BKA-Trojaner Sperrbildschirm Windows Vista (32bit) kein abgesicherter Modus

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by daniel at 2013-11-04 18:04:59
Running from G:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

Could not list Security Center items. Check WMI.


==================== Installed Programs ======================

7-Zip 9.20
AC3Filter 1.63b (Version: 1.63b)
Adobe AIR (Version: 2.7.0.19480)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader 8.1.2 - Deutsch (Version: 8.1.2)
Adobe Shockwave Player 11 (Version: 11)
Amazon Games & Software Downloader (Version: 2.0.2.0)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
AVG 2014 (Version: 14.0.3615)
AVG 2014 (Version: 14.0.4158)
AVG 2014 (Version: 2014.0.4158)
AVG Security Toolbar (Version: 17.0.1.12)
Avira Free Antivirus (Version: 13.0.0.4052)
AVM FRITZ!WLAN
Bonjour (Version: 3.0.0.10)
Cheat Engine 6.1
Counter-Strike
Counter-Strike: Condition Zero Deleted Scenes
CyberLink PhotoDirector 3 (Version: 3.0.3618)
DAEMON Tools Lite (Version: 4.45.1.0236)
DealPly (Version: )
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DivX-Setup (Version: 2.6.1.9)
Dragon Age: Origins (Version: 1.05)
Dropbox (HKCU Version: 2.4.2)
EA Installer (Version: 2.2.0.62)
EA Shared Game Component: Activation (Version: 2.2.0)
EA Shared Game Component: Activation (Version: 2.2.0.62)
ElsterFormular (Version: 13.0.0.8086p)
FIFA 12 (Version: 1.0.0.0)
Free YouTube to MP3 Converter version 3.12.16.1030 (Version: 3.12.16.1030)
FreeRIP3 3.70 (Version: 3.70)
Full Tilt Poker (Version: 4.40.9.WIN.FullTilt.COM)
FUSSBALL MANAGER 13 (Version: 1.0.4.0)
Google Chrome (Version: 30.0.1599.101)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
Grand Theft Auto IV (Version: 1.0.0013.131)
ICQ7.6 (Version: 7.6)
Intel(R) Matrix Storage Manager
Intel(R) Network Connections 13.0.42.0 (Version: 13.0.42.0)
IrfanView (remove only) (Version: 4.30)
Java Auto Updater (Version: 2.0.7.2)
Java(TM) 6 Update 38 (Version: 6.0.380)
Java(TM) 6 Update 6 (Version: 1.6.0.60)
KaloMa 4.93
LetsTrade Komponenten
Mass Effect (Version: 1.00)
Mass Effect 2 (Version: 1.02)
Mass Effect™ 3 (Version: 1.04.0.0)
MCE Software Encoder 1.1 (Version: 1.1.0.1918)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Games for Windows - LIVE Redistributable (Version: 3.5.92.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Student 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NBA 2K12 (Version: 1.0.0)
NBA 2K13
Nero 8 Essentials (Version: 8.3.124)
neroxml (Version: 1.0.0)
NVIDIA Drivers
NVIDIA PhysX (Version: 9.11.1107)
Origin (Version: 8.5.0.4554)
PartyPoker
PhotoNow! (Version: 1.0.4310)
PokerStrategy.com Elephant (Version: 0.102.40520.02)
PostgreSQL 8.3 (Version: 8.3)
PowerDVD (Version: 7.0.3118.0)
ProtectDisc Driver, Version 11 (Version: 11.0.0.11)
Rome - Total War(TM) (Version: 1.0)
Rome - Total War(TM) (Version: 1.2)
Rome Total War - patch 1.3 (Version: 1.3)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype Click to Call (Version: 5.9.9216)
Skype™ 6.6 (Version: 6.6.106)
SopCast 3.3.2 (Version: 3.3.2)
Spelling Dictionaries Support For Adobe Reader 8 (Version: 8.0.0)
Star Wars(tm) Knights of the Old Republic(tm) II: The Sith Lords(tm) (Version: 1.00.0000)
Star Wars(TM): Knights of the Old Republic (TM)
TSLRCM 1.7
Tunatic
TVAnts 1.0
TVsweeper 3 (Version: 3.0.3)
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VCRedistSetup (Version: 1.0.0)
Veetle TV 0.9.18 (Version: 0.9.18)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1)
vShare.tv plugin 1.0 (Version: 1.0)
Vuze (Version: 4.6)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
X10 Hardware(TM)

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2D375248-5635-4A69-A336-881D38A54411} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {2FA7006D-8930-45E1-87B5-0D6D94E997D4} - System32\Tasks\{B51DC629-EB28-4920-8CFD-36F10BDD2A8E} => Firefox.exe hxxp://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsProgressBar
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {627B7A52-D1B9-4C59-951B-097591D78DAE} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - daniel => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {6F8CF086-5301-47D4-9C17-F5752D4BF7C9} - System32\Tasks\{EE3970F6-8444-49B0-A0EA-B0829D8B2219} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {7C568A4D-DA29-451D-AE80-EA4F983B890C} - System32\Tasks\{32A132D9-AA88-4F25-9420-1EBA1C1E9225} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsProgressBar
Task: {9B122FF4-F3FE-49B3-9A80-F772C6F9EEE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {A61C1B5E-E1EE-4384-B478-9F1BC713D2E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\System32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {C8774B66-174D-48CD-A5AD-685847C878D8} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {F03C0831-B2F3-4B53-A639-843BA432442D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F139A798-0B31-40D3-A72C-A92D80A140A4} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Could not list Devices. Check WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/03/2013 10:40:51 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, fehlerhaftes Modul Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, Ausnahmecode 0xc0000005, Fehleroffset 0x00003060,
Prozess-ID 0xff8, Anwendungsstartzeit Taskmgr.exe0.

Error: (11/03/2013 10:40:49 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, fehlerhaftes Modul Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, Ausnahmecode 0xc0000005, Fehleroffset 0x00003060,
Prozess-ID 0x14a8, Anwendungsstartzeit Taskmgr.exe0.

Error: (11/03/2013 10:40:46 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, fehlerhaftes Modul Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, Ausnahmecode 0xc0000005, Fehleroffset 0x00003060,
Prozess-ID 0x42c, Anwendungsstartzeit Taskmgr.exe0.

Error: (11/03/2013 10:40:39 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, fehlerhaftes Modul Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, Ausnahmecode 0xc0000005, Fehleroffset 0x00003060,
Prozess-ID 0x135c, Anwendungsstartzeit Taskmgr.exe0.

Error: (11/03/2013 10:39:23 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16514, Zeitstempel 0x523ec269, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,
Prozess-ID 0x1774, Anwendungsstartzeit iexplore.exe0.

Error: (11/03/2013 10:38:31 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, fehlerhaftes Modul Taskmgr.exe, Version 6.0.6001.18000, Zeitstempel 0x47918e94, Ausnahmecode 0xc0000005, Fehleroffset 0x00003060,
Prozess-ID 0x141c, Anwendungsstartzeit Taskmgr.exe0.

Error: (11/03/2013 10:05:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 07:07:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 05:14:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 02:22:01 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung DAOrigins.exe, Version 1.5.13263.0, Zeitstempel 0x4eb19d53, fehlerhaftes Modul DAOrigins.exe, Version 1.5.13263.0, Zeitstempel 0x4eb19d53, Ausnahmecode 0xc0000005, Fehleroffset 0x004698a0,
Prozess-ID 0x1614, Anwendungsstartzeit DAOrigins.exe0.


System errors:
=============
Error: (11/04/2013 06:01:56 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/04/2013 05:55:23 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/04/2013 05:29:58 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/04/2013 05:27:25 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/03/2013 10:57:22 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/03/2013 10:51:00 PM) (Source: DCOM) (User: )
Description: {28778B62-8481-400D-8E8A-A4C81ED3F65C}

Error: (11/03/2013 10:50:26 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/03/2013 10:46:02 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error: (11/03/2013 10:41:23 PM) (Source: Dhcp) (User: )
Description: Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 0015AFB8653C zugeteilt werden. Der folgende Fehler ist aufgetreten: 
%%121. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.

Error: (11/03/2013 10:40:48 PM) (Source: DCOM) (User: )
Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820}


Microsoft Office Sessions:
=========================
Error: (11/03/2013 10:40:51 PM) (Source: Application Error)(User: )
Description: Taskmgr.exe6.0.6001.1800047918e94Taskmgr.exe6.0.6001.1800047918e94c000000500003060ff801ced8dd57fc2fc6

Error: (11/03/2013 10:40:49 PM) (Source: Application Error)(User: )
Description: Taskmgr.exe6.0.6001.1800047918e94Taskmgr.exe6.0.6001.1800047918e94c00000050000306014a801ced8dd56736ce6

Error: (11/03/2013 10:40:46 PM) (Source: Application Error)(User: )
Description: Taskmgr.exe6.0.6001.1800047918e94Taskmgr.exe6.0.6001.1800047918e94c00000050000306042c01ced8dd54c6f566

Error: (11/03/2013 10:40:39 PM) (Source: Application Error)(User: )
Description: Taskmgr.exe6.0.6001.1800047918e94Taskmgr.exe6.0.6001.1800047918e94c000000500003060135c01ced8dd50b1f9c6

Error: (11/03/2013 10:39:23 PM) (Source: Application Error)(User: )
Description: iexplore.exe9.0.8112.16514523ec269USER32.dll6.0.6002.1888151da3e27c000014200009f5d177401ced8dd2949f686

Error: (11/03/2013 10:38:31 PM) (Source: Application Error)(User: )
Description: Taskmgr.exe6.0.6001.1800047918e94Taskmgr.exe6.0.6001.1800047918e94c000000500003060141c01ced8dd083238e6

Error: (11/03/2013 10:05:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 07:07:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 05:14:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/03/2013 02:22:01 PM) (Source: Application Error)(User: )
Description: DAOrigins.exe1.5.13263.04eb19d53DAOrigins.exe1.5.13263.04eb19d53c0000005004698a0161401ced87e26f56bd5


CodeIntegrity Errors:
===================================
  Date: 2013-11-04 18:03:22.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-04 18:03:22.062
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-04 18:03:21.860
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-04 18:03:21.672
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:37.504
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:37.094
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:36.875
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:36.680
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:28.138
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-10 17:43:27.943
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2014\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 3069.45 MB
Available physical RAM: 1643.01 MB
Total Pagefile: 6349.93 MB
Available Pagefile: 4424.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1895.07 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:445.75 GB) (Free:58.32 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:19.99 GB) (Free:11.44 GB) FAT32
Drive g: () (Removable) (Total:1.91 GB) (Free:1.91 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 9EBAAA8A)
Partition 1: (Active) - (Size=446 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 6F20736B)
No partition Table on disk 1.
Disk 1 is a removable device.

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by daniel (administrator) on DANIEL-HOME on 04-11-2013 18:00:13
Running from G:\
Windows Vista (TM) Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712 2007-10-03] (Intel Corporation)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [AVMWlanClient] - C:\Program Files\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AmazonGSDownloaderTray] - C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe [326144 2009-10-23] (Amazon.com)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [vProt] - C:\Program Files\AVG Secure Search\vprot.exe [2404376 2013-10-05] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WftacQBXWC5kcdU] - C:\Windows\explorer.exe [2926592 2009-04-11] (Microsoft Corporation)
HKCU\...\Run: [RGSC] - C:\Spiele\Spiele\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: {02f6a27b-aae7-11e0-952c-001d9297d8ad} - J:\LaunchU3.exe -a
MountPoints2: {13fa9473-3088-11e1-9484-001d9297d8ad} - J:\pushinst.exe
MountPoints2: {ab19b6c1-da0a-11e0-9973-001d9297d8ad} - J:\autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\Users\daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l8zododo0.lnk
ShortcutTarget: l8zododo0.lnk -> C:\PROGRA~2\0ododoz8l.dss (Корпорация Майкрософт)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://startsear.ch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
URLSearchHook: HKCU - (No Name) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} -  No File
SearchScopes: HKLM - DefaultScope {1645A33F-0A96-4315-904E-29E188E7720E} URL = hxxp://startsear.ch/?q={searchTerms}
SearchScopes: HKLM - {1645A33F-0A96-4315-904E-29E188E7720E} URL = hxxp://startsear.ch/?q={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll No File
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKCU - No Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\daniel\AppData\Roaming\Mozilla\Firefox\Profiles\dgbvzcz3.default
FF Homepage: about:blank
FF NetworkProxy: "ftp", "50.22.206.179"
FF NetworkProxy: "ftp_port", 80
FF NetworkProxy: "http", "50.22.206.179"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "50.22.206.179"
FF NetworkProxy: "socks_port", 80
FF NetworkProxy: "ssl", "50.22.206.179"
FF NetworkProxy: "ssl_port", 80
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.0.12\\npsitesafety.dll (AVG Technologies)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=1.6.0_38 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\daniel\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: stealthyextension - C:\Users\daniel\AppData\Roaming\Mozilla\Firefox\Profiles\dgbvzcz3.default\Extensions\stealthyextension@gmail.com.xpi
FF Extension: Adblock Plus - C:\Users\daniel\AppData\Roaming\Mozilla\Firefox\Profiles\dgbvzcz3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
FF Extension: vShare Add-On - C:\Program Files\Mozilla Firefox\extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}
FF Extension: DealPly - C:\Program Files\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.0.1.12
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\17.0.1.12

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (PDF Xpansion - the perfect PDF technology) - C:\Program Files\Mozilla Firefox\plugins\np-sxpdf.dll (soft Xpansion)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U38) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\daniel\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.380.5) - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Docs) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DivX HiQ) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae\2.1.1.94_0
CHR Extension: (DealPly) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.1.94_0
CHR Extension: (Gmail) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [edcbaedcbaedcbaedcbaedcbaedcbajk] - C:\Program Files\vShare.tv plugin\vshareplg.crx
CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

========================== Services (Whitelisted) =================

S3 Amazon Download Agent; C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe [401920 2009-10-23] (Amazon.com)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-25] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
S3 DAUpdaterSvc; C:\Spiele\Spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [25832 2009-12-15] (BioWare)
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [237638 2008-06-03] ()
S4 SXDS10; C:\Program Files\Common Files\soft Xpansion\sxds10.exe [229520 2011-12-08] (soft Xpansion)
R2 vToolbarUpdater17.0.12; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [1734680 2013-10-05] (AVG Secure Search)
S2 Winmgmt; C:\PROGRA~2\0ododoz8l.dss [151552 2013-11-03] (Корпорация Майкрософт)
R2 x10nets; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [20480 2001-11-12] (X10)
R2 pgsql-8.3; "C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe" runservice -w -N "pgsql-8.3" -D "C:\Program Files\PostgreSQL\8.3\data\"

==================== Drivers (Whitelisted) ====================

R3 3xHybrid; C:\Windows\System32\DRIVERS\3xHybrid.sys [1302368 2008-01-08] (NXP Semiconductors Germany GmbH)
R2 ACEDRV07; C:\Windows\system32\drivers\ACEDRV07.sys [101376 2012-01-03] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277736 2008-07-30] (Protect Software GmbH)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120632 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209208 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [145720 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [223032 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102200 2013-08-20] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-10-05] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-04] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-01] (AVM Berlin)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2011-12-11] (DT Soft Ltd)
R3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [926080 2010-10-01] (AVM GmbH)
S3 lredbooo; C:\Users\daniel\AppData\Local\Temp\lredbooo.sys [29696 2011-07-07] ()
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [569344 2007-11-21] (Ralink Technology Corp.)
R1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [51264 2003-07-15] (StarForce Technologies, Inc.)
R0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [94816 2003-07-15] (StarForce Technologies, Inc.)
R0 prosync1; C:\Windows\System32\drivers\prosync1.sys [6848 2003-04-04] (StarForce Technologies, Inc.)
R0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4448 2003-04-29] (StarForce Technologies, Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-16] (Avira GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-04 17:59 - 2013-11-04 17:59 - 00000000 ____D C:\FRST
2013-11-03 22:32 - 2013-11-03 22:34 - 00000291 _____ C:\ProgramData\l8zododo0.reg
2013-11-03 22:26 - 2013-11-04 17:54 - 95025368 ____T C:\ProgramData\l8zododo0.bxx
2013-11-03 22:26 - 2013-11-04 17:54 - 00000000 _____ C:\ProgramData\l8zododo0.fvv
2013-11-03 22:26 - 2013-11-03 22:26 - 00151552 _____ (Корпорация Майкрософт) C:\ProgramData\0ododoz8l.dss
2013-11-02 15:37 - 2013-11-02 15:37 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-11-02 15:37 - 2013-11-02 15:37 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-11-02 15:36 - 2013-11-02 15:36 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\daniel\Downloads\FreeYouTubeToMP3Converter.exe
2013-10-09 21:33 - 2013-10-09 21:33 - 01866345 _____ C:\Users\daniel\Downloads\Master Prozessmanagement Cohline.zip
2013-10-09 17:44 - 2013-09-22 11:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 17:44 - 2013-09-22 11:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 17:44 - 2013-09-22 11:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 17:44 - 2013-09-22 11:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-09 17:44 - 2013-09-22 11:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 17:44 - 2013-09-22 11:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 17:44 - 2013-09-22 11:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-09 17:44 - 2013-09-22 11:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 17:44 - 2013-09-22 11:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-09 17:44 - 2013-09-22 11:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 17:44 - 2013-09-22 11:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-09 17:44 - 2013-09-22 11:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 17:44 - 2013-09-22 11:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 17:44 - 2013-09-22 11:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 17:44 - 2013-09-22 11:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-09 17:44 - 2013-09-22 10:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 17:01 - 2013-08-29 08:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 17:01 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-09 17:01 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-09 17:01 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-09 17:01 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-09 17:01 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-09 17:01 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-09 17:01 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-09 17:01 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-09 17:01 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-09 17:01 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 17:01 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-09 17:01 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 17:01 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 17:01 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 17:01 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 17:01 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 17:01 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 17:01 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 17:01 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 17:01 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 17:01 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 17:01 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 17:01 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 17:01 - 2011-05-05 14:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-05 13:06 - 2013-10-05 13:07 - 00003497 _____ C:\Users\daniel\Documents\Dragon Age Origins 1.05.log
2013-10-05 12:11 - 2013-10-05 12:11 - 00000000 ____D C:\Users\daniel\AppData\Local\EA Core
2013-10-05 11:20 - 2013-10-05 11:20 - 00007885 _____ C:\Users\daniel\Documents\DAO Ultimate Addins Updater.log
2013-10-05 11:20 - 2013-10-05 11:20 - 00000000 ____D C:\Program Files\Electronic Arts
2013-10-05 11:18 - 2013-10-05 11:20 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-10-05 11:18 - 2013-10-05 11:18 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-05 11:18 - 2013-10-05 11:18 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-05 11:17 - 2013-10-05 11:17 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-10-05 11:17 - 2013-10-05 11:17 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-10-05 10:41 - 2013-10-05 12:10 - 00031279 _____ C:\Users\daniel\Documents\Install Dragon Age.log

==================== One Month Modified Files and Folders =======

2013-11-04 18:02 - 2011-02-12 15:34 - 01391075 _____ C:\Windows\WindowsUpdate.log
2013-11-04 17:59 - 2013-11-04 17:59 - 00000000 ____D C:\FRST
2013-11-04 17:58 - 2012-08-06 17:47 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-04 17:58 - 2012-08-06 17:47 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-04 17:56 - 2012-07-06 12:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-04 17:54 - 2013-11-03 22:26 - 95025368 ____T C:\ProgramData\l8zododo0.bxx
2013-11-04 17:54 - 2013-11-03 22:26 - 00000000 _____ C:\ProgramData\l8zododo0.fvv
2013-11-04 17:54 - 2013-09-06 17:47 - 00000000 ____D C:\ProgramData\MFAData
2013-11-04 17:54 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-04 17:54 - 2006-11-02 13:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-04 17:54 - 2006-11-02 13:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-04 17:34 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-03 22:34 - 2013-11-03 22:32 - 00000291 _____ C:\ProgramData\l8zododo0.reg
2013-11-03 22:26 - 2013-11-03 22:26 - 00151552 _____ (Корпорация Майкрософт) C:\ProgramData\0ododoz8l.dss
2013-11-03 22:08 - 2008-01-21 08:16 - 01636806 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-02 18:20 - 2008-01-21 03:47 - 00139274 _____ C:\Windows\PFRO.log
2013-11-02 15:37 - 2013-11-02 15:37 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-11-02 15:37 - 2013-11-02 15:37 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-11-02 15:37 - 2011-07-30 19:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\DVDVideoSoft
2013-11-02 15:36 - 2013-11-02 15:36 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\daniel\Downloads\FreeYouTubeToMP3Converter.exe
2013-10-30 21:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-30 18:20 - 2008-05-26 15:29 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-20 13:39 - 2012-05-07 08:50 - 00000000 ___RD C:\Users\daniel\Dropbox
2013-10-20 13:39 - 2012-05-07 08:48 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Dropbox
2013-10-20 08:47 - 2011-02-12 16:42 - 00000000 ____D C:\Users\daniel
2013-10-13 21:28 - 2012-05-07 08:48 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-09 21:33 - 2013-10-09 21:33 - 01866345 _____ C:\Users\daniel\Downloads\Master Prozessmanagement Cohline.zip
2013-10-09 21:32 - 2013-08-26 09:06 - 00000000 ____D C:\Users\daniel\Documents\Education
2013-10-09 20:00 - 2012-05-01 16:37 - 00000000 ____D C:\Users\daniel\Documents\Fitness
2013-10-09 19:45 - 2012-04-03 19:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-09 19:45 - 2011-05-17 18:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-09 19:42 - 2006-11-02 13:47 - 00414264 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 19:37 - 2008-05-26 13:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 17:55 - 2013-07-23 17:27 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 17:52 - 2006-11-02 11:24 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-10-08 21:00 - 2012-06-09 11:53 - 00000180 _____ C:\Users\daniel\AppData\default.pls
2013-10-05 14:00 - 2013-09-06 17:52 - 00037664 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2013-10-05 14:00 - 2013-09-06 17:52 - 00003726 _____ C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2013-10-05 14:00 - 2013-09-06 17:52 - 00000000 ____D C:\Program Files\AVG Secure Search
2013-10-05 13:07 - 2013-10-05 13:06 - 00003497 _____ C:\Users\daniel\Documents\Dragon Age Origins 1.05.log
2013-10-05 12:11 - 2013-10-05 12:11 - 00000000 ____D C:\Users\daniel\AppData\Local\EA Core
2013-10-05 12:10 - 2013-10-05 10:41 - 00031279 _____ C:\Users\daniel\Documents\Install Dragon Age.log
2013-10-05 11:20 - 2013-10-05 11:20 - 00007885 _____ C:\Users\daniel\Documents\DAO Ultimate Addins Updater.log
2013-10-05 11:20 - 2013-10-05 11:20 - 00000000 ____D C:\Program Files\Electronic Arts
2013-10-05 11:20 - 2013-10-05 11:18 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-10-05 11:20 - 2012-03-26 09:22 - 00000000 ____D C:\Users\daniel\Documents\BioWare
2013-10-05 11:20 - 2011-02-13 09:24 - 00000000 ____D C:\Users\daniel\AppData\Local\Adobe
2013-10-05 11:20 - 2011-02-13 09:08 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Adobe
2013-10-05 11:20 - 2008-05-26 14:26 - 00000000 ____D C:\ProgramData\Adobe
2013-10-05 11:20 - 2008-05-26 14:26 - 00000000 ____D C:\Program Files\Adobe
2013-10-05 11:18 - 2013-10-05 11:18 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-05 11:18 - 2013-10-05 11:18 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-05 11:17 - 2013-10-05 11:17 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-10-05 11:17 - 2013-10-05 11:17 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-10-05 11:17 - 2011-05-08 16:47 - 00000000 ____D C:\Program Files\Common Files\BioWare
2013-10-05 09:16 - 2013-02-25 22:03 - 00000000 ____D C:\Users\daniel\Documents\FIFA 12
2013-10-05 08:34 - 2011-06-15 12:17 - 00004020 _____ C:\Users\daniel\Documents\woertpasser.txt

Files to move or delete:
====================
C:\ProgramData\0ododoz8l.dss
C:\ProgramData\0tbpw.pad
C:\ProgramData\l8zododo0.reg


Some content of TEMP:
====================
C:\Users\daniel\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\daniel\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe
C:\Users\daniel\AppData\Local\Temp\AskSLib.dll
C:\Users\daniel\AppData\Local\Temp\AutoRun.exe
C:\Users\daniel\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\daniel\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\daniel\AppData\Local\Temp\CheatEngine61Clean.exe
C:\Users\daniel\AppData\Local\Temp\chutil.dll
C:\Users\daniel\AppData\Local\Temp\CmdLineExt03.dll
C:\Users\daniel\AppData\Local\Temp\DivXSetup.exe
C:\Users\daniel\AppData\Local\Temp\eauninstall.exe
C:\Users\daniel\AppData\Local\Temp\Fussball Manager 2005_uninst.exe
C:\Users\daniel\AppData\Local\Temp\GDM7C31.exe
C:\Users\daniel\AppData\Local\Temp\GLFD696.tmp.ConduitEngineSetup.exe
C:\Users\daniel\AppData\Local\Temp\incredibar_installer.exe
C:\Users\daniel\AppData\Local\Temp\installerdll10042673.dll
C:\Users\daniel\AppData\Local\Temp\installerdll7306166.dll
C:\Users\daniel\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\daniel\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\daniel\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\daniel\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\daniel\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\daniel\AppData\Local\Temp\oi_{5BC6D814-7819-4C3B-87D2-34F943C977D8}.exe
C:\Users\daniel\AppData\Local\Temp\ose00000.exe
C:\Users\daniel\AppData\Local\Temp\SkypeSetup.exe
C:\Users\daniel\AppData\Local\Temp\softonic-de3.exe
C:\Users\daniel\AppData\Local\Temp\softonic_s_de3.exe
C:\Users\daniel\AppData\Local\Temp\tbsoft.dll
C:\Users\daniel\AppData\Local\Temp\_is9F7D.exe
C:\Users\daniel\AppData\Local\Temp\_isECFD.exe
C:\Users\daniel\AppData\Local\Temp\{900CFAA3-FCEE-4726-834E-1780A301821E}-GoogleUpdateSetup.exe
C:\Users\daniel\AppData\Local\Temp\~tmf4468436978746207341.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-04 18:10

==================== End Of Log ============================