Windows 7 bootet nicht nach Virusbefall

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-09-2014 01
Ran by SYSTEM on MININT-KS0PELL on 22-09-2014 21:05:39
Running from h:\
Platform: Windows 7 Home Premium (X86) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9222760 2010-06-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1481320 2010-06-02] (Realtek Semiconductor)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron)
HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-10] (Synaptics Incorporated)
HKLM\...\Run: [NBKeyScan] => C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-02-18] (Nero AG)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-03] (CANON INC.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-30] (Apple Inc.)
HKLM\...\Run: [NPSStartup] => [X]
HKLM\...\Run: [autodetect] => C:\Program Files\Cyrus\AutoDect.exe [129872 2010-11-24] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4085896 2014-07-29] (AVAST Software)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonQuickMenu] => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-02] (CANON INC.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-08-31] (Apple Inc.)
HKU\Alfred\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\Alfred\...\Policies\system: [LogonHoursAction] 2
HKU\Alfred\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Alfred\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\Default\...\RunOnce: [Screensaver] => C:\Windows\Web\Wallpaper\MEDION\start.vbs
HKU\Default User\...\RunOnce: [Screensaver] => C:\Windows\Web\Wallpaper\MEDION\start.vbs
HKU\UpdatusUser\...\RunOnce: [Screensaver] => C:\Windows\Web\Wallpaper\MEDION\start.vbs
Startup: C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> (No File)

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-07-09] (AVAST Software)
S2 avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [106488 2014-07-09] (AVAST Software)
S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] ()
S2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-12] ()
S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
S2 WTGService; C:\Program Files\3DataManager\WTGService.exe [312784 2009-11-06] ()
S2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 ACEDRV07; C:\Windows\system32\drivers\ACEDRV07.sys [101376 2011-11-30] (Protect Software GmbH)
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-09] ()
S1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26136 2014-07-09] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-09] (AVAST Software)
S0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [270752 2014-07-09] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2014-07-09] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-09] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-09] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-09] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [192352 2014-07-09] ()
S0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2014-03-10] (Baidu, Inc.)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [8320 2007-03-08] (GARMIN Corp.)
S0 iviVD; C:\Windows\System32\DRIVERS\iviVD.sys [45056 2005-11-16] (InterVideo)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-28] (Initio Corporation)
S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [22016 2007-10-11] ()
S3 NPF; C:\Windows\System32\drivers\npf.sys [34064 2007-11-06] (CACE Technologies)
S3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-26] (Renesas Electronics Corporation)
S3 nusb3xhc; C:\Windows\system32\DRIVERS\nusb3xhc.sys [146568 2010-04-26] (Renesas Electronics Corporation)
S0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [25376 2013-09-04] (NVIDIA Corporation)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [181432 2011-12-07] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc)
S3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 mod7700; system32\DRIVERS\mod7700.sys [X]
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [X]
S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1a\WNt500x86\Sandra.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-22 21:05 - 2014-09-22 21:05 - 00000000 ____D () C:\FRST
2014-09-17 21:07 - 2014-09-17 21:10 - 00001750 _____ () C:\Windows\System32\iCMS.dat
2014-09-17 20:54 - 2014-09-17 20:54 - 00002559 _____ () C:\Users\Public\Desktop\iCMS.lnk
2014-09-17 20:54 - 2014-09-17 20:54 - 00000000 ____D () C:\Program Files\iCMS
2014-09-12 04:07 - 2014-09-12 04:07 - 00001717 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-12 04:06 - 2014-09-12 04:07 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-09-10 12:13 - 2014-08-19 09:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2014-09-10 12:13 - 2014-08-18 14:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-09-10 12:13 - 2014-08-18 14:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-09-10 12:13 - 2014-08-18 13:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-09-10 12:13 - 2014-08-18 13:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-09-10 12:13 - 2014-08-18 13:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2014-09-10 12:13 - 2014-08-18 13:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-09-10 12:13 - 2014-08-18 13:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2014-09-10 12:13 - 2014-08-18 13:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-09-10 12:13 - 2014-08-18 13:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-09-10 12:13 - 2014-08-18 13:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-09-10 12:13 - 2014-08-18 13:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-09-10 12:13 - 2014-08-18 13:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-09-10 12:13 - 2014-08-18 13:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-09-10 12:13 - 2014-08-18 13:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-09-10 12:13 - 2014-08-18 13:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-09-10 12:13 - 2014-08-18 13:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-09-10 12:13 - 2014-08-18 13:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2014-09-10 12:13 - 2014-08-18 13:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-09-10 12:13 - 2014-08-18 13:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-09-10 12:13 - 2014-08-18 13:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2014-09-10 12:13 - 2014-08-18 13:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2014-09-10 12:13 - 2014-08-18 13:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-09-10 12:13 - 2014-08-18 13:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-09-10 12:13 - 2014-08-18 13:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-09-10 12:13 - 2014-08-18 13:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-09-10 12:13 - 2014-08-18 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2014-09-10 12:13 - 2014-08-18 12:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-09-10 12:13 - 2014-08-18 12:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-09-10 12:13 - 2014-08-18 12:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-09-10 12:13 - 2014-06-26 17:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2014-09-10 05:40 - 2014-07-06 17:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2014-09-10 05:40 - 2014-07-06 17:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2014-09-10 05:14 - 2014-06-23 18:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2014-09-10 04:54 - 2014-09-04 17:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2014-09-10 04:54 - 2014-09-04 17:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2014-09-10 04:54 - 2014-08-01 03:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2014-08-30 08:12 - 2014-09-04 01:32 - 00000000 ____D () C:\Users\Alfred\Desktop\Neuer Ordner
2014-08-28 02:45 - 2014-08-22 17:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2014-08-28 02:45 - 2014-08-22 16:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-22 21:05 - 2014-09-22 21:05 - 00000000 ____D () C:\FRST
2014-09-19 09:22 - 2009-07-13 18:37 - 00000000 ____D () C:\Windows\System32\LogFiles
2014-09-18 06:33 - 2010-07-06 12:23 - 01619272 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-09-18 06:15 - 2014-01-07 06:18 - 00000000 ____D () C:\Program Files\Opera
2014-09-18 05:19 - 2010-10-28 04:44 - 02009202 _____ () C:\Windows\WindowsUpdate.log
2014-09-17 21:10 - 2014-09-17 21:07 - 00001750 _____ () C:\Windows\System32\iCMS.dat
2014-09-17 20:54 - 2014-09-17 20:54 - 00002559 _____ () C:\Users\Public\Desktop\iCMS.lnk
2014-09-17 20:54 - 2014-09-17 20:54 - 00000000 ____D () C:\Program Files\iCMS
2014-09-16 19:41 - 2013-03-27 22:59 - 00083456 ___SH () C:\Users\Alfred\Thumbs.db
2014-09-15 20:38 - 2009-07-13 20:34 - 00018928 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-15 20:38 - 2009-07-13 20:34 - 00018928 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-12 04:07 - 2014-09-12 04:07 - 00001717 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-12 04:07 - 2014-09-12 04:06 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-09-12 04:07 - 2010-11-18 03:07 - 00000000 ____D () C:\Program Files\iTunes
2014-09-12 04:06 - 2010-11-18 03:07 - 00000000 ____D () C:\Program Files\iPod
2014-09-10 18:05 - 2014-07-07 18:20 - 00000000 ____D () C:\Users\Alfred\Desktop\SCAN
2014-09-10 17:05 - 2014-05-08 02:12 - 00000000 ___RD () C:\Users\Alfred\Dropbox
2014-09-10 17:05 - 2014-05-08 02:09 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Dropbox
2014-09-10 12:42 - 2009-07-13 18:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-10 12:31 - 2014-04-26 05:08 - 00004851 _____ () C:\Windows\setupact.log
2014-09-10 12:31 - 2010-08-08 21:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-10 12:13 - 2013-08-13 17:04 - 00000000 ____D () C:\Windows\System32\MRT
2014-09-10 12:07 - 2010-07-06 13:03 - 98758480 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-09-10 12:06 - 2014-05-06 12:01 - 00000000 ___SD () C:\Windows\System32\CompatTel
2014-09-10 12:06 - 2009-07-13 18:37 - 00000000 ____D () C:\Windows\System32\de-DE
2014-09-10 06:45 - 2014-01-07 08:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2014-09-10 06:45 - 2014-01-07 08:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2014-09-09 08:01 - 2011-12-05 02:26 - 00000000 ____D () C:\Users\Alfred\Desktop\Bali
2014-09-05 18:26 - 2014-07-04 01:35 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-09-04 17:52 - 2014-09-10 04:54 - 00445952 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2014-09-04 17:47 - 2014-09-10 04:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2014-09-04 01:32 - 2014-08-30 08:12 - 00000000 ____D () C:\Users\Alfred\Desktop\Neuer Ordner
2014-08-28 12:19 - 2009-07-13 20:33 - 00891864 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-08-25 01:34 - 2014-08-21 06:19 - 00000000 ____D () C:\Users\Alfred\Desktop\Musik BKK 2014
2014-08-24 22:56 - 2010-10-30 01:00 - 00000000 ____D () C:\Users\Alfred\Desktop\Sonne
2014-08-24 19:19 - 2009-07-13 20:52 - 00000000 ____D () C:\Windows\System32\FxsTmp
2014-08-24 18:53 - 2014-04-23 01:47 - 00000000 ____D () C:\Users\Alfred\Downloads\Alfred privat
2014-08-24 15:53 - 2010-07-06 13:02 - 00231584 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Alfred\FreeYouTubeToMp3Converter_3.9.exe


Some content of TEMP:
====================
C:\Users\Alfred\AppData\Local\Temp\amazonicon_v4.exe
C:\Users\Alfred\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\Alfred\AppData\Local\Temp\AMPing.exe
C:\Users\Alfred\AppData\Local\Temp\Baidu_Secure_SystemUp_4.0.5.64367.exe
C:\Users\Alfred\AppData\Local\Temp\DataCard_Setup.exe
C:\Users\Alfred\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx2kh9k.dll
C:\Users\Alfred\AppData\Local\Temp\ICReinstall_FreeYouTubeDownload (4).exe
C:\Users\Alfred\AppData\Local\Temp\ICReinstall_FreeYouTubeDownload.exe
C:\Users\Alfred\AppData\Local\Temp\ICReinstall_FreeYouTubeToMP3Converter (3).exe
C:\Users\Alfred\AppData\Local\Temp\InstallManager_BAB_BAB.exe
C:\Users\Alfred\AppData\Local\Temp\install_flashplayer13x32_mssd_awb_aih (2).exe
C:\Users\Alfred\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Alfred\AppData\Local\Temp\OptimizerPro_20140120.exe
C:\Users\Alfred\AppData\Local\Temp\ose00001.exe
C:\Users\Alfred\AppData\Local\Temp\ose00002.exe
C:\Users\Alfred\AppData\Local\Temp\ResetDevice.exe
C:\Users\Alfred\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Alfred\AppData\Local\Temp\sdapskill.exe
C:\Users\Alfred\AppData\Local\Temp\sdaspwn.exe
C:\Users\Alfred\AppData\Local\Temp\_is3284.exe
C:\Users\Alfred\AppData\Local\Temp\_is6316.exe
C:\Users\Alfred\AppData\Local\Temp\_is6509.exe
C:\Users\Alfred\AppData\Local\Temp\_is7291.exe
C:\Users\Alfred\AppData\Local\Temp\_isA211.exe
C:\Users\Alfred\AppData\Local\Temp\_isE986.exe
C:\Users\Alfred\AppData\Local\Temp\_isFFA3.exe


==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================


==================== Memory info =========================== 

Percentage of memory in use: 13%
Total physical RAM: 3893.42 MB
Available physical RAM: 3371.69 MB
Total Pagefile: 3891.7 MB
Available Pagefile: 3380.8 MB
Total Virtual: 2047.88 MB
Available Virtual: 1949.71 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:565.07 GB) (Free:71.83 GB) NTFS
Drive e: (Recover) (Fixed) (Total:30 GB) (Free:9.58 GB) NTFS
Drive h: (TRANSCEND) (Removable) (Total:3.76 GB) (Free:2.42 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596.2 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=565.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 3.8 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.8 GB) - (Type=0B)


LastRegBack: 2014-09-15 20:52

==================== End Of Log ============================