GVU Trojaner Windows 7 64bit, abgesicherter Modus funktioniert nicht

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2014 01
Ran by SYSTEM on MININT-PQTCMD1 on 09-05-2014 15:02:28
Running from G:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [305664 2009-01-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [444416 2009-06-28] (IDT, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe [4968960 2009-07-16] (Dell Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3180624 2009-07-02] (Dell Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-04-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Andrea\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\Andrea\...\Run: [dradio-RecorderTimer] => C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
Startup: C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

==================== Services (Whitelisted) =================

S2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 IE11; C:\tEmp.dle [15360 2014-05-09] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-15] (McAfee, Inc.)
S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe [240128 2009-06-28] (IDT, Inc.)
S2 wltrysvc; C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe [3417088 2009-07-16] (Dell Inc.)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-27] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-09 15:02 - 2014-05-09 15:02 - 00000000 ____D () C:\FRST
2014-05-09 03:10 - 2014-05-09 03:09 - 00015360 _____ () C:\tEmp.dll
2014-05-09 03:10 - 2014-05-09 03:09 - 00015360 _____ () C:\tEmp.dle
2014-05-09 03:06 - 2014-05-09 03:06 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieUserList
2014-05-09 03:06 - 2014-05-09 03:06 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieSiteList
2014-05-07 07:12 - 2014-05-07 07:13 - 00000000 ___SD () C:\Windows\System32\CompatTel
2014-05-07 05:13 - 2014-04-13 18:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2014-05-07 05:13 - 2014-04-13 18:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2014-05-03 06:58 - 2014-05-03 22:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-05-03 06:32 - 2014-04-29 06:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-05-03 06:32 - 2014-04-29 05:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-05-03 06:32 - 2014-04-29 04:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 06:32 - 2014-04-29 04:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-27 00:46 - 2014-04-27 00:46 - 00169472 _____ () C:\Users\Andrea\Downloads\DK8 Schuelerdaten (8A).xls
2014-04-21 22:13 - 2014-03-06 01:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-04-21 22:13 - 2014-03-06 00:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-04-21 22:13 - 2014-03-06 00:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2014-04-21 22:13 - 2014-03-06 00:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-04-21 22:13 - 2014-03-06 00:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-04-21 22:13 - 2014-03-06 00:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-04-21 22:13 - 2014-03-06 00:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-04-21 22:13 - 2014-03-06 00:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-04-21 22:13 - 2014-03-06 00:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-04-21 22:13 - 2014-03-06 00:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-04-21 22:13 - 2014-03-06 00:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-04-21 22:13 - 2014-03-06 00:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-04-21 22:13 - 2014-03-06 00:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-04-21 22:13 - 2014-03-06 00:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2014-04-21 22:13 - 2014-03-06 00:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-04-21 22:13 - 2014-03-06 00:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-21 22:13 - 2014-03-06 00:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-21 22:13 - 2014-03-06 00:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-21 22:13 - 2014-03-05 23:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-04-21 22:13 - 2014-03-05 23:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-04-21 22:13 - 2014-03-05 23:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-21 22:13 - 2014-03-05 23:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-21 22:13 - 2014-03-05 23:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-21 22:13 - 2014-03-05 23:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-21 22:13 - 2014-03-05 23:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2014-04-21 22:13 - 2014-03-05 23:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-21 22:13 - 2014-03-05 23:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-21 22:13 - 2014-03-05 23:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-21 22:13 - 2014-03-05 23:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-21 22:13 - 2014-03-05 23:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-04-21 22:13 - 2014-03-05 23:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-21 22:13 - 2014-03-05 23:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-04-21 22:13 - 2014-03-05 23:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-21 22:13 - 2014-03-05 23:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-21 22:13 - 2014-03-05 22:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-04-21 22:13 - 2014-03-05 22:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-21 22:13 - 2014-03-05 22:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-21 22:13 - 2014-03-05 22:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-21 22:13 - 2014-03-05 22:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-04-21 22:13 - 2014-03-05 21:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-04-21 22:13 - 2014-03-05 21:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-04-21 22:13 - 2014-03-05 21:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-21 22:13 - 2014-03-05 21:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-21 22:13 - 2014-03-05 21:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-19 04:07 - 2014-04-19 04:08 - 00000000 ____D () C:\Users\Andrea\AppData\Local\Microsoft Games
2014-04-10 00:11 - 2014-03-04 01:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2014-04-10 00:11 - 2014-03-04 01:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2014-04-10 00:11 - 2014-03-04 01:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2014-04-10 00:11 - 2014-03-04 01:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2014-04-10 00:11 - 2014-03-04 01:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2014-04-10 00:11 - 2014-03-04 01:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 00:11 - 2014-03-04 01:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 00:11 - 2014-03-04 01:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 00:11 - 2014-03-04 01:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 00:11 - 2014-03-04 00:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 00:11 - 2014-03-04 00:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 00:11 - 2014-02-03 18:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys
2014-04-10 00:11 - 2014-02-03 18:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storport.sys
2014-04-10 00:11 - 2014-02-03 18:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Diskdump.sys
2014-04-10 00:11 - 2014-02-03 18:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\iologmsg.dll
2014-04-10 00:11 - 2014-02-03 18:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 00:11 - 2014-01-23 18:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders =======

2014-05-09 15:02 - 2014-05-09 15:02 - 00000000 ____D () C:\FRST
2014-05-09 04:47 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-09 04:47 - 2009-07-13 20:51 - 00247914 _____ () C:\Windows\setupact.log
2014-05-09 04:45 - 2011-08-26 21:17 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-09 04:44 - 2011-08-26 21:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-09 03:51 - 2009-07-13 21:10 - 01264069 _____ () C:\Windows\WindowsUpdate.log
2014-05-09 03:48 - 2012-05-19 01:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-09 03:45 - 2009-07-13 20:45 - 00014240 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-09 03:45 - 2009-07-13 20:45 - 00014240 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-09 03:17 - 2012-08-19 02:07 - 00000000 ___RD () C:\Users\Andrea\Dropbox
2014-05-09 03:17 - 2012-08-18 06:41 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Dropbox
2014-05-09 03:09 - 2014-05-09 03:10 - 00015360 _____ () C:\tEmp.dll
2014-05-09 03:09 - 2014-05-09 03:10 - 00015360 _____ () C:\tEmp.dle
2014-05-09 03:06 - 2014-05-09 03:06 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieUserList
2014-05-09 03:06 - 2014-05-09 03:06 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieSiteList
2014-05-09 03:05 - 2011-10-24 02:58 - 00115120 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-08 10:19 - 2010-10-31 11:24 - 00000000 ____D () C:\VueScan
2014-05-07 07:13 - 2014-05-07 07:12 - 00000000 ___SD () C:\Windows\System32\CompatTel
2014-05-07 05:49 - 2013-01-23 11:43 - 01093120 ___SH () C:\Users\Andrea\Desktop\Thumbs.db
2014-05-07 05:38 - 2011-08-26 21:17 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-07 05:38 - 2011-08-26 21:17 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-04 12:08 - 2012-05-27 09:18 - 00000000 ____D () C:\Users\Andrea\Documents\Pauline
2014-05-04 10:23 - 2012-05-12 09:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-03 22:14 - 2014-05-03 06:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-05-03 06:48 - 2010-10-24 06:54 - 00000000 ____D () C:\Users\Andrea\Documents\persönliche Briefe
2014-05-01 03:47 - 2012-05-19 01:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 03:47 - 2012-05-19 01:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-01 03:47 - 2011-07-26 00:17 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:23 - 2011-01-23 02:06 - 00000000 ____D () C:\Users\Andrea\Desktop\Studienseminar
2014-04-29 07:26 - 2009-07-14 09:58 - 00699682 _____ () C:\Windows\System32\perfh007.dat
2014-04-29 07:26 - 2009-07-14 09:58 - 00149790 _____ () C:\Windows\System32\perfc007.dat
2014-04-29 07:26 - 2009-07-13 21:13 - 01620684 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-04-29 06:35 - 2009-07-13 21:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-29 06:01 - 2014-05-03 06:32 - 23547904 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-04-29 05:40 - 2014-05-03 06:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-04-29 04:48 - 2014-05-03 06:32 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 04:34 - 2014-05-03 06:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-27 02:31 - 2010-10-24 08:04 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\vlc
2014-04-27 00:46 - 2014-04-27 00:46 - 00169472 _____ () C:\Users\Andrea\Downloads\DK8 Schuelerdaten (8A).xls
2014-04-27 00:17 - 2010-10-24 06:54 - 00000000 ____D () C:\Users\Andrea\Documents\Steuerfälle
2014-04-25 00:47 - 2010-10-24 06:34 - 00000000 ____D () C:\Users\Andrea\Documents\Abiture
2014-04-24 02:16 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2014-04-21 23:25 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-19 04:08 - 2014-04-19 04:07 - 00000000 ____D () C:\Users\Andrea\AppData\Local\Microsoft Games
2014-04-13 18:24 - 2014-05-07 05:13 - 00465408 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2014-04-13 18:19 - 2014-05-07 05:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2014-04-10 00:44 - 2010-01-23 05:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 00:43 - 2014-03-09 02:45 - 00000000 ____D () C:\Windows\System32\MRT
2014-04-10 00:41 - 2010-09-11 03:59 - 90655440 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe

Some content of TEMP:
====================
C:\Users\Andrea\AppData\Local\Temp\adffmpeg.dll
C:\Users\Andrea\AppData\Local\Temp\adffmpeg1.dll
C:\Users\Andrea\AppData\Local\Temp\ApnStub.exe
C:\Users\Andrea\AppData\Local\Temp\AskSLib.dll
C:\Users\Andrea\AppData\Local\Temp\avgnt.exe
C:\Users\Andrea\AppData\Local\Temp\BackupSetup.exe
C:\Users\Andrea\AppData\Local\Temp\contentDATs.exe
C:\Users\Andrea\AppData\Local\Temp\ffmpegcodec.dll
C:\Users\Andrea\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Andrea\AppData\Local\Temp\g82npbpp.dll
C:\Users\Andrea\AppData\Local\Temp\GLF7BB9.tmp.ConduitEngineSetup.exe
C:\Users\Andrea\AppData\Local\Temp\guninst.exe
C:\Users\Andrea\AppData\Local\Temp\ICReinstall_ZipSetup.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Andrea\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Andrea\AppData\Local\Temp\setup.exe
C:\Users\Andrea\AppData\Local\Temp\softonic-de3.exe
C:\Users\Andrea\AppData\Local\Temp\softonic_s_de3.exe
C:\Users\Andrea\AppData\Local\Temp\tbsoft.dll
C:\Users\Andrea\AppData\Local\Temp\VisusClient.dll
C:\Users\Andrea\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Andrea\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Andrea\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
C:\Users\Gast\AppData\Local\Temp\~+JF9047914083264087516.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2014-03-31 01:09:18
Restore point made on: 2014-04-06 09:00:24
Restore point made on: 2014-04-10 00:41:02
Restore point made on: 2014-04-13 09:00:34
Restore point made on: 2014-04-20 11:55:55
Restore point made on: 2014-04-21 22:13:10
Restore point made on: 2014-04-28 01:23:21
Restore point made on: 2014-05-03 06:32:11
Restore point made on: 2014-05-04 10:34:35
Restore point made on: 2014-05-07 07:12:49

==================== Memory info =========================== 

Percentage of memory in use: 20%
Total physical RAM: 4056.36 MB
Available physical RAM: 3205.88 MB
Total Pagefile: 4054.51 MB
Available Pagefile: 3198.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:283.4 GB) (Free:192.01 GB) NTFS
Drive e: (WIN_7_HOMEPREMIUM) (CDROM) (Total:5.75 GB) (Free:0 GB) UDF
Drive g: (VICTORINOX) (Removable) (Total:7.52 GB) (Free:7.52 GB) exFAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:10.37 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 5919B735)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=283 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 8 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.


LastRegBack: 2014-04-29 07:47

==================== End Of Log ============================