Windows 7 ihavenet redirect virus

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Irmi (administrator) on IRMI-PC on 01-11-2013 23:17:17
Running from C:\Users\Irmi\Desktop\virus
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-27] (AVAST Software)
HKCU\...\Policies\system: [] =0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2CC94CC00141CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: {B07F54E6-0806-47DB-B5D8-398F240776F2} file:///D:/viewer/ORDcmViewCD.ocx
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.13.0.cab
ShellExecuteHooks:  - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} -  No File [ ]
Hosts: 192.168.1.22      server
Tcpip\..\Interfaces\{309E92FB-083E-4937-89B3-498BC2FB5A41}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Irmi\AppData\Roaming\Mozilla\Firefox\Profiles\uojk6p85.default-1369151699625
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @ecocerved.it/edw,version=2.0.0.1 - C:\Program Files\Ecocerved\Mozilla\2.0.0.1\npews.dll (Ecocerved scarl)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1
CHR Extension: (Google Drive) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! Online Security) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (Gmail) - C:\Users\Irmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-27] (AVAST Software)
S4 key4hidconvert; C:\Windows\system32\k4hidconvert.exe [90112 2010-01-21] (TODO: <Company name>)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

S3 A38CCID; C:\Windows\System32\DRIVERS\a38ccid.sys [39424 2013-01-30] (Advanced Card Systems Ltd.)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [35656 2013-10-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2013-10-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-10-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774392 2013-10-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [403440 2013-10-27] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2013-10-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-10-27] ()
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 catchme; \??\C:\Users\Irmi\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-01 22:57 - 2013-11-01 23:09 - 00000000 ___SD C:\ComboFix
2013-11-01 22:57 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-01 22:57 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-01 22:57 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-01 22:57 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-01 22:57 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-01 22:57 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-01 22:57 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-01 22:57 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-01 22:56 - 2013-11-01 22:57 - 00000000 ____D C:\Qoobox
2013-11-01 22:56 - 2013-11-01 22:56 - 00000000 ____D C:\Windows\erdnt
2013-11-01 22:55 - 2013-11-01 22:55 - 05143186 ____R (Swearware) C:\Users\Irmi\Desktop\ComboFix.exe
2013-11-01 22:41 - 2013-11-01 22:41 - 00000000 ____D C:\Program Files\ESET
2013-11-01 22:36 - 2013-11-01 22:36 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-01 22:36 - 2013-11-01 22:36 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-01 22:36 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-01 22:33 - 2013-11-01 22:33 - 00000000 ____D C:\Windows\ERUNT
2013-11-01 22:28 - 2013-11-01 22:28 - 00000000 ____D C:\AdwCleaner
2013-11-01 22:22 - 2013-11-01 23:17 - 00000000 ____D C:\Users\Irmi\Desktop\virus
2013-11-01 22:22 - 2013-11-01 22:22 - 00000000 ____D C:\FRST
2013-11-01 11:45 - 2013-11-01 11:45 - 00495616 _____ (Simon Tatham) C:\Users\Irmi\Downloads\putty (1).exe
2013-10-31 10:02 - 2013-10-31 10:02 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:01 - 2013-10-31 10:01 - 04379048 _____ (Piriform Ltd) C:\Users\Irmi\Downloads\ccsetup407.exe
2013-10-28 14:38 - 2013-10-28 15:40 - 00000117 _____ C:\Users\Irmi\Desktop\Neues Textdokument.txt
2013-10-27 17:56 - 2013-10-27 17:56 - 00016513 ____N C:\spyhunter.log
2013-10-27 16:55 - 2013-10-27 17:56 - 00095718 _____ C:\spyhunter.fix
2013-10-27 16:55 - 2013-10-27 16:04 - 00008192 _____ C:\shldr.mbr
2013-10-27 16:55 - 2012-11-02 16:23 - 00285747 _____ C:\shldr
2013-10-27 16:03 - 2013-10-27 16:03 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-27 16:02 - 2013-11-01 22:20 - 00000000 ____D C:\Windows\865537E164904193A4B6669C62711852.TMP
2013-10-27 16:02 - 2013-10-27 16:02 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-10-27 15:59 - 2013-10-27 15:59 - 00774392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00269216 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-27 15:59 - 2013-10-27 15:59 - 00178304 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-27 15:59 - 2013-10-27 15:59 - 00035656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00002119 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-27 15:59 - 2013-10-27 15:59 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\AVAST Software
2013-10-27 15:58 - 2013-10-27 15:58 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-27 15:58 - 2013-10-27 15:58 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-27 13:56 - 2013-10-27 13:56 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-10-27 13:39 - 2013-10-27 13:41 - 88817424 _____ (Microsoft Corporation) C:\Users\Irmi\Downloads\msert.exe
2013-10-27 13:23 - 2013-10-27 13:47 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-27 12:39 - 2013-10-27 12:39 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\LavasoftStatistics
2013-10-27 12:06 - 2013-10-27 12:06 - 01724552 _____ C:\Users\Irmi\Downloads\Adaware_Installer.exe
2013-10-27 12:06 - 2013-10-27 12:06 - 00000000 ____D C:\ProgramData\Lavasoft
2013-10-27 11:33 - 2013-10-27 11:34 - 00495616 _____ (Simon Tatham) C:\Users\Irmi\Downloads\putty.exe
2013-10-27 11:20 - 2013-10-27 11:20 - 00000000 ____D C:\Windows\pss
2013-10-27 11:18 - 2013-10-27 11:18 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\Malwarebytes
2013-10-27 11:18 - 2013-10-27 11:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-27 11:17 - 2013-10-27 11:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Irmi\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-27 11:13 - 2013-10-27 11:13 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Irmi\Downloads\SpyHunter-Installer.exe
2013-10-24 10:52 - 2013-10-24 10:52 - 00020480 ___SH C:\Users\Irmi\Thumbs.db
2013-10-24 10:35 - 2013-10-24 11:03 - 00000000 ____D C:\Users\Irmi\Rational
2013-10-21 14:25 - 2013-10-21 14:25 - 00154888 _____ C:\Users\Irmi\Desktop\Ombis Hogast.odt
2013-10-21 14:13 - 2013-10-21 14:13 - 00001813 _____ C:\Users\Irmi\Desktop\Export (Ombis).lnk
2013-10-21 13:23 - 2013-10-21 14:30 - 00002010 ____H C:\Users\Irmi\Documents\Default.rdp
2013-10-18 09:55 - 2013-10-18 09:55 - 00015269 _____ C:\Users\Irmi\Documents\walter.le Crepaz 2.odt
2013-10-18 09:44 - 2013-10-18 09:44 - 00015004 _____ C:\Users\Irmi\Documents\walter.le Crepaz 1.odt
2013-10-11 14:29 - 2013-10-11 14:30 - 00000000 ____D C:\Users\Irmi\Desktop\Aut.prov. bz kataster
2013-10-10 07:09 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 07:09 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 07:09 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 07:09 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 07:09 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 07:09 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 07:09 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 16:46 - 2013-10-09 16:46 - 00200307 _____ C:\Users\Irmi\Documents\Rechnungen F Gas.odt
2013-10-09 07:23 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 07:23 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 07:23 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 07:23 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 07:23 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 07:23 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-09 07:23 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 07:23 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 07:23 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 07:23 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 07:23 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 07:23 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 07:23 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 07:23 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:23 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 07:23 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 07:23 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 07:23 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 07:23 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 07:23 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 07:23 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 07:23 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:23 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 07:23 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 07:23 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 07:23 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 07:23 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

==================== One Month Modified Files and Folders =======

2013-11-01 23:17 - 2013-11-01 22:22 - 00000000 ____D C:\Users\Irmi\Desktop\virus
2013-11-01 23:16 - 2013-06-07 13:16 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-01 23:15 - 2013-07-03 10:40 - 00000302 _____ C:\Windows\Tasks\MRWR.job
2013-11-01 23:15 - 2013-03-12 17:13 - 00016088 _____ C:\Windows\PFRO.log
2013-11-01 23:15 - 2013-03-12 16:01 - 01353279 _____ C:\Windows\WindowsUpdate.log
2013-11-01 23:15 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-01 23:15 - 2009-07-14 05:39 - 00024994 _____ C:\Windows\setupact.log
2013-11-01 23:11 - 2013-03-12 16:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-01 23:09 - 2013-11-01 22:57 - 00000000 ___SD C:\ComboFix
2013-11-01 23:04 - 2013-06-07 13:16 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-01 22:57 - 2013-11-01 22:56 - 00000000 ____D C:\Qoobox
2013-11-01 22:56 - 2013-11-01 22:56 - 00000000 ____D C:\Windows\erdnt
2013-11-01 22:55 - 2013-11-01 22:55 - 05143186 ____R (Swearware) C:\Users\Irmi\Desktop\ComboFix.exe
2013-11-01 22:41 - 2013-11-01 22:41 - 00000000 ____D C:\Program Files\ESET
2013-11-01 22:37 - 2009-07-14 05:34 - 00014848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-01 22:37 - 2009-07-14 05:34 - 00014848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-01 22:36 - 2013-11-01 22:36 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-01 22:36 - 2013-11-01 22:36 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-01 22:35 - 2013-03-12 16:08 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-01 22:33 - 2013-11-01 22:33 - 00000000 ____D C:\Windows\ERUNT
2013-11-01 22:28 - 2013-11-01 22:28 - 00000000 ____D C:\AdwCleaner
2013-11-01 22:22 - 2013-11-01 22:22 - 00000000 ____D C:\FRST
2013-11-01 22:20 - 2013-10-27 16:02 - 00000000 ____D C:\Windows\865537E164904193A4B6669C62711852.TMP
2013-11-01 12:28 - 2013-03-28 08:01 - 00000600 _____ C:\Users\Irmi\AppData\Local\PUTTY.RND
2013-11-01 11:45 - 2013-11-01 11:45 - 00495616 _____ (Simon Tatham) C:\Users\Irmi\Downloads\putty (1).exe
2013-10-31 10:29 - 2013-03-13 14:33 - 00000000 ____D C:\Users\Irmi\AppData\Local\FreePDF_XP
2013-10-31 10:28 - 2013-03-12 17:27 - 00000000 ____D C:\Users\Irmi\Desktop\scanner
2013-10-31 10:02 - 2013-10-31 10:02 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:01 - 2013-10-31 10:01 - 04379048 _____ (Piriform Ltd) C:\Users\Irmi\Downloads\ccsetup407.exe
2013-10-31 08:40 - 2013-03-12 16:36 - 00000000 ____D C:\Users\Irmi\AppData\Local\Windows Live
2013-10-28 15:40 - 2013-10-28 14:38 - 00000117 _____ C:\Users\Irmi\Desktop\Neues Textdokument.txt
2013-10-27 17:56 - 2013-10-27 17:56 - 00016513 ____N C:\spyhunter.log
2013-10-27 17:56 - 2013-10-27 16:55 - 00095718 _____ C:\spyhunter.fix
2013-10-27 16:04 - 2013-10-27 16:55 - 00008192 _____ C:\shldr.mbr
2013-10-27 16:03 - 2013-10-27 16:03 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-27 16:02 - 2013-10-27 16:02 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-10-27 15:59 - 2013-10-27 15:59 - 00774392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00269216 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-27 15:59 - 2013-10-27 15:59 - 00178304 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-27 15:59 - 2013-10-27 15:59 - 00035656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-27 15:59 - 2013-10-27 15:59 - 00002119 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-27 15:59 - 2013-10-27 15:59 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\AVAST Software
2013-10-27 15:58 - 2013-10-27 15:58 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-27 15:58 - 2013-10-27 15:58 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-27 13:56 - 2013-10-27 13:56 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-10-27 13:47 - 2013-10-27 13:23 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-27 13:41 - 2013-10-27 13:39 - 88817424 _____ (Microsoft Corporation) C:\Users\Irmi\Downloads\msert.exe
2013-10-27 12:39 - 2013-10-27 12:39 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\LavasoftStatistics
2013-10-27 12:06 - 2013-10-27 12:06 - 01724552 _____ C:\Users\Irmi\Downloads\Adaware_Installer.exe
2013-10-27 12:06 - 2013-10-27 12:06 - 00000000 ____D C:\ProgramData\Lavasoft
2013-10-27 11:34 - 2013-10-27 11:33 - 00495616 _____ (Simon Tatham) C:\Users\Irmi\Downloads\putty.exe
2013-10-27 11:20 - 2013-10-27 11:20 - 00000000 ____D C:\Windows\pss
2013-10-27 11:18 - 2013-10-27 11:18 - 00000000 ____D C:\Users\Irmi\AppData\Roaming\Malwarebytes
2013-10-27 11:18 - 2013-10-27 11:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-27 11:17 - 2013-10-27 11:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Irmi\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-27 11:13 - 2013-10-27 11:13 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Irmi\Downloads\SpyHunter-Installer.exe
2013-10-24 11:03 - 2013-10-24 10:35 - 00000000 ____D C:\Users\Irmi\Rational
2013-10-24 10:55 - 2013-03-12 16:05 - 00000000 ____D C:\Users\Irmi
2013-10-24 10:52 - 2013-10-24 10:52 - 00020480 ___SH C:\Users\Irmi\Thumbs.db
2013-10-21 14:30 - 2013-10-21 13:23 - 00002010 ____H C:\Users\Irmi\Documents\Default.rdp
2013-10-21 14:25 - 2013-10-21 14:25 - 00154888 _____ C:\Users\Irmi\Desktop\Ombis Hogast.odt
2013-10-21 14:13 - 2013-10-21 14:13 - 00001813 _____ C:\Users\Irmi\Desktop\Export (Ombis).lnk
2013-10-21 14:06 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-10-18 17:09 - 2013-06-07 13:16 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-18 15:44 - 2011-07-20 15:14 - 00000000 ____D C:\Users\Irmi\Documents\Dichiarazioni
2013-10-18 09:55 - 2013-10-18 09:55 - 00015269 _____ C:\Users\Irmi\Documents\walter.le Crepaz 2.odt
2013-10-18 09:44 - 2013-10-18 09:44 - 00015004 _____ C:\Users\Irmi\Documents\walter.le Crepaz 1.odt
2013-10-11 14:32 - 2013-01-24 18:11 - 00000000 ____D C:\Users\Irmi\Documents\AUTO
2013-10-11 14:30 - 2013-10-11 14:29 - 00000000 ____D C:\Users\Irmi\Desktop\Aut.prov. bz kataster
2013-10-11 14:24 - 2011-03-28 15:35 - 00000000 ____D C:\Users\Irmi\Documents\Arbeitssicherheit
2013-10-11 09:11 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-10 17:02 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-10-10 07:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-10 07:15 - 2009-07-14 05:33 - 00294584 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 07:09 - 2013-03-12 18:40 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 16:46 - 2013-10-09 16:46 - 00200307 _____ C:\Users\Irmi\Documents\Rechnungen F Gas.odt
2013-10-09 07:39 - 2011-07-20 15:06 - 00000000 ____D C:\Users\Irmi\Documents\Angebote
2013-10-07 07:24 - 2013-03-12 16:46 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-02 14:22 - 2013-09-03 09:36 - 00016604 _____ C:\Users\Irmi\Documents\Stundenplan August 2013 Nogler Taddäus.ods
2013-10-02 08:52 - 2013-03-12 18:08 - 00000000 ____D C:\Users\Irmi\AppData\Local\Mozilla
2013-10-02 08:52 - 2013-03-12 16:46 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-31 11:59

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Irmi at 2013-11-01 23:18:08
Running from C:\Users\Irmi\Desktop\virus
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
avast! Free Antivirus (Version: 9.0.2006)
Bit4id - Universal Middleware for Incard (Version: 1.2.15.0)
CCleaner (Version: 4.07)
D3DX10 (Version: 15.4.2368.0902)
EcoWebSign Plugin
ESET Online Scanner v3
FreePDF (Remove only)
Google Chrome (Version: 30.0.1599.101)
Google Update Helper (Version: 1.3.21.165)
GPL Ghostscript (Version: 9.04)
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
ImgBurn (Version: 2.5.7.0)
Intr@Web Stand-Alone 14.0.1.0 (Version: 14.0.1.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Junk Mail filter update (Version: 16.4.3505.0912)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
OpenOffice.org 3.4.1 (Version: 3.41.9593)
Opera 12.16 (Version: 12.16.1860)
RedMon - Redirection Port Monitor
System Requirements Lab for Intel (Version: 4.5.13.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Windows Live Communications Platform (Version: 16.4.3505.0912)
Windows Live Essentials (Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3505.0912)
Windows Live Mail (Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (Version: 16.4.3505.0912)
Windows Live PIMT Platform (Version: 16.4.3505.0912)
Windows Live SOXE (Version: 16.4.3505.0912)
Windows Live SOXE Definitions (Version: 16.4.3505.0912)
Windows Live UX Platform (Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912)
Windows Live Writer (Version: 16.4.3505.0912)
Windows Live Writer Resources (Version: 16.4.3505.0912)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2013-03-27 20:28 - 2013-03-27 20:28 - 00000848 ____N C:\Windows\system32\Drivers\etc\hosts
192.168.1.22      server

==================== Scheduled Tasks (whitelisted) =============

Task: {363E9AAC-D316-43D2-93D2-F13AE29DE441} - System32\Tasks\{CC7C1D1F-40D3-47CC-9A1E-496E090B9E5C} => C:\Users\Irmi\Desktop\virus\SecurityCheck.exe [2013-11-01] ()
Task: {43A14ACF-5811-4BDB-9668-53E75D3A1E10} - System32\Tasks\MRWR => C:\Windows\System32\wow324.dll [2013-07-03] ()
Task: {A6D75834-8502-4598-86BB-B52C58173B7E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-07] (Google Inc.)
Task: {DE4903A4-40AC-4285-9DA2-0DF1229B89E7} - System32\Tasks\{2F9AE91F-81A6-46BB-A3C2-C815CF60976A} => C:\Users\Irmi\Desktop\virus\SecurityCheck.exe [2013-11-01] ()
Task: {E0604539-363A-425A-8EC7-AFFE211F8F8A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-07] (Google Inc.)
Task: {FE7C229C-42EF-47A0-94D6-B7F683C9A938} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MRWR.job => C:\Windows\system32\wow324.dll

==================== Loaded Modules (whitelisted) =============

2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-10-27 15:59 - 2013-10-27 15:59 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (11/01/2013 11:13:35 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/01/2013 11:13:35 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/01/2013 11:05:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (11/01/2013 10:59:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (11/01/2013 10:58:51 PM) (Source: TermDD) (User: )
Description: Von der Terminalserver-Sicherheitsschicht wurde ein Fehler im Protokollablauf erkannt, und die Clientverbindung wurde getrennt.
Client-IP: 192.168.1.47.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-11-01 22:56:18.377
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 22:30:36.260
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 22:19:04.398
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 17:00:13.244
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 16:50:42.272
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 16:39:50.496
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 15:56:05.887
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 13:48:28.445
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 13:40:00.976
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-27 13:19:46.454
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 2999.05 MB
Available physical RAM: 1966.82 MB
Total Pagefile: 5994.34 MB
Available Pagefile: 4874.79 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.95 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:338.87 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FFF591BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================