Win7 fährt im abgesicherten Modus sofort herunter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013
Ran by SYSTEM on MININT-Q9K49D6 on 23-10-2013 14:44:10
Running from H:\
Windows 7 Home Premium (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [WirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [499768 2009-09-01] (Hewlett-Packard)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2010-01-29] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1684776 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-09-08] (Apple Inc.)
HKLM\...\Run: [QLBController] - C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-01-28] (Hewlett-Packard Company)
HKLM\...\Run: [PDFHook] - C:\Program Files\Nuance\PDF Professional 6\pdfpro6hook.exe [1277952 2009-11-13] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF6 Registry Controller] - C:\Program Files\Nuance\PDF Professional 6\RegistryController.exe [110880 2009-11-03] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF Complete] - C:\Program Files\PDF Complete\pdfsty.exe [563736 2010-01-12] (PDF Complete Inc)
HKLM\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM\...\Run: [NortonOnlineBackupReminder] - C:\Program Files\Symantec\Norton Online Backup\Activation\NOBuActivation.exe [3331944 2009-12-03] (Symantec Corporation)
HKLM\...\Run: [McAfee Managed Services Tray] - C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.Exe [476480 2010-02-17] (McAfee, Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421160 2010-09-24] (Apple Inc.)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2010-01-08] (Intel Corporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [A1Webassistent] - C:\Program Files\A1\A1 Webassistent\A1Webassistent.exe [18977656 2012-02-08] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM\...\runonceex: [ContentMerger] - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-11-23] (Sonic Solutions)
HKU\Default\...\Run: [HPAdvisorDock] - C:\Program Files\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [ 2010-02-10] ()
HKU\Default User\...\Run: [HPAdvisorDock] - C:\Program Files\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [ 2010-02-10] ()
HKU\Karl\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2010-01-22] (Hewlett-Packard Company)
HKU\Karl\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [ 2009-05-05] (Acresso Corporation)
HKU\Karl\...\Run: [HPAdvisorDock] - C:\Program Files\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [ 2010-02-10] ()
HKU\Karl\...\Winlogon: [Shell] explorer.exe,C:\Users\Karl\AppData\Roaming\Other.res [ 2013-08-29] () <==== ATTENTION 
Startup: C:\Users\Karl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)

========================== Services (Whitelisted) =================

S2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
S2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [120832 2009-10-15] (Hewlett-Packard)
S2 hpHotkeyMonitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [265272 2010-01-28] (Hewlett-Packard Company)
S2 McAfee SiteAdvisor Enterprise Service; C:\Program Files\McAfee\SiteAdvisor Enterprise\McSACore.exe [222528 2009-08-07] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [170144 2010-02-04] (McAfee, Inc.)
S2 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [141792 2010-02-08] (McAfee, Inc.)
S2 MpfService; C:\Program Files\McAfee\MPF\MPFSrv.exe [893112 2009-05-08] (McAfee, Inc.)
S2 myAgtSvc; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [282824 2010-02-17] (McAfee, Inc.)
S2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2010-01-12] (PDF Complete Inc)
S2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [134944 2009-11-03] (Nuance Communications, Inc.)
S2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\STacSV.exe [229458 2010-01-29] (IDT, Inc.)

==================== Drivers (Whitelisted) ====================

S0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S2 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.)
S3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [95728 2010-02-08] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [152736 2010-02-08] (McAfee, Inc.)
S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [51720 2010-02-08] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [385184 2010-02-08] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [83912 2010-02-08] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [160912 2010-02-08] (McAfee, Inc.)
S1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [130424 2009-04-09] (McAfee, Inc.)
S3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [73344 2010-01-30] (Realtek Semiconductor Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-23 14:43 - 2013-10-23 14:43 - 00000000 ____D C:\FRST
2013-10-21 14:21 - 2013-10-21 14:26 - 00052346 _____ C:\Windows\iis7.log
2013-10-21 14:11 - 2013-10-21 15:09 - 00000000 ____D C:\Windows\pss
2013-10-11 11:43 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-11 11:43 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-11 11:43 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-11 11:43 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-11 11:43 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-11 11:43 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-11 11:43 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-10-11 09:31 - 2013-10-11 10:30 - 00029184 ____H C:\Users\Karl\Documents\~WRL2702.tmp
2013-10-11 09:31 - 2013-10-11 10:09 - 00027648 ____H C:\Users\Karl\Documents\~WRL3493.tmp
2013-10-11 09:31 - 2013-10-11 10:07 - 00027136 ____H C:\Users\Karl\Documents\~WRL3785.tmp
2013-10-11 09:31 - 2013-10-11 10:05 - 00027136 ____H C:\Users\Karl\Documents\~WRL0722.tmp
2013-10-11 09:31 - 2013-10-11 10:01 - 00026624 ____H C:\Users\Karl\Documents\~WRL1822.tmp
2013-10-11 09:31 - 2013-10-11 09:42 - 00025088 ____H C:\Users\Karl\Documents\~WRL2852.tmp
2013-10-11 09:31 - 2013-10-11 09:31 - 00024064 ____H C:\Users\Karl\Documents\~WRL1466.tmp
2013-10-11 09:17 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-10-11 09:17 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-10-11 09:17 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll
2013-10-11 09:17 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-10-11 09:17 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-10-11 09:17 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-10-11 09:17 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2013-10-11 09:17 - 2013-08-29 02:50 - 00065536 _____ C:\Users\Karl\AppData\Roaming\Other.res
2013-10-11 09:17 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2013-10-11 09:17 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-11 09:17 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll
2013-10-11 09:17 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-10-11 09:17 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 09:17 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-11 09:17 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-11 09:17 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2013-10-11 09:17 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2013-10-11 09:17 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-11 09:17 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2013-10-11 09:17 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbscan.sys
2013-10-11 09:17 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-11 09:17 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-11 09:17 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-11 09:17 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-10-11 09:17 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-10-11 09:17 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-10-11 09:17 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-11 09:17 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-09-29 17:47 - 2013-09-29 17:47 - 00572421 _____ C:\Users\Karl\Documents\mathe.zip

==================== One Month Modified Files and Folders =======

2013-10-23 14:43 - 2013-10-23 14:43 - 00000000 ____D C:\FRST
2013-10-23 08:58 - 2013-04-18 13:54 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-23 08:58 - 2013-04-18 13:54 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-10-23 08:50 - 2010-03-31 04:00 - 01594326 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-23 08:32 - 2010-05-28 13:13 - 01281292 _____ C:\Windows\WindowsUpdate.log
2013-10-23 08:32 - 2010-03-31 04:40 - 00008553 _____ C:\Windows\System32\Config.MPF
2013-10-23 08:31 - 2009-07-14 05:34 - 00019760 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-23 08:31 - 2009-07-14 05:34 - 00019760 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-23 08:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-23 08:24 - 2013-02-16 16:44 - 00000000 ____D C:\Users\Karl\AppData\Roaming\Dropbox
2013-10-23 08:23 - 2009-07-14 05:39 - 00217957 _____ C:\Windows\setupact.log
2013-10-21 19:14 - 2013-02-16 16:47 - 00000000 ___RD C:\Users\Karl\Dropbox
2013-10-21 15:09 - 2013-10-21 14:11 - 00000000 ____D C:\Windows\pss
2013-10-21 14:26 - 2013-10-21 14:21 - 00052346 _____ C:\Windows\iis7.log
2013-10-21 14:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-10-21 14:21 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\inetsrv
2013-10-19 21:46 - 2010-03-31 04:47 - 00135046 _____ C:\Windows\PFRO.log
2013-10-19 21:01 - 2010-11-01 11:34 - 00000000 ____D C:\Users\Karl\Documents\Karl
2013-10-19 20:31 - 2012-09-12 19:26 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-12 09:49 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-12 08:15 - 2013-02-16 16:47 - 00000976 _____ C:\Users\Karl\Desktop\Dropbox.lnk
2013-10-11 16:58 - 2009-07-14 05:33 - 00456656 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-11 11:45 - 2013-07-31 11:42 - 00000000 ____D C:\Windows\System32\MRT
2013-10-11 11:44 - 2012-01-22 14:39 - 78106760 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-10-11 11:11 - 2010-11-01 11:35 - 00000000 ____D C:\Users\Karl\Documents\Tanja
2013-10-11 10:30 - 2013-10-11 09:31 - 00029184 ____H C:\Users\Karl\Documents\~WRL2702.tmp
2013-10-11 10:09 - 2013-10-11 09:31 - 00027648 ____H C:\Users\Karl\Documents\~WRL3493.tmp
2013-10-11 10:07 - 2013-10-11 09:31 - 00027136 ____H C:\Users\Karl\Documents\~WRL3785.tmp
2013-10-11 10:05 - 2013-10-11 09:31 - 00027136 ____H C:\Users\Karl\Documents\~WRL0722.tmp
2013-10-11 10:01 - 2013-10-11 09:31 - 00026624 ____H C:\Users\Karl\Documents\~WRL1822.tmp
2013-10-11 09:42 - 2013-10-11 09:31 - 00025088 ____H C:\Users\Karl\Documents\~WRL2852.tmp
2013-10-11 09:31 - 2013-10-11 09:31 - 00024064 ____H C:\Users\Karl\Documents\~WRL1466.tmp
2013-10-09 19:45 - 2012-04-08 10:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-10-09 19:45 - 2012-04-08 10:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-09-29 17:47 - 2013-09-29 17:47 - 00572421 _____ C:\Users\Karl\Documents\mathe.zip
2013-09-23 00:28 - 2013-10-11 11:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-23 00:28 - 2013-10-11 11:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-23 00:28 - 2013-10-11 11:43 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-23 00:27 - 2013-10-11 11:43 - 14335488 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 13761024 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 02876928 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 02048512 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-23 00:27 - 2013-10-11 11:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll

Files to move or delete:
====================
C:\Users\Karl\AppData\Roaming\skype.ini


Some content of TEMP:
====================
C:\Users\Karl\AppData\Local\Temp\APNStub.exe
C:\Users\Karl\AppData\Local\Temp\HPQSi.exe
C:\Users\Karl\AppData\Local\Temp\ooxCP1..exe
C:\Users\Karl\AppData\Local\Temp\qtpxqyoydaulpouhkoyuguaxog.exe
C:\Users\Karl\AppData\Local\Temp\setup.exe


==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

12
Restore point made on: 2013-09-04 21:01:18
Restore point made on: 2013-09-12 22:43:58
Restore point made on: 2013-09-13 19:00:06
Restore point made on: 2013-09-14 14:48:28
Restore point made on: 2013-09-18 19:43:37
Restore point made on: 2013-09-24 21:38:53
Restore point made on: 2013-09-28 17:17:55
Restore point made on: 2013-10-01 19:58:56
Restore point made on: 2013-10-09 19:42:07
Restore point made on: 2013-10-11 09:12:19
Restore point made on: 2013-10-11 11:38:38
Restore point made on: 2013-10-15 20:43:42

==================== Memory info =========================== 

Percentage of memory in use: 17%
Total physical RAM: 3000.27 MB
Available physical RAM: 2488.06 MB
Total Pagefile: 2998.54 MB
Available Pagefile: 2522.95 MB
Total Virtual: 2047.88 MB
Available Virtual: 1934.39 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:448.47 GB) (Free:247.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:15 GB) (Free:5.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.82 GB) FAT32
Drive h: () (Removable) (Total:1.89 GB) (Free:1.88 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.25 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 3C5F7C9A)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=448 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

========================================================
Disk: 1 (Size: 2 GB) (Disk ID: A76E3F50)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)


LastRegBack: 2013-10-12 09:41

==================== End Of Log ============================