GVU Trojaner auf Laptop

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-06-2013 (ATTENTION: FRST version is 78 days old)
Ran by SYSTEM on 05-09-2013 09:34:15
Running from H:\
Windows Vista (TM) Home Premium (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [34352 2006-11-06] ()
HKLM\...\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL [438272 2006-03-22] (TOSHIBA)
HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]
HKLM\...\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE [411192 2007-03-29] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe [55416 2006-12-07] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe [509496 2007-04-03] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe [538744 2007-05-22] (TOSHIBA Corporation)
HKLM\...\Run: [NDSTray.exe] NDSTray.exe [x]
HKLM\...\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto [1507328 2007-06-18] (Interactive Digital Media)
HKLM\...\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup [581632 2007-07-10] (TOSHIBA)
HKLM\...\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [90112 2006-11-10] ()
HKLM\...\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe [204800 2007-07-27] (Synaptics, Inc.)
HKLM\...\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPO\Toshiba.Tempo.UI.TrayApplication.exe [103824 2007-10-29] (Toshiba Europe GmbH)
HKLM\...\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume [439568 2010-05-10] (Microsoft Corporation)
HKLM\...\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s [958352 2011-08-22] (Samsung)
HKLM\...\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3507088 2011-08-22] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [BlueStacks Agent] C:\Program Files\BlueStacks\HD-Agent.exe [593784 2012-10-25] (BlueStack Systems, Inc.)
HKLM\...\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN [5178664 2012-02-28] (Nero AG)
HKLM\...\Run: [KB8358378] "C:\Users\Sascha\AppData\Local\KB8358378\KB8358378.exe" [60509 2013-09-05] ()
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\Default\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2006-11-13] (TOSHIBA)
HKU\Default User\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2006-11-13] (TOSHIBA)
HKU\NeroMediaHomeUser.4\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2006-11-13] (TOSHIBA)
HKU\Sascha\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2006-11-13] (TOSHIBA)
HKU\Sascha\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [ 2008-01-19] (Microsoft Corporation)
HKU\Sascha\...\Run: [Center Agent] C:\Program Files\X-TENSIONS Multimedia\HyperMediaCenter\DTVR\Scheduled.exe [ 2008-01-10] ()
HKU\Sascha\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]
HKU\Sascha\...\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [ 2011-08-22] ()
HKU\Sascha\...\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background [x]
HKU\Sascha\...\Run: [Messenger (Yahoo!)] "D:\\Messenger\YahooMessenger.exe" -quiet [x]
HKU\Sascha\...\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN [ 2012-02-28] (Nero AG)
HKU\Sascha\...\Run: [AmazonMP3DownloaderHelper] C:\Users\Sascha\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [ 2013-05-22] ()
HKU\Sascha\...\Run: [KB8358378] "C:\Users\Sascha\AppData\Local\KB8358378\KB8358378.exe" [x]
Startup: C:\Users\Sascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

========================== Services (Whitelisted) =================

S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
S2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®)
S2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2012-02-28] (Nero AG)
S2 NIS; C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation)
S2 TempoMonitoringService; C:\Program Files\Toshiba TEMPO\TempoSVC.exe [95624 2007-10-29] (Toshiba Europe GmbH)
S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
S2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [327296 2007-12-06] (AfaTech                  )
S1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
S2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63864 2012-10-25] (BlueStack Systems)
S1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)
S4 CplIR; C:\Windows\system32\DRIVERS\CplIR.SYS [14848 2007-03-06] (COMPAL ELECTRONIC INC.)
S1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-27] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-27] (Symantec Corporation)
S1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20130904.001\IDSvix86.sys [392792 2013-08-21] (Symantec Corporation)
S0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-28] (COMPAL ELECTRONIC INC.)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20130904.017\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20130904.017\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NIS\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NIS\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\NIS\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\NIS\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NIS\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)
S1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1404000.028\SYMTDIV.SYS [352344 2013-04-25] (Symantec Corporation)
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 igfx; system32\DRIVERS\igdkmd32.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 SYMDNS; \SystemRoot\System32\Drivers\NIS\1002000.007\SYMDNS.SYS [x]
S3 SYMFW; \SystemRoot\System32\Drivers\NIS\1007020.00B\SYMFW.SYS [x]
S3 SYMNDISV; \SystemRoot\System32\Drivers\NIS\1007020.00B\SYMNDISV.SYS [x]
S3 SYMREDRV; \SystemRoot\System32\Drivers\NIS\1002000.007\SYMREDRV.SYS [x]
S3 Tosrfcom; No ImagePath
S3 TpChoice; system32\DRIVERS\TpChoice.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-05 07:28 - 2013-09-05 07:28 - 00000000 ____D C:\Users\Sascha\AppData\Local\KB8358378
2013-08-28 10:15 - 2013-08-02 05:09 - 01548288 ____A (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-08-20 19:52 - 2013-08-20 19:52 - 00000000 ____D C:\Users\Sascha\Documents\Amazon MP3
2013-08-20 19:52 - 2013-08-20 19:52 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\Amazon
2013-08-15 12:14 - 2013-08-15 12:18 - 00000000 ____D C:\Windows\System32\MRT
2013-08-15 12:03 - 2013-07-25 03:40 - 12334080 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-15 12:03 - 2013-07-25 03:32 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-15 12:03 - 2013-07-25 03:30 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-15 12:03 - 2013-07-25 03:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-15 12:03 - 2013-07-25 03:26 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-15 12:03 - 2013-07-25 03:25 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-08-15 12:03 - 2013-07-25 03:24 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-08-15 12:03 - 2013-07-25 03:24 - 00065536 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-15 12:03 - 2013-07-25 03:23 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-15 12:03 - 2013-07-25 03:23 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-15 12:03 - 2013-07-25 03:23 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-15 12:03 - 2013-07-25 03:23 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-08-15 12:03 - 2013-07-25 03:23 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-08-15 12:03 - 2013-07-25 03:22 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-15 12:03 - 2013-07-25 03:22 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-08-15 12:03 - 2013-07-25 03:22 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-08-15 08:13 - 2013-07-17 20:41 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-08-15 08:13 - 2013-07-10 10:47 - 00783360 ____A (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-15 08:13 - 2013-07-09 13:10 - 01205168 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-08-15 08:13 - 2013-07-08 05:55 - 03603904 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-08-15 08:13 - 2013-07-08 05:55 - 03551680 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-08-15 08:13 - 2013-07-05 05:53 - 00905664 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-15 08:13 - 2013-06-15 14:22 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\icaapi.dll
2013-08-15 08:13 - 2013-06-15 12:23 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2013-08-15 08:12 - 2013-07-08 05:20 - 00172544 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-15 08:12 - 2013-07-08 05:16 - 00992768 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-15 08:12 - 2013-07-08 05:16 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-15 08:12 - 2013-07-08 05:16 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-08-14 14:11 - 2013-08-14 14:11 - 00000964 ____A C:\Users\Public\Desktop\Express Burn.lnk
2013-08-09 09:10 - 2013-08-12 10:57 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\FileZilla

==================== One Month Modified Files and Folders ========

2013-09-05 08:13 - 2012-03-30 06:22 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-05 07:55 - 2009-07-14 20:21 - 00001098 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-05 07:28 - 2013-09-05 07:28 - 00000000 ____D C:\Users\Sascha\AppData\Local\KB8358378
2013-09-05 06:51 - 2008-04-22 13:20 - 00002605 ____A C:\Users\Sascha\Desktop\Microsoft Word.lnk
2013-09-05 06:37 - 2008-04-16 10:04 - 01768155 ____A C:\Windows\WindowsUpdate.log
2013-09-05 06:32 - 2008-04-17 08:52 - 00000434 ____A C:\Windows\System32\Drivers\etc\hosts.ics
2013-09-05 06:30 - 2009-07-14 20:21 - 00001094 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-05 06:30 - 2006-11-02 14:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-09-05 06:30 - 2006-11-02 13:47 - 00003696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-05 06:30 - 2006-11-02 13:47 - 00003696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-04 21:47 - 2006-11-02 14:01 - 00032558 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-04 13:04 - 2009-03-27 21:17 - 00001052 ____A C:\Windows\Tasks\Google Software Updater.job
2013-09-03 23:07 - 2011-01-14 12:18 - 00000000 ____D C:\Users\Sascha\AppData\Local\CrashDumps
2013-09-01 22:35 - 2013-07-06 10:33 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\.minecraft
2013-08-31 13:21 - 2008-04-20 09:10 - 00102400 ____A C:\Users\Sascha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-29 22:21 - 2012-07-07 10:27 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\vlc
2013-08-25 17:56 - 2009-02-14 11:02 - 00000680 ____A C:\Users\Sascha\AppData\Local\d3d9caps.dat
2013-08-20 19:56 - 2006-11-02 11:33 - 01459028 ____A C:\Windows\System32\PerfStringBackup.INI
2013-08-20 19:52 - 2013-08-20 19:52 - 00000000 ____D C:\Users\Sascha\Documents\Amazon MP3
2013-08-20 19:52 - 2013-08-20 19:52 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\Amazon
2013-08-15 17:00 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-08-15 16:55 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-15 16:37 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\de-DE
2013-08-15 12:18 - 2013-08-15 12:14 - 00000000 ____D C:\Windows\System32\MRT
2013-08-15 12:14 - 2006-11-02 11:24 - 75778376 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe
2013-08-14 14:11 - 2013-08-14 14:11 - 00000964 ____A C:\Users\Public\Desktop\Express Burn.lnk
2013-08-14 14:11 - 2012-06-07 20:31 - 00000000 ____D C:\ProgramData\NCH Software
2013-08-14 14:11 - 2012-06-07 20:30 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\NCH Software
2013-08-14 14:11 - 2012-06-07 20:30 - 00000000 ____D C:\Program Files\NCH Software
2013-08-12 10:57 - 2013-08-09 09:10 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\FileZilla
2013-08-10 16:19 - 2013-06-30 17:45 - 00005460 ____A C:\Windows\setupact.log
2013-08-10 12:43 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-10 09:42 - 2013-02-21 08:46 - 00000000 ____D C:\Users\Sascha\Documents\Intelli-studio
2013-08-10 09:31 - 2013-02-21 08:43 - 00000000 ____D C:\Users\Sascha\AppData\Roaming\Intelli-studio
2013-08-06 19:58 - 2013-05-04 21:03 - 00274824 ____A C:\Windows\PFRO.log

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-08-30 13:33:34
Restore point made on: 2013-09-01 12:36:08

==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 3069.81 MB
Available physical RAM: 2586.93 MB
Total Pagefile: 2807.09 MB
Available Pagefile: 2657.22 MB
Total Virtual: 2047.88 MB
Available Virtual: 1979.14 MB

==================== Drives ================================

Drive c: (Vista) (Fixed) (Total:74.52 GB) (Free:10.83 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:149.05 GB) (Free:29.78 GB) NTFS
Drive e: (Data) (Fixed) (Total:73.06 GB) (Free:50.56 GB) NTFS
Drive g: (WinRE) (Fixed) (Total:1.46 GB) (Free:1.27 GB) NTFS
Drive h: (HITMANPRO) (Removable) (Total:0.11 GB) (Free:0.11 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 1A48DF06)
Partition 1: (Not Active) - (Size=1 GB) - (Type=27)
Partition 2: (Active) - (Size=75 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=73 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 5D379805)
Partition 1: (Not Active) - (Size=149 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 124 MB) (Disk ID: 3C683E52)
Partition 1: (Active) - (Size=118 MB) - (Type=0B)


LastRegBack: 2013-09-05 06:38

==================== End Of Log ============================