GVU Trojaner, weißer Bildschrim Taskmanager und abgesicherter Modus ohne Funktion

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-06-2013 02
Ran by SYSTEM on 27-06-2013 19:30:16
Running from J:\
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1436224 2010-11-30] (Microsoft Corporation)
HKLM\...\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] ()
HKLM-x32\...\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [x]
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [CtaMon] Rundll32 CtaMon.dll,RunMonitor [x]
HKLM-x32\...\Run: [iTunesHelper] "D:\Programme\iTunes\iTunesHelper.exe" [x]
HKU\Uncharted\...\Run: [Steam] "E:\Steam\steam.exe" -silent [x]
HKU\Uncharted\...\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [2741616 2011-03-04] (Hewlett-Packard Company)
HKU\Uncharted\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Users\UNCHAR~1\AppData\Local\Temp\b34btbztdb0vavaw.exe [73728 2013-06-27] (NVIDIA Corporation) <===== ATTENTION
HKU\Uncharted\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION 
HKU\Uncharted\...\Command Processor: "C:\Users\UNCHAR~1\AppData\Local\Temp\b34btbztdb0vavaw.exe" <===== ATTENTION!
Startup: C:\Users\Uncharted\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72280 2010-09-07] ()
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [12784 2010-11-11] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [282616 2010-11-11] (Microsoft Corporation)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-03-02] ()
S2 AMD FUEL Service; D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe /launchService [x]
S3 DAUpdaterSvc; E:\Origin\Games\Dragon Age Origins\\bin_ship\DAUpdaterSvc.Service.exe [x]

==================== Drivers (Whitelisted) ====================

S3 Ctafiltv; C:\Windows\System32\drivers\Ctafiltv.sys [24064 2008-08-14] (Creative Technology Ltd.)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)
S1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [188928 2010-10-24] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [72064 2010-10-24] (Microsoft Corporation)
S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [79488 2004-05-13] (Protection Technology)
S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology)
S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-03-16] (Duplex Secure Ltd.)
S3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S2 AODDriver4.1; \??\D:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 AODDriver4.2; \??\D:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [x]
S0 prohlp02; System32\drivers\prohlp02.sys [x]
S0 prosync1; System32\drivers\prosync1.sys [x]
S0 sfhlp01; System32\drivers\sfhlp01.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-27 19:28 - 2013-06-27 19:28 - 00000000 ____D C:\FRST
2013-06-27 16:45 - 2013-06-27 16:45 - 00163059 ____A C:\ProgramData\2433f433
2013-06-27 16:45 - 2013-06-27 16:45 - 00163038 ____A C:\Users\Uncharted\AppData\Roaming\2433f433
2013-06-27 16:45 - 2013-06-27 16:45 - 00163012 ____A C:\Users\Uncharted\AppData\Local\2433f433
2013-06-24 23:59 - 2013-06-24 23:59 - 00000000 ____D C:\Users\Uncharted\Downloads\SR_212
2013-06-24 23:19 - 2013-06-24 23:41 - 00000000 ____D C:\Users\Uncharted\Desktop\Interner Speicher
2013-06-24 23:09 - 2013-06-24 23:09 - 00294581 ____A C:\Users\Uncharted\Downloads\Landmarks_6x_212.rar
2013-06-24 23:08 - 2013-06-24 23:13 - 302045106 ____A C:\Users\Uncharted\Downloads\SR_212.rar
2013-06-24 23:03 - 2013-06-24 23:03 - 00000000 ____D C:\Users\Uncharted\Downloads\D_6x_212
2013-06-24 22:53 - 2013-06-24 22:53 - 00001085 ____A C:\Users\Uncharted\Downloads\Anleitung.rar
2013-06-24 22:46 - 2013-06-24 22:46 - 00000000 ____D C:\Users\Uncharted\Desktop\backup navi
2013-06-24 22:45 - 2013-06-24 22:45 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-06-24 22:44 - 2013-06-24 22:45 - 00000000 ____D C:\Windows\WindowsMobile
2013-06-24 22:44 - 2013-06-24 22:44 - 13054856 ____A (Microsoft Corporation) C:\Users\Uncharted\Downloads\drvupdate-amd64.exe
2013-06-24 22:42 - 2013-06-24 22:42 - 07844864 ____A C:\Users\Uncharted\Downloads\setup45dt.msi
2013-06-15 02:00 - 2013-06-08 15:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-15 02:00 - 2013-06-08 15:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-15 02:00 - 2013-06-08 15:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-15 02:00 - 2013-06-08 15:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-15 02:00 - 2013-06-08 15:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-15 02:00 - 2013-06-08 13:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-15 02:00 - 2013-06-08 12:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-15 02:00 - 2013-06-08 12:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-15 02:00 - 2013-06-08 12:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-15 02:00 - 2013-06-08 12:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-15 02:00 - 2013-06-08 12:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-15 02:00 - 2013-06-08 12:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 20:16 - 2013-06-12 20:16 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-06-12 19:44 - 2013-06-12 19:54 - 00000201 ____A C:\Users\Uncharted\Desktop\Train Simulator 2013.url
2013-06-12 02:00 - 2013-05-17 02:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 02:00 - 2013-05-17 02:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 02:00 - 2013-05-17 01:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 02:00 - 2013-05-17 01:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 02:00 - 2013-05-17 01:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 02:00 - 2013-05-17 01:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 02:00 - 2013-05-14 13:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 02:00 - 2013-05-14 09:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-11 21:10 - 2013-05-13 06:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-11 21:10 - 2013-05-13 06:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 21:10 - 2013-05-13 06:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-11 21:10 - 2013-05-13 06:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-11 21:10 - 2013-05-13 05:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-11 21:10 - 2013-05-13 05:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-11 21:10 - 2013-05-13 05:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-11 21:10 - 2013-05-13 04:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-11 21:10 - 2013-05-13 04:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-11 21:10 - 2013-05-13 04:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-11 21:10 - 2013-05-10 06:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-11 21:10 - 2013-05-10 04:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-11 21:10 - 2013-05-08 07:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-11 21:10 - 2013-04-26 06:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-11 21:10 - 2013-04-26 05:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-11 21:10 - 2013-04-26 00:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-11 21:10 - 2013-04-17 08:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-11 21:10 - 2013-04-17 07:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-11 21:10 - 2013-03-31 23:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 20:09 - 2013-06-11 20:09 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-05-29 23:51 - 2013-05-29 23:51 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\dvdcss

==================== One Month Modified Files and Folders =======

2013-06-27 19:28 - 2013-06-27 19:28 - 00000000 ____D C:\FRST
2013-06-27 17:45 - 2013-02-02 04:06 - 01489678 ____A C:\Windows\WindowsUpdate.log
2013-06-27 17:45 - 2009-07-14 18:58 - 00641654 ____A C:\Windows\System32\perfh007.dat
2013-06-27 17:45 - 2009-07-14 18:58 - 00126450 ____A C:\Windows\System32\perfc007.dat
2013-06-27 17:45 - 2009-07-14 05:45 - 00014608 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-27 17:45 - 2009-07-14 05:45 - 00014608 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-27 17:41 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 17:41 - 2009-07-14 05:51 - 00102412 ____A C:\Windows\setupact.log
2013-06-27 17:16 - 2009-07-14 06:13 - 01505034 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-27 16:45 - 2013-06-27 16:45 - 00163059 ____A C:\ProgramData\2433f433
2013-06-27 16:45 - 2013-06-27 16:45 - 00163038 ____A C:\Users\Uncharted\AppData\Roaming\2433f433
2013-06-27 16:45 - 2013-06-27 16:45 - 00163012 ____A C:\Users\Uncharted\AppData\Local\2433f433
2013-06-27 16:45 - 2013-02-02 04:05 - 00000000 ____D C:\users\Uncharted
2013-06-27 16:44 - 2013-03-07 12:03 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\TS3Client
2013-06-27 16:09 - 2013-03-07 08:19 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 22:49 - 2013-02-05 22:46 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\vlc
2013-06-24 23:59 - 2013-06-24 23:59 - 00000000 ____D C:\Users\Uncharted\Downloads\SR_212
2013-06-24 23:41 - 2013-06-24 23:19 - 00000000 ____D C:\Users\Uncharted\Desktop\Interner Speicher
2013-06-24 23:13 - 2013-06-24 23:08 - 302045106 ____A C:\Users\Uncharted\Downloads\SR_212.rar
2013-06-24 23:09 - 2013-06-24 23:09 - 00294581 ____A C:\Users\Uncharted\Downloads\Landmarks_6x_212.rar
2013-06-24 23:03 - 2013-06-24 23:03 - 00000000 ____D C:\Users\Uncharted\Downloads\D_6x_212
2013-06-24 22:53 - 2013-06-24 22:53 - 00001085 ____A C:\Users\Uncharted\Downloads\Anleitung.rar
2013-06-24 22:46 - 2013-06-24 22:46 - 00000000 ____D C:\Users\Uncharted\Desktop\backup navi
2013-06-24 22:45 - 2013-06-24 22:45 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-06-24 22:45 - 2013-06-24 22:44 - 00000000 ____D C:\Windows\WindowsMobile
2013-06-24 22:44 - 2013-06-24 22:44 - 13054856 ____A (Microsoft Corporation) C:\Users\Uncharted\Downloads\drvupdate-amd64.exe
2013-06-24 22:42 - 2013-06-24 22:42 - 07844864 ____A C:\Users\Uncharted\Downloads\setup45dt.msi
2013-06-22 11:23 - 2013-06-22 11:23 - 00000000 ____D C:\Users\Uncharted\Documents\Diablo III
2013-06-16 20:42 - 2013-06-16 20:42 - 00000674 ____A C:\Users\Public\Desktop\Diablo III.lnk
2013-06-12 20:16 - 2013-06-12 20:16 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-06-12 19:54 - 2013-06-12 19:44 - 00000201 ____A C:\Users\Uncharted\Desktop\Train Simulator 2013.url
2013-06-12 02:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 02:01 - 2013-02-03 11:58 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 20:09 - 2013-06-11 20:09 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-06-11 20:09 - 2013-02-02 12:06 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 20:09 - 2013-02-02 12:06 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-10 18:35 - 2013-02-02 12:30 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\Origin
2013-06-10 18:35 - 2013-02-02 12:30 - 00000000 ____D C:\Users\Uncharted\AppData\Local\Origin
2013-06-10 18:35 - 2013-02-02 12:19 - 00000000 ____D C:\ProgramData\Origin
2013-06-08 15:08 - 2013-06-15 02:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 15:07 - 2013-06-15 02:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 15:06 - 2013-06-15 02:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 15:06 - 2013-06-15 02:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 15:06 - 2013-06-15 02:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:28 - 2013-06-15 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 12:42 - 2013-06-15 02:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 12:40 - 2013-06-15 02:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 12:40 - 2013-06-15 02:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 12:40 - 2013-06-15 02:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 12:40 - 2013-06-15 02:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 12:13 - 2013-06-15 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-04 20:43 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-05-30 14:06 - 2013-03-25 08:31 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\Skype
2013-05-29 23:51 - 2013-05-29 23:51 - 00000000 ____D C:\Users\Uncharted\AppData\Roaming\dvdcss

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 8%
Total physical RAM: 12285.55 MB
Available physical RAM: 11277.65 MB
Total Pagefile: 12283.7 MB
Available Pagefile: 11284.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:55.9 GB) (Free:0.92 GB) NTFS (Disk=1 Partition=1)
Drive e: () (Fixed) (Total:232.88 GB) (Free:73.29 GB) NTFS (Disk=2 Partition=1)
Drive f: (Games) (Fixed) (Total:698.54 GB) (Free:65.19 GB) NTFS (Disk=0 Partition=2)
Drive h: (CDROM) (CDROM) (Total:0.25 GB) (Free:0 GB) CDFS
Drive j: () (Removable) (Total:0.25 GB) (Free:0.24 GB) FAT (Disk=3 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: A099B9F0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=699 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 56 GB) (Disk ID: D53A280F)
Partition 1: (Not Active) - (Size=56 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 9A840F25)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 252 MB) (Disk ID: 9AA28DE5)
Partition 1: (Active) - (Size=252 MB) - (Type=06)


LastRegBack: 2013-06-22 23:09

==================== End Of Log ============================