Internet Trojaner (Awesomeph)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Toshiba (administrator) on TOSHIBA-TOSH on 31-01-2014 15:54:27
Running from C:\Users\Toshiba\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\System32\rpcnetp.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-09-24] (Google Inc.)
HKU\Default\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
HKU\Default User\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => File Not Found
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ
SearchScopes: HKCU - {9CC7D7CA-ED4E-4433-8557-35EAA7637672} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
SearchScopes: HKCU - {CA8EDC81-2FB3-4FC4-9643-32F114E0F75B} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default
FF NewTab: hxxp://www.awesomehp.com/newtab/?type=nt&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1391101198&from=amt&uid=ST9640320AS_5WX3HQQQXXXX5WX3HQQQ
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF Extension: Youtube MP3 Podcaster - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default\Extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2014-01-30]
FF Extension: Extension_Protected - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-01-30]
FF Extension: Lightning Speed Dial - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: No Name - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\64u2szlx.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116104 2009-08-26] (Toshiba Europe GmbH)

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [416768 2009-06-10] (Realtek Semiconductor Corporation                           )
S3 cpuz134; \??\C:\Users\Toshiba\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-31 15:54 - 2014-01-31 15:54 - 00012115 _____ C:\Users\Toshiba\Desktop\FRST.txt
2014-01-31 15:50 - 2014-01-31 15:50 - 02079744 _____ (Farbar) C:\Users\Toshiba\Downloads\FRST64.exe
2014-01-31 15:37 - 2014-01-31 15:37 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-31 15:37 - 2014-01-31 15:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Nico Mak Computing
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-31 15:37 - 2013-03-15 17:10 - 00020480 _____ C:\Windows\system32\wsusnative64.exe
2014-01-31 14:50 - 2014-01-31 14:50 - 00000000 ____D C:\Users\Toshiba\AppData\Local\AVG SafeGuard toolbar
2014-01-31 14:48 - 2014-01-31 14:51 - 00000155 _____ C:\Windows\Reimage.ini
2014-01-30 22:13 - 2014-01-31 15:54 - 00000000 ____D C:\FRST
2014-01-30 22:13 - 2014-01-30 22:13 - 02079744 _____ (Farbar) C:\Users\Toshiba\Desktop\FRST64.exe
2014-01-30 22:10 - 2014-01-30 22:10 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-30 22:05 - 2014-01-31 15:25 - 00000336 _____ C:\Windows\setupact.log
2014-01-30 22:05 - 2014-01-30 22:05 - 00017356 _____ C:\Windows\PFRO.log
2014-01-30 22:05 - 2014-01-30 22:05 - 00000000 _____ C:\Windows\setuperr.log
2014-01-30 21:15 - 2014-01-30 21:15 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Malwarebytes
2014-01-30 21:14 - 2014-01-30 21:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-30 21:14 - 2014-01-30 21:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-30 21:14 - 2014-01-30 21:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 21:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-30 21:12 - 2014-01-30 21:12 - 02347384 _____ (ESET) C:\Users\Toshiba\Desktop\esetsmartinstaller_enu.exe
2014-01-30 21:11 - 2014-01-30 21:11 - 01166132 _____ C:\Users\Toshiba\Desktop\adwcleaner.exe
2014-01-30 20:34 - 2014-01-30 20:34 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-30 20:34 - 2014-01-30 20:34 - 00000000 _____ C:\autoexec.bat
2014-01-30 20:33 - 2014-01-31 15:22 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-30 19:33 - 2014-01-30 19:33 - 00000000 ____D C:\ProgramData\CDB
2014-01-30 19:30 - 2014-01-30 20:12 - 00000163 _____ C:\Windows\efix.ini
2014-01-30 18:53 - 2014-01-30 18:53 - 00000326 _____ C:\Users\Toshiba\Desktop\Zdjęcia profilowe - Iwona Przygodzka.url
2014-01-30 18:04 - 2014-01-30 19:02 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Toshiba\AppData\Local\genienext
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Toshiba\.android
2014-01-30 18:00 - 2014-01-30 19:05 - 00000000 ____D C:\ProgramData\WPM
2014-01-30 18:00 - 2014-01-30 19:04 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-30 18:00 - 2014-01-30 19:02 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-30 17:59 - 2014-01-30 22:04 - 00000000 ____D C:\Program Files (x86)\Bench
2014-01-30 17:59 - 2014-01-30 19:04 - 00000306 __RSH C:\ProgramData\ntuser.pol
2014-01-20 09:15 - 2014-01-31 14:20 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9AEB2D22-8416-4C07-86B6-89B6475EC34A}
2014-01-16 20:56 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 20:56 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 20:56 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 20:56 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-05 17:37 - 2014-01-05 17:37 - 00002038 _____ C:\Users\Public\Desktop\Spiel The Path of Hercules.lnk
2014-01-05 17:37 - 2014-01-05 17:37 - 00001270 _____ C:\Users\Public\Desktop\Weitere fantastische Spiele.lnk
2014-01-05 17:36 - 2014-01-05 17:37 - 00000000 ____D C:\Program Files (x86)\The Path of Hercules
2014-01-05 17:36 - 2014-01-05 17:36 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Path of Hercules

==================== One Month Modified Files and Folders =======

2014-01-31 15:54 - 2014-01-31 15:54 - 00012115 _____ C:\Users\Toshiba\Desktop\FRST.txt
2014-01-31 15:54 - 2014-01-30 22:13 - 00000000 ____D C:\FRST
2014-01-31 15:50 - 2014-01-31 15:50 - 02079744 _____ (Farbar) C:\Users\Toshiba\Downloads\FRST64.exe
2014-01-31 15:37 - 2014-01-31 15:37 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-31 15:37 - 2014-01-31 15:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Nico Mak Computing
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-31 15:37 - 2014-01-31 15:37 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-31 15:32 - 2009-07-14 05:45 - 00016080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-31 15:32 - 2009-07-14 05:45 - 00016080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-31 15:29 - 2013-10-08 11:35 - 01051320 _____ C:\Windows\WindowsUpdate.log
2014-01-31 15:25 - 2014-01-30 22:05 - 00000336 _____ C:\Windows\setupact.log
2014-01-31 15:25 - 2013-10-16 07:28 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.dll
2014-01-31 15:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-31 15:24 - 2013-10-16 07:27 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.exe
2014-01-31 15:24 - 2013-10-08 11:30 - 00017920 _____ C:\Windows\system32\rpcnetp.exe
2014-01-31 15:22 - 2014-01-30 20:33 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-31 14:51 - 2014-01-31 14:48 - 00000155 _____ C:\Windows\Reimage.ini
2014-01-31 14:50 - 2014-01-31 14:50 - 00000000 ____D C:\Users\Toshiba\AppData\Local\AVG SafeGuard toolbar
2014-01-31 14:20 - 2014-01-20 09:15 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9AEB2D22-8416-4C07-86B6-89B6475EC34A}
2014-01-31 08:37 - 2009-07-14 18:58 - 00654166 _____ C:\Windows\system32\perfh007.dat
2014-01-31 08:37 - 2009-07-14 18:58 - 00130006 _____ C:\Windows\system32\perfc007.dat
2014-01-31 08:37 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-30 22:15 - 2013-11-19 14:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-30 22:13 - 2014-01-30 22:13 - 02079744 _____ (Farbar) C:\Users\Toshiba\Desktop\FRST64.exe
2014-01-30 22:10 - 2014-01-30 22:10 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-30 22:07 - 2013-10-13 14:24 - 00000000 ____D C:\AdwCleaner
2014-01-30 22:05 - 2014-01-30 22:05 - 00017356 _____ C:\Windows\PFRO.log
2014-01-30 22:05 - 2014-01-30 22:05 - 00000000 _____ C:\Windows\setuperr.log
2014-01-30 22:04 - 2014-01-30 17:59 - 00000000 ____D C:\Program Files (x86)\Bench
2014-01-30 21:15 - 2014-01-30 21:15 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Malwarebytes
2014-01-30 21:14 - 2014-01-30 21:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-30 21:14 - 2014-01-30 21:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-30 21:14 - 2014-01-30 21:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 21:14 - 2013-10-12 11:26 - 00000000 ____D C:\Users\Toshiba\AppData\Local\Google
2014-01-30 21:14 - 2009-09-24 15:29 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-30 21:12 - 2014-01-30 21:12 - 02347384 _____ (ESET) C:\Users\Toshiba\Desktop\esetsmartinstaller_enu.exe
2014-01-30 21:11 - 2014-01-30 21:11 - 01166132 _____ C:\Users\Toshiba\Desktop\adwcleaner.exe
2014-01-30 20:45 - 2009-09-24 15:32 - 00002083 _____ C:\Users\Public\Desktop\Toshiba-Garantieregistrierung.lnk
2014-01-30 20:34 - 2014-01-30 20:34 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-30 20:34 - 2014-01-30 20:34 - 00000000 _____ C:\autoexec.bat
2014-01-30 20:12 - 2014-01-30 19:30 - 00000163 _____ C:\Windows\efix.ini
2014-01-30 19:33 - 2014-01-30 19:33 - 00000000 ____D C:\ProgramData\CDB
2014-01-30 19:28 - 2013-10-08 12:21 - 00001316 _____ C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-30 19:21 - 2013-10-13 12:56 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-30 19:05 - 2014-01-30 18:00 - 00000000 ____D C:\ProgramData\WPM
2014-01-30 19:04 - 2014-01-30 18:00 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-30 19:04 - 2014-01-30 17:59 - 00000306 __RSH C:\ProgramData\ntuser.pol
2014-01-30 19:02 - 2014-01-30 18:04 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-30 19:02 - 2014-01-30 18:00 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-30 18:53 - 2014-01-30 18:53 - 00000326 _____ C:\Users\Toshiba\Desktop\Zdjęcia profilowe - Iwona Przygodzka.url
2014-01-30 18:40 - 2009-09-24 14:47 - 00000000 ____D C:\Windows\Panther
2014-01-30 18:08 - 2013-10-13 12:55 - 00000000 ____D C:\Users\Toshiba\AppData\Local\Mobogenie
2014-01-30 18:06 - 2013-10-13 12:55 - 00000000 ____D C:\Users\Toshiba\AppData\Local\cache
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Toshiba\AppData\Local\genienext
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Toshiba\.android
2014-01-30 18:04 - 2013-10-08 12:13 - 00000000 ____D C:\Users\Toshiba
2014-01-30 17:59 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2014-01-30 17:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2014-01-30 17:40 - 2013-10-12 20:03 - 00000362 _____ C:\Users\Toshiba\Desktop\Sparkasse Paderborn-Detmold (47650130) - Online-Banking Anmelden.url
2014-01-29 19:15 - 2013-10-14 19:15 - 00000000 ____D C:\Users\Toshiba\Documents\Zdzislaw
2014-01-29 19:15 - 2013-10-13 12:41 - 00001222 _____ C:\Users\Toshiba\AppData\Roaming\wklnhst.dat
2014-01-29 19:15 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-27 08:21 - 2013-10-13 11:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-26 21:01 - 2013-10-13 11:29 - 00000000 ____D C:\Users\Toshiba\AppData\Local\Adobe
2014-01-26 20:56 - 2013-10-13 11:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 20:56 - 2013-10-13 11:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 20:56 - 2013-10-13 11:32 - 00003824 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-25 19:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-19 09:44 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-19 08:33 - 2013-10-12 19:34 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-18 20:31 - 2013-12-18 18:00 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Playrix Entertainment
2014-01-18 17:17 - 2009-07-14 05:45 - 00377616 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 22:14 - 2013-10-15 19:03 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 22:14 - 2009-09-24 15:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-16 22:11 - 2013-10-15 19:03 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-07 22:22 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-05 17:46 - 2013-12-18 17:54 - 00000000 ____D C:\BigFishCache
2014-01-05 17:37 - 2014-01-05 17:37 - 00002038 _____ C:\Users\Public\Desktop\Spiel The Path of Hercules.lnk
2014-01-05 17:37 - 2014-01-05 17:37 - 00001270 _____ C:\Users\Public\Desktop\Weitere fantastische Spiele.lnk
2014-01-05 17:37 - 2014-01-05 17:36 - 00000000 ____D C:\Program Files (x86)\The Path of Hercules
2014-01-05 17:36 - 2014-01-05 17:36 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Path of Hercules
2014-01-02 14:12 - 2013-10-27 10:45 - 00000000 ____D C:\Users\Toshiba\Documents\Iwona

Some content of TEMP:
====================
C:\Users\Toshiba\AppData\Local\Temp\eFixProPackage.exe
C:\Users\Toshiba\AppData\Local\Temp\oi_{30153DB2-C4FA-40F9-865F-020A951FFF10}.exe
C:\Users\Toshiba\AppData\Local\Temp\oi_{C8A99669-DD17-4BCA-AC55-BA7FC64DB4D9}.exe
C:\Users\Toshiba\AppData\Local\Temp\Quarantine.exe
C:\Users\Toshiba\AppData\Local\Temp\ReimageExpressSetup.exe
C:\Users\Toshiba\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Toshiba\AppData\Local\Temp\SHSetup.exe
C:\Users\Toshiba\AppData\Local\Temp\speedupmypc.exe
C:\Users\Toshiba\AppData\Local\Temp\UNINSTALL.EXE


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 12:52

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01
Ran by Toshiba at 2014-01-31 15:55:01
Running from C:\Users\Toshiba\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe AIR (x32 Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.2.8870 - Adobe Systems Inc.) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.38 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Deutsch (x32 Version: 9.5.5 - Adobe Systems Incorporated)
Amazon.de (x32 Version:  - Amazon EU S.a.r.L.)
Benutzerhandbuch EPSON BX630FW Series (x32 Version:  - )
Big Fish: Game Manager (x32 Version: 3.2.0.7 - )
CCleaner (Version: 4.06 - Piriform)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Direct DiscRecorder (x32 Version: 1.00.0000 - Corel Corporation) Hidden
Download Navigator (x32 Version: 1.1.0 - SEIKO EPSON CORPORATION)
DVD MovieFactory for TOSHIBA (x32 Version: 7.0.0 - Corel Corporation)
DVD MovieFactory for TOSHIBA (x32 Version: 7.0.0 - Corel Corporation) Hidden
eBay (x32 Version: 1.0.4 - eBay Inc.)
Empire Earth (x32 Version:  - )
EPSON BX630FW Series Printer Uninstall (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (x32 Version: 2.3.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (x32 Version: 2.50.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (x32 Version: 1.20.00 - SEIKO EPSON CORPORATION)
EPSON Scan (x32 Version:  - Seiko Epson Corporation)
EpsonNet Print (x32 Version: 2.4j - SEIKO EPSON CORPORATION)
ESET Online Scanner v3 (x32 Version:  - )
Extended Update (HKCU Version:  - )
Fishdom (x32 Version:  - )
Fishdom 3 Sammleredition (x32 Version:  - )
Fishdom: Frosty Splash (x32 Version:  - )
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HDMI Control Manager (Version: 2.0 - TOSHIBA) Hidden
HDMI Control Manager (x32 Version: 2.0 - TOSHIBA)
HDMI Control Manager (x32 Version: 2.0 - TOSHIBA) Hidden
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
InterVideo WinDVD BD for TOSHIBA (x32 Version: 8.0.20.107 - InterVideo Inc.)
InterVideo WinDVD BD for TOSHIBA (x32 Version: 8.0.20.107 - InterVideo Inc.) Hidden
Java(TM) 6 Update 14 (x32 Version: 6.0.140 - Sun Microsystems, Inc.)
JMicron Flash Media Controller Driver (x32 Version: 1.0.32.1 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (x32 Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (x32 Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 25.0.1 (x86 en-US) (x32 Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 25.0.1 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Netzwerkhandbuch EPSON BX630FW Series (x32 Version:  - )
NVIDIA Drivers (Version: 1.4 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.09.0428 - NVIDIA Corporation)
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Prince of Persia T2T (x32 Version: 1.00.999 - Ubisoft)
Prince of Persia The Two Thrones (x32 Version: 1.00.999 - Ubisoft) Hidden
Realtek 8136 8168 8169 Ethernet Driver (x32 Version: 1.00.0005 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5904 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (x32 Version: 2.00.0006 - Realtek)
Regi (Version: 1.00.0000 - InterVideo Inc.) Hidden
Skype(TM) Launcher (x32 Version:  - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (Version: 14.0.1.1 - Synaptics Incorporated)
The Path of Hercules (x32 Version:  - )
Toshiba Assist (x32 Version: 3.00.09 - TOSHIBA)
TOSHIBA Bulletin Board (Version: 1.0.04.64 - TOSHIBA Corporation) Hidden
TOSHIBA Bulletin Board (x32 Version: 1.0.04.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (x32 Version: 8.0.23 - TOSHIBA Corporation)
TOSHIBA Disc Creator (Version: 2.1.0.1 for x64 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (x32 Version: 3.01.0.11-A - TOSHIBA Corporation)
TOSHIBA eco Utility (Version: 1.1.11.64 - TOSHIBA Corporation) Hidden
TOSHIBA eco Utility (x32 Version: 1.1.11.64 - TOSHIBA Corporation)
TOSHIBA eco Utility (x32 Version: 1.1.11.64 - TOSHIBA Corporation) Hidden
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00 - TOSHIBA Corporation) Hidden
TOSHIBA Extended Tiles for Windows Mobility Center (x32 Version:  - )
TOSHIBA Face Recognition (Version: 3.1.1.64 - TOSHIBA Corporation) Hidden
TOSHIBA Face Recognition (x32 Version: 3.1.1.64 - TOSHIBA Corporation)
TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.4C - TOSHIBA CORPORATION)
TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.4C - TOSHIBA CORPORATION) Hidden
TOSHIBA Hardware Setup (x32 Version: 1.63.0.11C - TOSHIBA CORPORATION)
TOSHIBA Hardware Setup (x32 Version: 1.63.0.11C - TOSHIBA CORPORATION) Hidden
TOSHIBA HDD Protection (Version: 2.2.0.0 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.0 - TOSHIBA Corporation) Hidden
TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.0 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.0 - TOSHIBA Corporation) Hidden
Toshiba Manuals (x32 Version: 10.00 - TOSHIBA)
Toshiba Online Product Information (x32 Version: 2.08.0001 - TOSHIBA)
TOSHIBA PC Health Monitor (Version: 1.4.1.64 - TOSHIBA Corporation)
Toshiba Photo Service - powered by myphotobook (x32 Version: 1.0.0 - myphotobook GmbH) Hidden
Toshiba Photo Service - powered by myphotobook (x32 Version: 1.0.0-663 - myphotobook GmbH)
TOSHIBA Recovery Media Creator (Version: 2.1.0.3 x64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019 - TOSHIBA)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019 - TOSHIBA) Hidden
TOSHIBA ReelTime (Version: 1.0.04.64 - TOSHIBA Corporation) Hidden
TOSHIBA ReelTime (x32 Version: 1.0.04.64 - TOSHIBA Corporation)
TOSHIBA SD Memory Utilities (Version: 1.9.1.12 - TOSHIBA)
TOSHIBA Service Station (x32 Version: 2.1.33 - TOSHIBA)
TOSHIBA Supervisor Password (x32 Version: 1.63.0.7C - TOSHIBA CORPORATION) Hidden
TOSHIBA Supervisorkennwort (x32 Version: 1.63.0.7C - TOSHIBA CORPORATION)
Toshiba TEMPRO (x32 Version: 3.06 - Toshiba Europe GmbH)
TOSHIBA USB Sleep and Charge Utility (x32 Version: 1.2.3.0 - TOSHIBA Corporation)
TOSHIBA Value Added Package (Version: 1.2.26.64 - TOSHIBA Corporation) Hidden
TOSHIBA Value Added Package (x32 Version: 1.2.26.64 - TOSHIBA Corporation)
TOSHIBA Value Added Package (x32 Version: 1.2.26.64 - TOSHIBA Corporation) Hidden
TOSHIBA Web Camera Application (x32 Version: 1.1.1.4 - TOSHIBA Corporation)
TRORMCLauncher (Version: 1.0.0.7 - TOSHIBA) Hidden
TRORMCLauncher (x32 Version:  - )
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Utility Common Driver (x32 Version: 1.0.50.27C - TOSHIBA) Hidden
WildTangent-Spiele (x32 Version: 1.0.0.71 - WildTangent)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
WinZip Malware Protector (x32 Version: 2.1.1000.10798 - WinZip International LLC)

==================== Restore Points  =========================

25-12-2013 11:16:44 Windows Update
29-12-2013 09:06:11 Windows Update
01-01-2014 20:15:47 Windows Update
05-01-2014 20:19:34 Windows Update
09-01-2014 19:47:07 Windows Update
13-01-2014 14:03:40 Windows Update
16-01-2014 19:58:07 Windows Update
16-01-2014 21:10:47 Windows Update
20-01-2014 19:26:29 Windows Update
23-01-2014 20:26:47 Windows Update
28-01-2014 07:19:47 Windows Update
30-01-2014 17:00:30 Uniblue SpeedUpMyPC installation
30-01-2014 19:33:54 Installed SpyHunter
30-01-2014 20:13:02 Removed SpyHunter
31-01-2014 13:23:10 Installed SpyHunter
31-01-2014 14:21:32 Removed SpyHunter

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-01-30 19:04 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {5744712F-22AE-4760-A926-9440378E0F4D} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-07-15] (Nico Mak Computing)
Task: {7C8702E9-F226-4FDD-BD00-B4ABDD50A3DA} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2009-09-03] (TOSHIBA CORPORATION)
Task: {8115E426-5A81-486D-A38A-F586D8D6A906} - \BonanzaDealsUpdate No Task File
Task: {844A6396-51E0-4C6C-8F01-98A4852FC0C3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-26] (Adobe Systems Incorporated)
Task: {9ACA2E06-8F99-4813-9B9D-CEBFABA081B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12] (Google Inc.)
Task: {D2206A79-54F6-4179-9549-7C2E287BD944} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12] (Google Inc.)
Task: {D5438AE7-C921-4078-8AD3-89E3BC636A47} - \UpdaterEX No Task File
Task: {D7361788-F9E5-4523-9029-27E382C7403A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-01-31 15:37 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2014-01-31 15:37 - 2013-07-15 16:53 - 01717936 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2014-01-31 15:37 - 2013-02-28 16:53 - 00168448 _____ () C:\Program Files (x86)\WinZip Malware Protector\UNRAR.DLL

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:0BF4DA47
AlternateDataStreams: C:\ProgramData\TEMP:160ADF0B
AlternateDataStreams: C:\ProgramData\TEMP:1F7A10DD
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F
AlternateDataStreams: C:\ProgramData\TEMP:639BB5E9
AlternateDataStreams: C:\ProgramData\TEMP:6AD65294
AlternateDataStreams: C:\ProgramData\TEMP:884C7316
AlternateDataStreams: C:\ProgramData\TEMP:C3C72D5F
AlternateDataStreams: C:\ProgramData\TEMP:E2295807
AlternateDataStreams: C:\ProgramData\TEMP:F1175E1D

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/30/2014 10:10:22 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/30/2014 10:10:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/30/2014 10:10:09 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/30/2014 09:13:02 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service rpcnetp since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (01/30/2014 09:12:21 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/30/2014 08:34:01 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service rpcnetp since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (01/30/2014 06:35:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: urlmon.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52943f46
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000fee2
ID des fehlerhaften Prozesses: 0x10f4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/30/2014 06:31:59 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: urlmon.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52943f46
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000fee2
ID des fehlerhaften Prozesses: 0x1098
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/30/2014 06:11:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: urlmon.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52943f46
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000fee2
ID des fehlerhaften Prozesses: 0xd84
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/30/2014 06:00:37 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service rpcnetp since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.


System errors:
=============
Error: (01/30/2014 06:49:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (01/30/2014 06:49:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (01/30/2014 06:49:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (01/30/2014 06:49:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (01/30/2014 06:06:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (01/30/2014 06:05:43 PM) (Source: Service Control Manager) (User: )
Description: Dienst "MgAssist Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/30/2014 06:04:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (01/30/2014 05:50:38 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/30/2014 05:50:09 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/30/2014 05:49:51 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 4060.87 MB
Available physical RAM: 2488.44 MB
Total Pagefile: 8119.91 MB
Available Pagefile: 6381.44 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:297.85 GB) (Free:249.14 GB) NTFS
Drive d: (Data) (Fixed) (Total:297.93 GB) (Free:290.29 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: A62A727F)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================