Pc öffnet keine programme

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-8TBG11B on 06-10-2013 15:34:12
Running from F:\
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Anne.baba-PC\...\Policies\system: [LogonHoursAction] 2
HKU\Anne.baba-PC\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\baba\...\Run: [Google Update] - [x]
HKU\baba\...\Run: [EPSON Stylus DX8400 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU "C:\Users\baba\AppData\Local\Temp\E_S1067.tmp" /EF "HKCU"
HKU\baba\...\Policies\system: [LogonHoursAction] 2
HKU\baba\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Nazra\...\Policies\system: [LogonHoursAction] 2
HKU\Nazra\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Taha Can\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\Taha Can\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\Taha Can\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11g_Plugin.exe -update plugin
HKU\Taha Can\...\Policies\system: [LogonHoursAction] 2
HKU\Taha Can\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\♥ Nazra ♥\...\Policies\system: [LogonHoursAction] 2
HKU\♥ Nazra ♥\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs:         [0 ] ()

==================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
S2 IGDCTRL; C:\Program Files (x86)\FRITZ!DSL\IGDCTRL.EXE [87344 2007-09-04] (AVM Berlin)

==================== Drivers (Whitelisted) ====================

S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S2 lirsgt; C:\Windows\SysWow64\DRIVERS\lirsgt.sys [18048 2011-10-03] ()
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92376 2013-10-04] (MalwareBytes)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92376 2013-10-04] (MalwareBytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [116440 2013-10-04] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [116440 2013-10-04] (Malwarebytes Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S2 lirsgt; system32\DRIVERS\lirsgt.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-06 13:08 - 2013-10-06 13:08 - 00000056 _____ C:\Windows\setupact.log
2013-10-06 13:08 - 2013-10-06 13:08 - 00000000 _____ C:\Windows\setuperr.log
2013-10-05 12:40 - 2013-10-05 12:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-05 12:40 - 2013-10-05 12:40 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-05 12:40 - 2013-10-05 12:40 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-05 12:40 - 2013-10-05 12:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-05 12:40 - 2013-08-30 08:48 - 01030952 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00378944 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00204880 _____ C:\Windows\System32\Drivers\aswVmm.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00080816 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00072016 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00065336 _____ C:\Windows\System32\Drivers\aswRvrt.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00064288 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-10-05 12:40 - 2013-08-30 08:48 - 00033400 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-10-05 12:40 - 2013-08-30 08:47 - 00287840 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-10-05 12:40 - 2013-08-30 08:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-05 12:37 - 2013-10-05 12:37 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-05 12:37 - 2013-10-05 12:37 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-05 12:37 - 2013-10-05 12:37 - 00000000 ____D C:\Program Files\CCleaner
2013-10-04 12:27 - 2013-10-04 12:37 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2013-10-04 12:26 - 2013-10-04 12:26 - 00092376 _____ (MalwareBytes) C:\Windows\System32\Drivers\mbamchameleon.sys
2013-10-04 12:10 - 2013-10-04 12:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-04 11:48 - 2013-10-04 11:48 - 00003288 _____ C:\Windows\System32\Tasks\{3DF802B8-9C61-4714-91CA-69ED93468CC0}
2013-10-04 09:47 - 2013-10-04 09:47 - 00002936 _____ C:\Windows\System32\Tasks\{39BEE3A4-EFB4-4549-BD68-F74E40FAECFF}
2013-10-04 09:46 - 2013-10-04 09:46 - 00002936 _____ C:\Windows\System32\Tasks\{AC0AF5A5-665D-4AFE-815F-69E64D484A8F}
2013-10-04 09:46 - 2013-10-04 09:46 - 00002936 _____ C:\Windows\System32\Tasks\{320F2305-9CC9-4EC8-AD68-CBC0B3198E64}
2013-10-04 09:34 - 2013-10-04 10:08 - 00000000 ____D C:\32788R22FWJFW
2013-10-04 09:25 - 2013-10-05 12:40 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-04 09:13 - 2013-10-04 09:17 - 00000000 ____D C:\AdwCleaner
2013-10-04 09:12 - 2013-10-04 09:12 - 01045226 _____ C:\Users\baba\Downloads\adwcleaner.exe
2013-10-03 20:49 - 2013-10-03 20:49 - 00000000 ____D C:\FRST
2013-10-03 15:28 - 2013-10-03 15:28 - 00000000 _____ C:\Users\baba\Desktop\Speak.txt
2013-10-02 15:50 - 2013-10-02 15:51 - 00000000 ____D C:\Users\baba\AppData\Roaming\Orbit
2013-10-02 14:43 - 2013-10-05 12:49 - 00000000 ____D C:\Users\baba\Desktop\games
2013-09-29 15:18 - 2013-09-29 15:20 - 00000000 ____D C:\Users\baba\Desktop\windows
2013-09-29 13:23 - 2013-09-29 14:56 - 2463242240 _____ C:\Users\baba\Desktop\X15-65740.iso
2013-09-29 13:16 - 2013-09-29 16:05 - 00002615 _____ C:\Windows\diagwrn.xml
2013-09-29 13:16 - 2013-09-29 16:05 - 00001908 _____ C:\Windows\diagerr.xml
2013-09-28 12:08 - 2013-10-04 09:34 - 00076894 _____ C:\Users\baba\Desktop\mov 004 2.txt
2013-09-28 11:52 - 2013-09-28 11:53 - 00000000 ____D C:\Users\baba\Desktop\MAMA LIEDER
2013-09-27 15:32 - 2013-09-27 15:32 - 00000000 ____D C:\Users\baba\Documents\Fax
2013-09-26 18:48 - 2013-09-26 19:15 - 00000000 ____D C:\Users\baba\Desktop\2013-09-26 izin 2013
2013-09-24 14:58 - 2013-09-24 14:58 - 01710865 _____ C:\Users\baba\Downloads\114002.user.js
2013-09-24 14:02 - 2013-09-24 14:03 - 00420772 _____ C:\Users\baba\Downloads\YouTubeCenter (2).crx
2013-09-24 14:02 - 2013-09-24 14:02 - 00420772 _____ C:\Users\baba\Downloads\YouTubeCenter.crx
2013-09-24 13:56 - 2013-09-24 13:56 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (2).zip
2013-09-24 13:56 - 2013-09-24 13:56 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (2) (1).zip
2013-09-24 13:56 - 2013-09-20 14:50 - 00416619 _____ C:\Users\baba\Desktop\youtube-center-2.0-1.crx
2013-09-24 13:55 - 2013-09-24 13:55 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (1).zip
2013-09-24 13:51 - 2013-09-24 13:51 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1.zip
2013-09-19 16:55 - 2007-12-07 01:01 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\Windows\System32\E_IBCBCEE.DLL
2013-09-19 16:55 - 2005-02-02 11:05 - 00008704 _____ (SEIKO EPSON CORP.) C:\Windows\System32\E_GCINST.DLL
2013-09-19 15:40 - 2013-09-24 11:09 - 00000500 _____ C:\Users\baba\Desktop\Die Sims™ 3 - Verknüpfung.lnk
2013-09-11 18:18 - 2013-08-10 06:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-11 18:18 - 2013-08-10 06:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-11 18:18 - 2013-08-10 06:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-11 18:18 - 2013-08-10 06:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-11 18:18 - 2013-08-10 06:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-11 18:18 - 2013-08-10 06:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-11 18:18 - 2013-08-10 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-09-11 18:18 - 2013-08-10 04:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 18:18 - 2013-08-10 04:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 18:18 - 2013-08-10 04:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 18:18 - 2013-08-10 04:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-11 18:18 - 2013-08-10 04:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 18:18 - 2013-08-10 03:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-09-11 18:18 - 2013-08-10 03:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 12:44 - 2013-08-08 02:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-09-11 12:44 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-09-11 12:44 - 2013-08-02 03:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-09-11 12:44 - 2013-08-02 03:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-09-11 12:44 - 2013-08-02 03:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-09-11 12:44 - 2013-08-02 03:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-09-11 12:44 - 2013-08-02 03:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-09-11 12:44 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-09-11 12:44 - 2013-08-02 03:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-09-11 12:44 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-09-11 12:44 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 12:44 - 2013-08-02 02:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 12:44 - 2013-08-02 02:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 12:44 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 12:44 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 12:44 - 2013-08-02 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-09-11 12:44 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-09-11 12:44 - 2013-08-02 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 12:44 - 2013-08-02 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 12:44 - 2013-08-02 01:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 12:44 - 2013-08-02 01:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 12:44 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 12:44 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 12:43 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-09-11 12:43 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-09-11 12:43 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 12:43 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 16:11 - 2013-09-10 16:15 - 00000000 ____D C:\Users\baba\AppData\Roaming\Craften Terminal
2013-09-10 16:11 - 2013-09-10 16:11 - 00000000 ____D C:\Users\baba\AppData\Local\Craften.de
2013-09-08 18:20 - 2013-09-08 19:12 - 00000000 ____D C:\ProgramData\7X7Xn373
2013-09-08 15:45 - 2013-09-08 15:46 - 00187227 _____ C:\Users\baba\Downloads\mcpatcher-1.1.12_02.exe
2013-09-08 15:21 - 2013-09-08 15:21 - 00000000 _____ C:\Users\baba\Downloads\mcpatcher_1.5.2.exe
2013-09-06 19:02 - 2013-10-04 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-06 13:32 - 2013-09-06 13:32 - 00000000 ____D C:\Users\baba\AppData\Roaming\Malwarebytes
2013-09-06 13:31 - 2013-09-06 13:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-06 13:30 - 2013-09-06 13:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\baba\Downloads\mbam-setup-1.75.0.1300.exe

==================== One Month Modified Files and Folders =======

2013-10-06 14:29 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-06 14:29 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-06 14:26 - 2012-12-25 14:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-06 13:11 - 2011-08-05 12:20 - 01055133 _____ C:\Windows\WindowsUpdate.log
2013-10-06 13:08 - 2013-10-06 13:08 - 00000056 _____ C:\Windows\setupact.log
2013-10-06 13:08 - 2013-10-06 13:08 - 00000000 _____ C:\Windows\setuperr.log
2013-10-06 13:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-05 18:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-05 12:49 - 2013-10-02 14:43 - 00000000 ____D C:\Users\baba\Desktop\games
2013-10-05 12:42 - 2012-11-16 20:09 - 00000000 ____D C:\Users\baba\AppData\Roaming\Azureus
2013-10-05 12:42 - 2011-08-06 12:50 - 00000000 ____D C:\Windows\Minidump
2013-10-05 12:42 - 2011-08-05 13:16 - 00000000 ____D C:\Windows\Panther
2013-10-05 12:40 - 2013-10-05 12:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-05 12:40 - 2013-10-05 12:40 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-05 12:40 - 2013-10-05 12:40 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-05 12:40 - 2013-10-05 12:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-05 12:40 - 2013-10-04 09:25 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-05 12:37 - 2013-10-05 12:37 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-05 12:37 - 2013-10-05 12:37 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-05 12:37 - 2013-10-05 12:37 - 00000000 ____D C:\Program Files\CCleaner
2013-10-05 12:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-10-04 12:38 - 2013-10-04 12:10 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-04 12:37 - 2013-10-04 12:27 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2013-10-04 12:36 - 2012-03-27 19:49 - 00000374 _____ C:\Windows\System32\Drivers\etc\hosts.ics
2013-10-04 12:34 - 2011-08-05 12:58 - 00000000 ____D C:\Program Files\Google
2013-10-04 12:34 - 2011-08-05 12:57 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-04 12:33 - 2011-09-01 20:19 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-10-04 12:32 - 2012-07-13 18:28 - 00000000 ____D C:\ProgramData\AMD
2013-10-04 12:29 - 2012-03-11 12:02 - 00000000 ____D C:\Users\baba\AppData\Local\TomTom
2013-10-04 12:29 - 2011-08-05 12:58 - 00000000 ____D C:\Users\baba\AppData\Local\Google
2013-10-04 12:26 - 2013-10-04 12:26 - 00092376 _____ (MalwareBytes) C:\Windows\System32\Drivers\mbamchameleon.sys
2013-10-04 12:25 - 2012-12-21 19:48 - 00000000 ____D C:\Windows\USB_Vibration
2013-10-04 12:25 - 2012-11-03 14:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-04 12:17 - 2011-08-14 10:22 - 00000000 ____D C:\ProgramData\Adobe
2013-10-04 12:15 - 2011-09-16 22:10 - 00000000 ____D C:\Program Files\DivX
2013-10-04 12:15 - 2011-09-16 22:08 - 00000000 ____D C:\ProgramData\DivX
2013-10-04 12:11 - 2012-12-22 23:18 - 00000000 ____D C:\Program Files (x86)\Bus-Simulator 2009
2013-10-04 12:11 - 2011-08-05 12:57 - 00000000 ____D C:\ProgramData\Google
2013-10-04 12:09 - 2011-08-06 13:04 - 00058408 _____ C:\Users\baba\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-04 11:50 - 2009-07-14 05:45 - 00277752 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-04 11:48 - 2013-10-04 11:48 - 00003288 _____ C:\Windows\System32\Tasks\{3DF802B8-9C61-4714-91CA-69ED93468CC0}
2013-10-04 11:44 - 2013-09-06 19:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-04 11:43 - 2013-04-02 11:42 - 00000000 ____D C:\WinSetupFromUSB
2013-10-04 11:43 - 2012-08-31 14:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2013-10-04 11:05 - 2012-12-21 20:53 - 00000000 ____D C:\BMW M3 Challenge
2013-10-04 11:02 - 2012-05-28 10:41 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2012
2013-10-04 11:02 - 2011-10-18 15:44 - 00000000 ____D C:\Users\baba\AppData\Local\Unity
2013-10-04 10:08 - 2013-10-04 09:34 - 00000000 ____D C:\32788R22FWJFW
2013-10-04 09:47 - 2013-10-04 09:47 - 00002936 _____ C:\Windows\System32\Tasks\{39BEE3A4-EFB4-4549-BD68-F74E40FAECFF}
2013-10-04 09:46 - 2013-10-04 09:46 - 00002936 _____ C:\Windows\System32\Tasks\{AC0AF5A5-665D-4AFE-815F-69E64D484A8F}
2013-10-04 09:46 - 2013-10-04 09:46 - 00002936 _____ C:\Windows\System32\Tasks\{320F2305-9CC9-4EC8-AD68-CBC0B3198E64}
2013-10-04 09:34 - 2013-09-28 12:08 - 00076894 _____ C:\Users\baba\Desktop\mov 004 2.txt
2013-10-04 09:17 - 2013-10-04 09:13 - 00000000 ____D C:\AdwCleaner
2013-10-04 09:16 - 2012-01-09 08:50 - 00000000 ____D C:\ProgramData\Uniblue
2013-10-04 09:16 - 2012-01-09 08:49 - 00000000 ____D C:\Users\baba\AppData\Roaming\Uniblue
2013-10-04 09:16 - 2011-08-07 05:17 - 00001150 _____ C:\Users\baba\Desktop\Internet Explorer.lnk
2013-10-04 09:12 - 2013-10-04 09:12 - 01045226 _____ C:\Users\baba\Downloads\adwcleaner.exe
2013-10-03 20:49 - 2013-10-03 20:49 - 00000000 ____D C:\FRST
2013-10-03 15:28 - 2013-10-03 15:28 - 00000000 _____ C:\Users\baba\Desktop\Speak.txt
2013-10-02 18:10 - 2009-07-14 05:54 - 00000749 ___RH C:\Windows\WindowsShell.Manifest
2013-10-02 18:10 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-10-02 16:07 - 2012-05-28 10:47 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-10-02 15:51 - 2013-10-02 15:50 - 00000000 ____D C:\Users\baba\AppData\Roaming\Orbit
2013-09-29 16:05 - 2013-09-29 13:16 - 00002615 _____ C:\Windows\diagwrn.xml
2013-09-29 16:05 - 2013-09-29 13:16 - 00001908 _____ C:\Windows\diagerr.xml
2013-09-29 15:20 - 2013-09-29 15:18 - 00000000 ____D C:\Users\baba\Desktop\windows
2013-09-29 14:56 - 2013-09-29 13:23 - 2463242240 _____ C:\Users\baba\Desktop\X15-65740.iso
2013-09-28 19:55 - 2012-02-20 11:11 - 00000000 ____D C:\Users\baba\AppData\Local\Windows Live
2013-09-28 19:29 - 2009-07-14 18:58 - 12792366 _____ C:\Windows\System32\perfh007.dat
2013-09-28 19:29 - 2009-07-14 18:58 - 03939338 _____ C:\Windows\System32\perfc007.dat
2013-09-28 19:29 - 2009-07-14 06:13 - 00006276 _____ C:\Windows\System32\PerfStringBackup.INI
2013-09-28 11:53 - 2013-09-28 11:52 - 00000000 ____D C:\Users\baba\Desktop\MAMA LIEDER
2013-09-28 11:41 - 2012-07-15 16:47 - 00000000 ____D C:\ProgramData\Avira
2013-09-27 15:32 - 2013-09-27 15:32 - 00000000 ____D C:\Users\baba\Documents\Fax
2013-09-26 19:25 - 2012-07-04 18:51 - 00000000 ____D C:\Users\baba\Desktop\Bilder
2013-09-26 19:15 - 2013-09-26 18:48 - 00000000 ____D C:\Users\baba\Desktop\2013-09-26 izin 2013
2013-09-24 14:58 - 2013-09-24 14:58 - 01710865 _____ C:\Users\baba\Downloads\114002.user.js
2013-09-24 14:03 - 2013-09-24 14:02 - 00420772 _____ C:\Users\baba\Downloads\YouTubeCenter (2).crx
2013-09-24 14:02 - 2013-09-24 14:02 - 00420772 _____ C:\Users\baba\Downloads\YouTubeCenter.crx
2013-09-24 13:56 - 2013-09-24 13:56 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (2).zip
2013-09-24 13:56 - 2013-09-24 13:56 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (2) (1).zip
2013-09-24 13:55 - 2013-09-24 13:55 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1 (1).zip
2013-09-24 13:51 - 2013-09-24 13:51 - 00413561 _____ C:\Users\baba\Downloads\youtube-center-2.0-1.zip
2013-09-24 11:09 - 2013-09-19 15:40 - 00000500 _____ C:\Users\baba\Desktop\Die Sims™ 3 - Verknüpfung.lnk
2013-09-20 14:50 - 2013-09-24 13:56 - 00416619 _____ C:\Users\baba\Desktop\youtube-center-2.0-1.crx
2013-09-19 17:36 - 2012-12-25 14:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 17:36 - 2012-10-29 15:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-19 17:36 - 2012-10-29 15:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 18:18 - 2013-08-01 15:05 - 00000000 ____D C:\Windows\System32\MRT
2013-09-11 18:13 - 2011-08-07 19:45 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-10 16:15 - 2013-09-10 16:11 - 00000000 ____D C:\Users\baba\AppData\Roaming\Craften Terminal
2013-09-10 16:11 - 2013-09-10 16:11 - 00000000 ____D C:\Users\baba\AppData\Local\Craften.de
2013-09-10 16:11 - 2012-06-14 13:30 - 00000000 ____D C:\Users\baba\Desktop\Spiele
2013-09-10 16:08 - 2012-06-29 19:31 - 00000000 ____D C:\Users\baba\AppData\Roaming\.minecraft
2013-09-08 19:12 - 2013-09-08 18:20 - 00000000 ____D C:\ProgramData\7X7Xn373
2013-09-08 18:57 - 2012-11-16 20:09 - 00000000 ____D C:\Program Files (x86)\Azureus
2013-09-08 15:46 - 2013-09-08 15:45 - 00187227 _____ C:\Users\baba\Downloads\mcpatcher-1.1.12_02.exe
2013-09-08 15:21 - 2013-09-08 15:21 - 00000000 _____ C:\Users\baba\Downloads\mcpatcher_1.5.2.exe
2013-09-06 13:32 - 2013-09-06 13:32 - 00000000 ____D C:\Users\baba\AppData\Roaming\Malwarebytes
2013-09-06 13:31 - 2013-09-06 13:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-06 13:31 - 2013-09-06 13:30 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\baba\Downloads\mbam-setup-1.75.0.1300.exe

Files to move or delete:
====================
ZeroAccess:
C:\Users\baba\AppData\Local\Google\Desktop\Install


Some content of TEMP:
====================
C:\Users\Anne.baba-PC\AppData\Local\Temp\AskSLib.dll
C:\Users\Taha Can\AppData\Local\Temp\7z.dll
C:\Users\Taha Can\AppData\Local\Temp\EpsonInkjetDriverDownloader.EXE
C:\Users\Taha Can\AppData\Local\Temp\i4jdel0.exe
C:\Users\Taha Can\AppData\Local\Temp\i4jdel1.exe
C:\Users\Taha Can\AppData\Local\Temp\Shockwave_Installer_FF-1.exe
C:\Users\Taha Can\AppData\Local\Temp\Shockwave_Installer_FF-2.exe
C:\Users\Taha Can\AppData\Local\Temp\Shockwave_Installer_FF-3.exe
C:\Users\Taha Can\AppData\Local\Temp\Shockwave_Installer_FF.exe
C:\Users\? Nazra ?\AppData\Local\Temp\AskSLib.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

1
Restore point made on: 2013-10-06 12:36:36

==================== Memory info =========================== 

Percentage of memory in use: 23%
Total physical RAM: 2047.05 MB
Available physical RAM: 1565.29 MB
Total Pagefile: 2047.05 MB
Available Pagefile: 1553.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:18.35 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:365.76 GB) (Free:48.9 GB) NTFS
Drive f: () (Removable) (Total:14.45 GB) (Free:14.26 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: D3C6D3C6)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=366 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 14 GB) (Disk ID: 66205247)
No partition Table on disk 1.


LastRegBack: 2013-10-05 18:00

==================== End Of Log ============================