 00000000 ____D C:\{F57BBEB0-6615-D7B0-485A-B9E55FBBE827}
2013-08-28 14:03 - 2013-07-21 14:38 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2013-08-28 14:03 - 2013-07-21 14:35 - 00000000 ____D C:\Program Files (x86)\AVG
2013-08-28 14:03 - 2013-07-21 14:27 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2013-08-28 14:03 - 2013-07-09 12:29 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-28 14:03 - 2013-07-04 15:48 - 00000000 ____D C:\Program Files (x86)\ALDITALKVerbindungsassistent
2013-08-28 14:03 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-08-28 14:03 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2013-08-28 14:03 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-08-28 14:01 - 2013-08-28 14:01 - 00000093 _____ C:\Users\Public\sdelevURL.tmp
2013-08-28 14:01 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Local\ZukCuCDj
2013-08-28 14:01 - 2013-08-28 14:01 - 00000000 ____D C:\Users\Smail\AppData\Local\RnnwMXfe
2013-08-28 14:01 - 2013-07-04 15:38 - 00000000 ____D C:\Users\Smail\AppData\Local\VirtualStore
2013-08-28 13:59 - 2013-07-22 13:45 - 00066560 ____R C:\Users\Smail\AppData\Roaming\cache.dat
2013-08-28 13:58 - 2013-07-21 14:36 - 00000000 ____D C:\ProgramData\AVG2013
2013-08-28 13:11 - 2009-07-13 20:45 - 00009696 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 13:11 - 2009-07-13 20:45 - 00009696 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 18:10 - 2009-10-24 07:51 - 00654166 _____ C:\Windows\System32\perfh007.dat
2013-08-26 18:10 - 2009-10-24 07:51 - 00130006 _____ C:\Windows\System32\perfc007.dat
2013-08-26 18:10 - 2009-07-13 21:13 - 01519874 _____ C:\Windows\System32\PerfStringBackup.INI
2013-08-26 17:06 - 2013-07-21 14:01 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-26 16:31 - 2013-08-26 16:31 - 04491824 _____ (AVG Technologies) C:\Users\Smail\Downloads\avg_avct_stb_all_2013_3392_cm10.exe
2013-08-22 13:11 - 2013-07-04 15:48 - 00000000 ____D C:\Users\Smail\AppData\Roaming\ALDITALKVerbindungsassistent
2013-08-16 16:49 - 2013-07-23 03:41 - 00000000 ____D C:\Windows\System32\MRT
2013-08-16 16:48 - 2013-07-12 18:02 - 78161360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-08-13 14:54 - 2013-08-13 14:54 - 00003100 _____ C:\Windows\System32\Tasks\{E0AE5CBE-E576-41B9-9896-7EF56653D58A}
2013-08-07 16:10 - 2013-08-07 16:10 - 00000430 _____ C:\Users\Smail\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-07 15:55 - 2013-08-07 15:55 - 00003032 _____ C:\Windows\System32\Tasks\{0CF66BC6-DACC-4AD1-96BD-9F444E8FBC49}
2013-08-07 15:52 - 2013-07-09 10:08 - 00000284 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-08-07 01:08 - 2013-07-04 15:38 - 00000000 ____D C:\users\Smail
2013-08-07 01:07 - 2009-07-13 23:44 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-07 01:07 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-08-07 01:07 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat
2013-08-06 15:58 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF
2013-08-06 15:22 - 2013-07-07 13:44 - 00000000 ____D C:\Users\Smail\AppData\Local\Microsoft Games

Files to move or delete:
====================
C:\Users\Smail\AppData\Roaming\cache.dat
C:\Users\Smail\AppData\Roaming\cache.ini
C:\Users\Smail\AppData\Local\Temp\FoxyDeal_Setup.exe
C:\Users\Smail\AppData\Local\Temp\HSS-2-88-install-plain-506-plain.exe
C:\Users\Smail\AppData\Local\Temp\HssInstaller64.exe
C:\Users\Smail\AppData\Local\Temp\oi_{1B0AAF98-2FA7-42F3-A0D2-9808C0AE57FC}.exe
C:\Users\Smail\AppData\Local\Temp\VersionUpdater.exe
C:\Users\Smail\AppData\Local\Temp\WtgZip.dll
C:\Users\Smail\AppData\Local\Temp\{05F4100F-2B36-4D40-B720-E89BFDB9D704}-28.0.1500.95_chrome_installer.exe
C:\Users\Smail\AppData\Local\Temp\{804E59C1-58E0-4C33-BC88-23C563DFF244}-28.0.1500.95_chrome_installer.exe
C:\Users\Smail\AppData\Local\Temp\{FDB35B70-B77A-4D41-BD7D-9E2899BF19C1}-28.0.1500.95_28.0.1500.72_chrome_updater.exe
C:\Users\Smail\AppData\Local\Temp\Setup\atl80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\Installer.exe
C:\Users\Smail\AppData\Local\Temp\Setup\mfc80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\mfc80u.dll
C:\Users\Smail\AppData\Local\Temp\Setup\mfcm80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\mfcm80u.dll
C:\Users\Smail\AppData\Local\Temp\Setup\msvcm80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\msvcp80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\msvcr80.dll
C:\Users\Smail\AppData\Local\Temp\Setup\OSU.exe
C:\Users\Smail\AppData\Local\Temp\Setup\OSU64.exe
C:\Users\Smail\AppData\Local\Temp\Setup\WtgDriverInstall.dll
C:\Users\Smail\AppData\Local\Temp\Setup\WtgDriverInstallX.dll
C:\Users\Smail\AppData\Local\Temp\Setup\WTGXMLUtil.dll
C:\Users\Smail\AppData\Local\Temp\Setup\Drivers\OnDemand\64\Vista\Huawei.4.20.07\WdfCoInstaller01007.dll
C:\Users\Smail\AppData\Local\Temp\Setup\Drivers\OnDemand\32\Xp\Huawei.4.20.07\WdfCoInstaller01007.dll
C:\Users\Smail\AppData\Local\Temp\Setup\Drivers\OnDemand\32\Vista\Huawei.4.20.07\WdfCoInstaller01007.dll
C:\Users\Smail\AppData\Local\Temp\Setup\AdditionalFiles\Huaweiregcleaner.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\avg-secure-search-installer.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ProgFiles\AVG SafeGuard toolbar\lip.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ProgFiles\AVG SafeGuard toolbar\PostInstall.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ProgFiles\AVG SafeGuard toolbar\vprot.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ProgFiles\AVG SafeGuard toolbar\15.3.0.11\AVG SafeGuard toolbar_toolbar.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ConfigFiles\avguidx.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\ConfigFiles\MachineIdCreator.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\AVGRewardsWorker.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\helper.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\log4cplusU.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\loggingserver.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\npsitesafety.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe
C:\Users\Smail\AppData\Local\Temp\avg_a04724\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\avg-secure-search-installer.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ProgFiles\AVG SafeGuard toolbar\lip.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ProgFiles\AVG SafeGuard toolbar\PostInstall.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ProgFiles\AVG SafeGuard toolbar\vprot.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ProgFiles\AVG SafeGuard toolbar\15.1.0.2\AVG SafeGuard toolbar_toolbar.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ConfigFiles\avguidx.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\ConfigFiles\MachineIdCreator.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\AVGRewardsWorker.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\npsitesafety.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe
C:\Users\Smail\AppData\Local\Temp\avg_a03004\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgmfapx.exe
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgmfarx.dll
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgntdumpx.exe
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgrdtesta.exe
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgrdtestx.exe
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\avgrunasx.exe
C:\Users\Smail\AppData\Local\Temp\7zSAC26.tmp\htmlayout.dll

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-08-15 23:07:27
Restore point made on: 2013-08-16 16:48:15
Restore point made on: 2013-08-19 09:57:00
Restore point made on: 2013-08-26 16:46:04
Restore point made on: 2013-08-26 17:01:57
Restore point made on: 2013-08-26 18:05:31

==================== Memory info =========================== 

Percentage of memory in use: 14%
Total physical RAM: 3946.16 MB
Available physical RAM: 3356.49 MB
Total Pagefile: 3944.31 MB
Available Pagefile: 3345.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:112 GB) (Free:60.02 GB) NTFS
Drive d: () (Fixed) (Total:165.99 GB) (Free:164.89 GB) NTFS
Drive f: () (Fixed) (Total:20 GB) (Free:19.9 GB) NTFS
Drive h: () (Removable) (Total:0.96 GB) (Free:0.95 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 02FC8BF3)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=166 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 981 MB) (Disk ID: BE6FE0CD)
Partition 1: (Not Active) - (Size=980 MB) - (Type=06)


LastRegBack: 2013-08-04 07:54

==================== End Of Log ============================