Kein Abgesicherter Modus mehr nach BKA Trojaner

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by SYSTEM on MININT-LJUBU44 on 08-11-2013 17:02:56
Running from I:\
Windows 7 Professional (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1434920 2009-02-27] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [494112 2009-08-26] (Acer Incorporated)
HKLM\...\Run: [BackupManagerTray] - C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [249600 2009-04-11] (NewTech Infosystems, Inc.)
HKLM\...\Run: [VitaKeyPdtWzd] - C:\Program Files\Acer Bio Protection\PdtWzd.exe [3567616 2009-09-05] (Egis Technology Inc.)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [805384 2009-03-05] (Dritek System Inc.)
HKU\DoubleEyE\...\Run: [DrvUpdater] - C:\Users\DoubleEyE\AppData\Roaming\DRPSu\DrvUpdater.exe /hide
IMEO\banking.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\bankingwizard.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\uninstall.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Lsa: [Notification Packages] C:\Program Files\Acer Bio Protection\PwdFilter
Startup: C:\Users\DoubleEyE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
BootExecute: autocheck autochk * 愀甀琀漀挀栀攀挀欀 琀甀爀攀最漀瀀琀

========================== Services (Whitelisted) =================

S2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-08-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-14] (Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-20] (Avira Operations GmbH & Co. KG)
S2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [75048 2009-04-14] ()
S2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [690720 2009-08-26] (Acer Incorporated)
S2 IGBASVC; C:\Program Files\Acer Bio Protection\BASVC.exe [3450368 2009-09-05] (Egis Technology Inc.)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
S2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [306736 2008-10-27] (EgisTec Inc.)
S2 NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [61184 2009-04-11] (NewTech Infosystems, Inc.)
S2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144632 2008-09-23] (NewTech Infosystems, Inc.)
S2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [65536 2007-02-12] (O2Micro International)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2011-12-01] ()
S2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [237568 2009-02-05] (Acer Incorporated)
S2 StarWindServiceAE; C:\Program Files\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
S4 WTGService; C:\Program Files\klarmobil\WTGService.exe [312784 2009-09-25] ()

==================== Drivers (Whitelisted) ====================

S3 A310; C:\Windows\System32\DRIVERS\AVerA310USB.sys [26752 2009-05-06] (AVerMedia TECHNOLOGIES, Inc.)
S0 AlfaFF; C:\Windows\System32\drivers\AlfaFF.sys [42608 2008-07-10] (Alfa Corporation)
S3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2013-05-14] (Avira GmbH)
S1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2013-05-14] (Avira GmbH)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-14] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-20] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-05-14] (Avira Operations GmbH & Co. KG)
S3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [101248 2010-07-28] (AVM Berlin)
S3 BDASwCap; C:\Windows\System32\drivers\AVerA310Cap.sys [47104 2009-05-06] (AVerMedia TECHNOLOGIES, Inc.)
S2 FPSensor; C:\Windows\System32\Drivers\FPSensor.sys [29744 2009-11-13] (EgisTec)
S0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [500504 2012-03-12] (Intel Corporation)
S0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [22296 2012-03-12] (Intel Corporation)
S2 int15; C:\Windows\system32\drivers\int15.sys [69632 2008-03-12] ()
S3 intelkmd; C:\Windows\System32\DRIVERS\igdpmd32.sys [5915648 2009-06-30] (Intel Corporation)
S2 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-10-09] (Egis Incorporated.)
S2 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-10-09] (Egis Incorporated.)
S2 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-10-09] (Egis Incorporated.)
S3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [44544 2009-08-31] (Nuvoton Technology Corporation)
S3 O2MDGRDR; C:\Windows\System32\DRIVERS\o2mdg.sys [62496 2009-11-13] (O2Micro )
S3 O2SDGRDR; C:\Windows\System32\DRIVERS\o2sdg.sys [42912 2010-01-11] (O2Micro )
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [428088 2011-12-23] (Duplex Secure Ltd.)
S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [37920 2010-09-08] (RapidSolution Software AG)
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [87536 2009-03-05] (CyberLink Corp.)
S3 cmnsusbser; system32\DRIVERS\cmnsusbser.sys [x]
S4 [verify-U]_System; system32\drivers\[verify-U]-driver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-08 17:02 - 2013-11-08 17:02 - 00000000 ____D C:\FRST
2013-11-07 19:24 - 2013-11-07 19:28 - 03090502 _____ C:\Users\DoubleEyE\Downloads\BIOS_Acer_3212_A_A.zip
2013-11-07 19:21 - 2013-11-07 19:34 - 181366632 _____ C:\Users\DoubleEyE\Downloads\VGA_ATI_8.64.4_W7x64W7x86_A.zip
2013-11-07 19:20 - 2013-11-07 19:20 - 04890797 _____ C:\Users\DoubleEyE\Downloads\Chipset_Intel_9.1.1.1015_W7x86W7x64_A.zip
2013-11-07 19:17 - 2013-11-07 19:17 - 00000000 ____D C:\Intel
2013-11-07 19:01 - 2013-11-07 19:13 - 39502082 _____ C:\Users\DoubleEyE\Downloads\Win7Vista_151719.zip
2013-11-07 17:46 - 2013-11-07 17:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla
2013-11-07 17:46 - 2013-11-07 17:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla
2013-11-07 17:41 - 2013-11-07 17:41 - 00123568 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-07 17:40 - 2013-11-07 17:41 - 00000000 ____D C:\users\Administrator
2013-11-07 17:40 - 2013-11-07 17:40 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2013-11-07 17:40 - 2013-10-09 20:14 - 00000000 ____D C:\Users\Administrator\Documents\Visual Studio 2010
2013-11-07 17:40 - 2010-07-23 13:28 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia
2013-11-07 17:40 - 2009-11-13 18:51 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help
2013-11-07 08:46 - 2013-11-07 08:46 - 00000000 ____D C:\.Trash-999
2013-11-07 07:18 - 2013-11-07 07:19 - 620679168 _____ C:\Users\DoubleEyE\Desktop\Rescue.iso
2013-11-06 17:16 - 2013-11-06 17:16 - 00227096 _____ C:\Users\DoubleEyE\Downloads\avira_registry_cleaner_de.exe
2013-11-06 17:15 - 2013-11-06 17:31 - 622455544 _____ (Avira GmbH) C:\Users\DoubleEyE\Downloads\rescue-system.exe
2013-11-06 17:06 - 2013-11-06 17:06 - 02296760 _____ C:\Users\DoubleEyE\Downloads\avira_internet_security_suite.exe
2013-11-06 16:07 - 2013-11-06 16:07 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\JOBS
2013-11-04 15:22 - 2013-11-04 15:23 - 00146016 _____ C:\Windows\Minidump\110413-43196-01.dmp
2013-10-30 22:58 - 2013-10-30 22:58 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-30 22:07 - 2013-10-30 22:07 - 00146016 _____ C:\Windows\Minidump\103013-45380-01.dmp
2013-10-30 17:49 - 2013-10-30 17:49 - 00000000 ____D C:\AMD
2013-10-30 17:48 - 2013-10-30 17:49 - 00046292 _____ C:\Windows\DPINST.LOG
2013-10-30 17:48 - 2013-10-30 17:48 - 00000000 ____D C:\Windows\System32\SDA
2013-10-30 17:45 - 2013-11-07 16:51 - 00000000 ____D C:\Program Files\Driver Booster
2013-10-30 17:45 - 2013-10-30 17:45 - 00000996 _____ C:\Users\Public\Desktop\Driver Booster.lnk
2013-10-30 17:45 - 2013-10-30 17:45 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\IObit
2013-10-30 17:45 - 2013-10-30 17:45 - 00000000 ____D C:\ProgramData\IObit
2013-10-30 17:44 - 2013-11-06 16:23 - 00000000 ____D C:\Windows\System32\appmgmt
2013-10-30 17:38 - 2013-10-30 17:38 - 00146016 _____ C:\Windows\Minidump\103013-38516-01.dmp
2013-10-29 23:03 - 2013-10-29 23:03 - 00000000 ____D C:\Windows\CSC
2013-10-29 22:56 - 2013-10-29 22:56 - 00000000 ____D C:\ProgramData\VS
2013-10-29 22:51 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-10-29 22:51 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-29 22:41 - 2009-06-10 22:14 - 00053551 _____ C:\Windows\Professional.xml
2013-10-29 22:29 - 2013-10-29 22:30 - 00146016 _____ C:\Windows\Minidump\102913-47564-01.dmp
2013-10-29 22:26 - 2013-10-29 22:26 - 00001952 _____ C:\Users\DoubleEyE\Desktop\Windows-Kompatibilitätsbericht.htm
2013-10-29 20:33 - 2013-10-29 20:33 - 00146016 _____ C:\Windows\Minidump\102913-41979-01.dmp
2013-10-28 21:07 - 2013-10-28 21:07 - 00146016 _____ C:\Windows\Minidump\102813-41075-01.dmp
2013-10-25 01:39 - 2013-10-25 02:01 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-25 01:38 - 2013-10-25 01:39 - 09212696 _____ (SurfRight B.V.) C:\Users\DoubleEyE\Downloads\hitmanpro.exe
2013-10-24 02:53 - 2013-10-24 02:53 - 00146016 _____ C:\Windows\Minidump\102413-53711-01.dmp
2013-10-24 02:42 - 2013-10-24 02:42 - 00000000 ____D C:\Windows\pss
2013-10-22 23:40 - 2013-10-22 23:40 - 102486297 _____ C:\Windows\System32\⊟诠Z
2013-10-22 03:36 - 2013-10-22 03:37 - 00146016 _____ C:\Windows\Minidump\102213-36847-01.dmp
2013-10-22 02:54 - 2013-10-22 02:54 - 00146032 _____ C:\Windows\Minidump\102213-37799-01.dmp
2013-10-22 02:20 - 2013-10-22 02:20 - 00146016 _____ C:\Windows\Minidump\102213-40716-01.dmp
2013-10-22 02:15 - 2013-10-22 02:15 - 00146032 _____ C:\Windows\Minidump\102213-65130-01.dmp
2013-10-22 02:03 - 2013-10-22 02:03 - 00146032 _____ C:\Windows\Minidump\102213-41480-01.dmp
2013-10-22 01:49 - 2013-10-22 01:49 - 102278179 _____ C:\Windows\System32\�ⅶ_
2013-10-21 21:49 - 2013-10-21 21:49 - 102211354 _____ C:\Windows\System32\컙c
2013-10-21 21:48 - 2013-10-21 21:48 - 00146032 _____ C:\Windows\Minidump\102113-39015-01.dmp
2013-10-20 21:17 - 2013-10-20 21:17 - 00000000 ____D C:\Users\DoubleEyE\Desktop\Ashu
2013-10-18 17:37 - 2013-10-18 17:37 - 101792164 _____ C:\Windows\System32\㬫䎢}
2013-10-18 15:37 - 2013-10-18 15:37 - 101760430 _____ C:\Windows\System32\뺍刐4
2013-10-17 14:26 - 2013-10-17 14:26 - 101544623 _____ C:\Windows\System32\萟䶍f
2013-10-17 14:17 - 2013-10-17 14:23 - 00002276 _____ C:\Windows\logboot_17.10.2013.tureg.log
2013-10-16 15:55 - 2013-10-16 15:55 - 101406750 _____ C:\Windows\System32\ຑۚd
2013-10-16 14:02 - 2013-10-16 14:02 - 00146032 _____ C:\Windows\Minidump\101613-33836-01.dmp
2013-10-14 19:48 - 2013-10-14 19:48 - 100975419 _____ C:\Windows\System32\ﱳn
2013-10-14 16:48 - 2013-10-14 16:48 - 00146016 _____ C:\Windows\Minidump\101413-46394-01.dmp
2013-10-10 22:01 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-10 22:01 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-10 22:01 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-10 22:01 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-10 22:01 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-10 22:01 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-10-10 20:37 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-10-10 20:37 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-10-10 20:37 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll
2013-10-10 20:37 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-10-10 20:37 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-10-10 20:37 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-10-10 20:37 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2013-10-10 20:37 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2013-10-10 20:37 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-10 20:37 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll
2013-10-10 20:37 - 2013-08-27 09:21 - 01077760 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-10-10 20:37 - 2013-08-27 09:21 - 00808448 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-10-10 20:37 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-10-10 20:37 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 20:37 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-10 20:37 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-10 20:37 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2013-10-10 20:37 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2013-10-10 20:37 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-10 20:37 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2013-10-10 20:37 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-10 20:37 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-10 20:37 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-10 20:37 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-10-10 20:37 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-10-10 20:37 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-10-10 20:37 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-10 20:37 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-10 18:54 - 2013-10-10 20:54 - 100332977 _____ C:\Windows\System32\ᖬ挬c
2013-10-09 20:14 - 2013-10-09 20:14 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010
2013-10-09 20:14 - 2013-10-09 20:14 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010
2013-10-09 19:39 - 2013-10-09 19:39 - 100163860 _____ C:\Windows\System32\풬飇^
2013-10-09 19:37 - 2013-10-09 19:37 - 00139264 _____ C:\Windows\Minidump\100913-40544-01.dmp

==================== One Month Modified Files and Folders =======

2013-11-08 17:02 - 2013-11-08 17:02 - 00000000 ____D C:\FRST
2013-11-08 16:59 - 2013-08-12 14:17 - 01433257 _____ C:\Windows\WindowsUpdate.log
2013-11-08 16:21 - 2009-11-13 19:11 - 00007062 _____ C:\Windows\System32\PerfStringBackup.INI
2013-11-08 15:35 - 2009-11-13 18:28 - 00016240 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-08 15:35 - 2009-11-13 18:28 - 00016240 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-08 15:29 - 2012-06-29 03:27 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\Dropbox
2013-11-08 15:28 - 2013-08-12 14:31 - 00555353 _____ C:\Windows\setupact.log
2013-11-08 15:28 - 2012-06-29 03:30 - 00000000 ___RD C:\Users\DoubleEyE\Dropbox
2013-11-07 19:34 - 2013-11-07 19:21 - 181366632 _____ C:\Users\DoubleEyE\Downloads\VGA_ATI_8.64.4_W7x64W7x86_A.zip
2013-11-07 19:28 - 2013-11-07 19:24 - 03090502 _____ C:\Users\DoubleEyE\Downloads\BIOS_Acer_3212_A_A.zip
2013-11-07 19:20 - 2013-11-07 19:20 - 04890797 _____ C:\Users\DoubleEyE\Downloads\Chipset_Intel_9.1.1.1015_W7x86W7x64_A.zip
2013-11-07 19:17 - 2013-11-07 19:17 - 00000000 ____D C:\Intel
2013-11-07 19:13 - 2013-11-07 19:01 - 39502082 _____ C:\Users\DoubleEyE\Downloads\Win7Vista_151719.zip
2013-11-07 17:46 - 2013-11-07 17:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla
2013-11-07 17:46 - 2013-11-07 17:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla
2013-11-07 17:41 - 2013-11-07 17:41 - 00123568 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-07 17:41 - 2013-11-07 17:40 - 00000000 ____D C:\users\Administrator
2013-11-07 17:40 - 2013-11-07 17:40 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2013-11-07 17:40 - 2013-11-07 17:40 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2013-11-07 16:58 - 2009-11-13 18:29 - 00000000 ____D C:\users\DoubleEyE
2013-11-07 16:51 - 2013-10-30 17:45 - 00000000 ____D C:\Program Files\Driver Booster
2013-11-07 16:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\wfp
2013-11-07 16:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2013-11-07 08:46 - 2013-11-07 08:46 - 00000000 ____D C:\.Trash-999
2013-11-07 07:19 - 2013-11-07 07:18 - 620679168 _____ C:\Users\DoubleEyE\Desktop\Rescue.iso
2013-11-06 17:31 - 2013-11-06 17:15 - 622455544 _____ (Avira GmbH) C:\Users\DoubleEyE\Downloads\rescue-system.exe
2013-11-06 17:16 - 2013-11-06 17:16 - 00227096 _____ C:\Users\DoubleEyE\Downloads\avira_registry_cleaner_de.exe
2013-11-06 17:06 - 2013-11-06 17:06 - 02296760 _____ C:\Users\DoubleEyE\Downloads\avira_internet_security_suite.exe
2013-11-06 16:52 - 2011-10-08 19:30 - 00000000 ____D C:\Program Files\Steam
2013-11-06 16:52 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\NDF
2013-11-06 16:51 - 2013-05-14 21:42 - 00000000 ____D C:\Program Files\Avira
2013-11-06 16:51 - 2010-07-28 23:37 - 00000000 ____D C:\Users\DoubleEyE\AppData\Local\Apps\2.0
2013-11-06 16:41 - 2010-07-28 23:37 - 00000000 ____D C:\Users\DoubleEyE\AppData\Local\Deployment
2013-11-06 16:23 - 2013-10-30 17:44 - 00000000 ____D C:\Windows\System32\appmgmt
2013-11-06 16:07 - 2013-11-06 16:07 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\JOBS
2013-11-05 23:20 - 2013-03-11 22:40 - 00000761 _____ C:\Users\DoubleEyE\Desktop\Adresse Anja.txt
2013-11-04 20:18 - 2011-06-22 14:55 - 00000000 ____D C:\Users\DoubleEyE\Desktop\Bilder
2013-11-04 15:23 - 2013-11-04 15:22 - 00146016 _____ C:\Windows\Minidump\110413-43196-01.dmp
2013-11-04 15:22 - 2013-08-12 17:54 - 491999317 _____ C:\Windows\MEMORY.DMP
2013-11-04 15:22 - 2011-06-01 18:56 - 00000000 ____D C:\Windows\Minidump
2013-10-31 17:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-31 16:26 - 2012-04-25 04:14 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-30 22:58 - 2013-10-30 22:58 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-30 22:07 - 2013-10-30 22:07 - 00146016 _____ C:\Windows\Minidump\103013-45380-01.dmp
2013-10-30 17:50 - 2012-11-07 18:32 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-30 17:49 - 2013-10-30 17:49 - 00000000 ____D C:\AMD
2013-10-30 17:49 - 2013-10-30 17:48 - 00046292 _____ C:\Windows\DPINST.LOG
2013-10-30 17:48 - 2013-10-30 17:48 - 00000000 ____D C:\Windows\System32\SDA
2013-10-30 17:48 - 2013-06-11 04:53 - 00000000 ____D C:\Program Files\O2Micro
2013-10-30 17:48 - 2009-04-14 00:07 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-10-30 17:45 - 2013-10-30 17:45 - 00000996 _____ C:\Users\Public\Desktop\Driver Booster.lnk
2013-10-30 17:45 - 2013-10-30 17:45 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\IObit
2013-10-30 17:45 - 2013-10-30 17:45 - 00000000 ____D C:\ProgramData\IObit
2013-10-30 17:38 - 2013-10-30 17:38 - 00146016 _____ C:\Windows\Minidump\103013-38516-01.dmp
2013-10-30 00:08 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-29 23:03 - 2013-10-29 23:03 - 00000000 ____D C:\Windows\CSC
2013-10-29 23:03 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-10-29 23:03 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\security
2013-10-29 23:02 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\System32\restore
2013-10-29 22:56 - 2013-10-29 22:56 - 00000000 ____D C:\ProgramData\VS
2013-10-29 22:30 - 2013-10-29 22:29 - 00146016 _____ C:\Windows\Minidump\102913-47564-01.dmp
2013-10-29 22:26 - 2013-10-29 22:26 - 00001952 _____ C:\Users\DoubleEyE\Desktop\Windows-Kompatibilitätsbericht.htm
2013-10-29 22:23 - 2013-08-12 14:31 - 00000000 _____ C:\Windows\setuperr.log
2013-10-29 22:23 - 2009-11-13 17:18 - 00002544 _____ C:\Windows\diagwrn.xml
2013-10-29 22:23 - 2009-11-13 17:18 - 00001890 _____ C:\Windows\diagerr.xml
2013-10-29 20:33 - 2013-10-29 20:33 - 00146016 _____ C:\Windows\Minidump\102913-41979-01.dmp
2013-10-28 21:07 - 2013-10-28 21:07 - 00146016 _____ C:\Windows\Minidump\102813-41075-01.dmp
2013-10-28 20:46 - 2009-10-07 18:36 - 01328640 ___SH C:\Users\DoubleEyE\Desktop\Thumbs.db
2013-10-25 02:09 - 2010-04-23 15:26 - 00008192 _____ C:\Users\DoubleEyE\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-25 02:01 - 2013-10-25 01:39 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-25 01:39 - 2013-10-25 01:38 - 09212696 _____ (SurfRight B.V.) C:\Users\DoubleEyE\Downloads\hitmanpro.exe
2013-10-24 02:53 - 2013-10-24 02:53 - 00146016 _____ C:\Windows\Minidump\102413-53711-01.dmp
2013-10-24 02:42 - 2013-10-24 02:42 - 00000000 ____D C:\Windows\pss
2013-10-24 00:47 - 2010-10-14 18:06 - 00000198 _____ C:\Users\DoubleEyE\Desktop\Serial AntiVir.txt
2013-10-23 00:42 - 2009-10-15 17:27 - 00000000 ____D C:\Users\DoubleEyE\AppData\Roaming\vlc
2013-10-22 23:40 - 2013-10-22 23:40 - 102486297 _____ C:\Windows\System32\⊟诠Z
2013-10-22 03:37 - 2013-10-22 03:36 - 00146016 _____ C:\Windows\Minidump\102213-36847-01.dmp
2013-10-22 02:54 - 2013-10-22 02:54 - 00146032 _____ C:\Windows\Minidump\102213-37799-01.dmp
2013-10-22 02:27 - 2009-09-15 18:19 - 00000000 ____D C:\Users\DoubleEyE\AppData\Local\Microsoft Help
2013-10-22 02:20 - 2013-10-22 02:20 - 00146016 _____ C:\Windows\Minidump\102213-40716-01.dmp
2013-10-22 02:15 - 2013-10-22 02:15 - 00146032 _____ C:\Windows\Minidump\102213-65130-01.dmp
2013-10-22 02:03 - 2013-10-22 02:03 - 00146032 _____ C:\Windows\Minidump\102213-41480-01.dmp
2013-10-22 01:49 - 2013-10-22 01:49 - 102278179 _____ C:\Windows\System32\�ⅶ_
2013-10-21 21:49 - 2013-10-21 21:49 - 102211354 _____ C:\Windows\System32\컙c
2013-10-21 21:48 - 2013-10-21 21:48 - 00146032 _____ C:\Windows\Minidump\102113-39015-01.dmp
2013-10-20 21:17 - 2013-10-20 21:17 - 00000000 ____D C:\Users\DoubleEyE\Desktop\Ashu
2013-10-18 17:37 - 2013-10-18 17:37 - 101792164 _____ C:\Windows\System32\㬫䎢}
2013-10-18 15:37 - 2013-10-18 15:37 - 101760430 _____ C:\Windows\System32\뺍刐4
2013-10-17 14:26 - 2013-10-17 14:26 - 101544623 _____ C:\Windows\System32\萟䶍f
2013-10-17 14:23 - 2013-10-17 14:17 - 00002276 _____ C:\Windows\logboot_17.10.2013.tureg.log
2013-10-17 14:23 - 2009-07-14 03:03 - 75497472 _____ C:\Windows\System32\config\SOFTWARE_tureg_old
2013-10-17 14:23 - 2009-07-14 03:03 - 22544384 _____ C:\Windows\System32\config\SYSTEM_tureg_old
2013-10-17 14:23 - 2009-07-14 03:03 - 00032768 _____ C:\Windows\System32\config\SECURITY_tureg_old
2013-10-16 18:02 - 2009-07-14 03:03 - 01572864 _____ C:\Windows\System32\config\DEFAULT_tureg_old
2013-10-16 18:02 - 2009-07-14 03:03 - 00061440 _____ C:\Windows\System32\config\SAM_tureg_old
2013-10-16 15:55 - 2013-10-16 15:55 - 101406750 _____ C:\Windows\System32\ຑۚd
2013-10-16 14:02 - 2013-10-16 14:02 - 00146032 _____ C:\Windows\Minidump\101613-33836-01.dmp
2013-10-14 19:48 - 2013-10-14 19:48 - 100975419 _____ C:\Windows\System32\ﱳn
2013-10-14 16:48 - 2013-10-14 16:48 - 00146016 _____ C:\Windows\Minidump\101413-46394-01.dmp
2013-10-14 15:52 - 2009-07-14 05:33 - 02382152 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-10 22:18 - 2009-04-14 00:20 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-10 22:15 - 2013-08-13 21:54 - 00000000 ____D C:\Windows\System32\MRT
2013-10-10 22:04 - 2009-11-19 12:30 - 78106760 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-10-10 22:03 - 2010-10-28 03:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-10 20:54 - 2013-10-10 18:54 - 100332977 _____ C:\Windows\System32\ᖬ挬c
2013-10-10 17:36 - 2012-03-31 15:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-10-10 17:36 - 2011-05-14 13:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-10-10 16:52 - 2013-08-12 20:14 - 00011828 _____ C:\Windows\PFRO.log
2013-10-09 20:35 - 2013-10-08 21:33 - 00000000 ____D C:\Program Files\Debugging Tools for Windows (x86)
2013-10-09 20:14 - 2013-11-07 17:40 - 00000000 ____D C:\Users\Administrator\Documents\Visual Studio 2010
2013-10-09 20:14 - 2013-10-09 20:14 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010
2013-10-09 20:14 - 2013-10-09 20:14 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010
2013-10-09 19:39 - 2013-10-09 19:39 - 100163860 _____ C:\Windows\System32\풬飇^
2013-10-09 19:37 - 2013-10-09 19:37 - 00139264 _____ C:\Windows\Minidump\100913-40544-01.dmp

Files to move or delete:
====================
C:\Users\DoubleEyE\AppData\Roaming\desktop.ini
C:\Users\DoubleEyE\AppData\Roaming\skype.ini
C:\ProgramData\iwdziir.pad
C:\ProgramData\ras_0oed.pad


==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

39
Restore point made on: 2013-10-15 20:21:20
Restore point made on: 2013-10-16 18:00:59
Restore point made on: 2013-10-17 19:58:25
Restore point made on: 2013-10-18 18:24:15
Restore point made on: 2013-10-21 02:00:56
Restore point made on: 2013-10-21 04:35:24
Restore point made on: 2013-10-22 02:00:37
Restore point made on: 2013-10-22 02:25:12
Restore point made on: 2013-10-22 23:43:51
Restore point made on: 2013-10-23 02:00:38
Restore point made on: 2013-10-23 04:05:35
Restore point made on: 2013-10-24 03:43:54
Restore point made on: 2013-10-25 02:00:46
Restore point made on: 2013-10-25 03:12:43
Restore point made on: 2013-10-28 18:02:43
Restore point made on: 2013-10-28 22:47:35
Restore point made on: 2013-10-29 22:38:08
Restore point made on: 2013-10-29 22:39:18
Restore point made on: 2013-10-29 22:51:51
Restore point made on: 2013-10-30 00:41:13
Restore point made on: 2013-10-30 03:00:26
Restore point made on: 2013-10-30 17:47:00
Restore point made on: 2013-10-30 17:47:43
Restore point made on: 2013-10-30 17:50:12
Restore point made on: 2013-10-30 23:41:42
Restore point made on: 2013-10-31 17:49:57
Restore point made on: 2013-11-03 18:41:35
Restore point made on: 2013-11-03 22:24:44
Restore point made on: 2013-11-04 22:50:58
Restore point made on: 2013-11-06 00:41:40
Restore point made on: 2013-11-06 03:00:40
Restore point made on: 2013-11-06 05:24:30
Restore point made on: 2013-11-06 16:22:32
Restore point made on: 2013-11-06 16:47:33
Restore point made on: 2013-11-06 17:03:08
Restore point made on: 2013-11-06 19:12:15
Restore point made on: 2013-11-07 16:20:58
Restore point made on: 2013-11-07 17:03:36
Restore point made on: 2013-11-07 21:10:06

==================== Memory info =========================== 

Percentage of memory in use: 13%
Total physical RAM: 3996.8 MB
Available physical RAM: 3471.86 MB
Total Pagefile: 3995.07 MB
Available Pagefile: 3474.06 MB
Total Virtual: 2047.88 MB
Available Virtual: 1944.3 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:450.3 GB) (Free:169.97 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:365.76 GB) (Free:130.8 GB) NTFS
Drive e: (MP3) (Fixed) (Total:50 GB) (Free:13.58 GB) NTFS
Drive f: (FOTOS) (Fixed) (Total:50 GB) (Free:25.09 GB) NTFS
Drive g: (PQSERVICE) (Fixed) (Total:12 GB) (Free:0.86 GB) NTFS
Drive h: (Ubuntu-Live-Custom) (CDROM) (Total:0.58 GB) (Free:0 GB) CDFS
Drive i: (MULTIBOOT) (Removable) (Total:0.97 GB) (Free:0.96 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 34F86D2E)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=450 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 GB) - (Type=12)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: B301317D)
Partition 1: (Not Active) - (Size=366 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 992 MB) (Disk ID: 91F72D24)
Partition 1: (Active) - (Size=992 MB) - (Type=0B)


LastRegBack: 2013-10-29 23:55

==================== End Of Log ============================