GQS.Donedrive Trojaner

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Flo (administrator) on OLF on 12-10-2013 13:38:23
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe
(Hewlett-Packard) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Symantec Corporation) C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\17.0.0.136\InstStub.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
(CyberLink) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-15] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [450048 2009-07-22] (IDT, Inc.)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610872 2009-08-25] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2009-11-14] (Sun Microsystems, Inc.)
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-08-20] (Hewlett-Packard Company)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1813928 2013-10-05] (Valve Corporation)
HKCU\...\Run: [Free Download Manager] - C:\Program Files (x86)\Free Download Manager\fdm.exe [6875136 2013-03-27] (FreeDownloadManager.ORG)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe [257440 2009-07-18] (Adobe Systems, Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPCam_Menu] - c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [QlbCtrl.exe] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [322104 2009-08-20] ( Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [600936 2009-06-29] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [60464 2009-09-02] (EasyBits Software AS)
HKLM-x32\...\Run: [WirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Startup: C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=C81A904CE59B107D&affID=124721&tsp=5003
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
SearchScopes: HKLM - DefaultScope {1F5BEDA3-740D-472E-B8C8-A8A7020F0B78} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - DefaultScope {1F5BEDA3-740D-472E-B8C8-A8A7020F0B78} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {1F5BEDA3-740D-472E-B8C8-A8A7020F0B78} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C81A904CE59B107D&affID=124721&tsp=5003
BHO: a2zLyrics-1 - {11111111-1111-1111-1111-110411151154} - C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-bho64.dll (Lyrics)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: a2zLyrics-1 - {11111111-1111-1111-1111-110411151154} - C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-bho.dll (Lyrics)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll (Symantec Corporation)
BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -  No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52272 2009-11-14] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe [126392 2009-08-25] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe [240128 2009-07-22] (IDT, Inc.)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\ENG64.SYS [116272 2009-08-29] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\ENG64.SYS [116272 2009-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\EX64.SYS [1742896 2009-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\EX64.SYS [1742896 2009-08-29] (Symantec Corporation)
R1 SRTSP; C:\Windows\system32\drivers\NISx64\1100000.088\SRTSP64.SYS [504880 2009-08-30] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1100000.088\SRTSPX64.SYS [32304 2009-08-30] (Symantec Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-12 13:32 - 2013-10-12 13:32 - 00000000 _____ C:\Users\Flo\defogger_reenable
2013-10-12 13:26 - 2013-10-12 13:27 - 00022535 _____ C:\Users\Flo\Desktop\Addition.txt
2013-10-12 13:25 - 2013-10-12 13:25 - 00000000 ____D C:\FRST
2013-10-12 11:15 - 2013-10-12 11:15 - 00000000 ____D C:\Users\Flo\AppData\Local\Adobe
2013-10-12 11:15 - 2013-10-12 11:15 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-12 11:13 - 2013-10-12 11:14 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Flo\Downloads\AdobeAIRInstaller.exe
2013-10-12 11:03 - 2013-10-12 11:03 - 00000056 _____ C:\Windows\setupact.log
2013-10-12 11:03 - 2013-10-12 11:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-11 14:09 - 2013-10-11 17:10 - 00000000 ____D C:\AdwCleaner
2013-10-11 14:08 - 2013-10-11 14:08 - 01048960 _____ C:\Users\Flo\Desktop\adwcleaner_3.0.0.7.exe
2013-10-10 01:22 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 01:22 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-10 01:22 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-10 01:22 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 01:22 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 01:22 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 01:22 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 01:22 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 01:22 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 01:22 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 01:22 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-10 01:22 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 15:46 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 15:46 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 15:46 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 15:46 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 15:46 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 15:46 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 15:46 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 15:46 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 15:46 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 15:46 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 15:46 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 15:46 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 15:46 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 15:46 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 15:46 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 15:46 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 15:46 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 15:46 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 15:46 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 15:46 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 15:46 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 15:46 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 15:46 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 15:46 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 15:46 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 15:46 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 15:46 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 15:46 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 15:46 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 15:46 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 15:46 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 15:46 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 15:46 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 15:46 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 15:46 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 15:46 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 15:46 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 15:46 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 15:46 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 15:46 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 15:46 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 15:46 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 15:45 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 15:45 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 15:45 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 15:45 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 15:41 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 15:41 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 15:38 - 2013-10-09 15:38 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-09 15:34 - 2013-10-12 12:45 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-09 15:34 - 2013-10-12 11:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-09 15:34 - 2013-10-10 22:40 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-09 15:34 - 2013-10-10 22:40 - 00003848 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 21:53 - 2013-10-08 21:53 - 00000000 _____ C:\Users\Flo\Desktop\Neues Textdokument.txt
2013-10-08 21:20 - 2013-10-09 17:53 - 00000000 ____D C:\Program Files (x86)\Vampires Dawn - Reign of Blood
2013-10-03 20:30 - 2013-10-03 20:30 - 00000000 ____D C:\Users\Flo\Documents\Praetorians
2013-10-03 20:30 - 2013-10-03 20:30 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-03 20:03 - 2013-10-03 20:03 - 00002071 _____ C:\Users\Public\Desktop\Praetorians.lnk
2013-10-03 20:02 - 2013-10-03 20:02 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-10-02 16:28 - 2013-10-02 16:28 - 00000221 _____ C:\Users\Flo\Desktop\Magicka.url
2013-10-01 23:06 - 2013-10-01 23:06 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2013-09-30 21:43 - 2013-09-30 21:53 - 00000000 ____D C:\Users\Flo\Documents\Impire
2013-09-30 21:05 - 2013-09-30 21:05 - 00000222 _____ C:\Users\Flo\Desktop\Impire.url
2013-09-26 23:02 - 2013-09-26 23:02 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 23:01 - 2013-09-26 23:01 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-26 23:01 - 2013-09-26 23:01 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-23 21:00 - 2013-09-23 21:03 - 08423758 _____ C:\Users\Flo\Downloads\ROWDYMODv1.zip
2013-09-20 22:17 - 2013-09-20 22:43 - 52421322 _____ C:\Users\Flo\Downloads\addons.rar
2013-09-19 18:04 - 2013-10-12 13:33 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Free Download Manager
2013-09-19 18:04 - 2013-10-12 13:32 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-09-19 18:04 - 2013-09-19 18:04 - 00001071 _____ C:\Users\Flo\Desktop\Free Download Manager.lnk
2013-09-19 18:04 - 2013-09-19 18:04 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-09-19 18:01 - 2013-09-19 18:01 - 07696614 _____ (FreeDownloadManager.ORG                                     ) C:\Users\Flo\Downloads\fdminst_3.9.2b1303.exe
2013-09-18 21:04 - 2013-09-19 17:45 - 1250879164 _____ C:\Users\Flo\Downloads\WoWdeDEWin.rar
2013-09-17 22:43 - 2013-09-17 22:50 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Curse Advertising
2013-09-17 22:43 - 2013-09-17 22:43 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2013-09-17 22:37 - 2013-09-17 22:37 - 00402696 _____ () C:\Users\Flo\Downloads\setup.exe
2013-09-17 22:33 - 2013-09-17 22:34 - 06944697 _____ C:\Users\Flo\Downloads\Interface380.zip
2013-09-15 20:20 - 2013-10-03 19:49 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2013-09-15 20:16 - 2013-09-15 20:18 - 83293072 _____ (Blizzard Entertainment) C:\Users\Flo\Downloads\World-of-Warcraft-Setup-deDE (1).exe
2013-09-12 18:31 - 2013-09-19 17:45 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-12 18:31 - 2013-09-12 18:31 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-12 18:31 - 2013-09-12 18:31 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-12 18:31 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-09-12 18:31 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-09-12 18:31 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-09-12 18:30 - 2013-09-12 18:30 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-12 18:30 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-09-12 18:28 - 2013-09-12 18:30 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-12 18:25 - 2013-09-12 18:28 - 131918888 _____ C:\Users\Flo\Downloads\avast_free_antivirus_setup.exe
2013-09-12 18:22 - 2013-09-12 18:22 - 00002768 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-09-12 18:22 - 2013-09-12 18:22 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-09-12 18:22 - 2013-09-12 18:22 - 00000000 ____D C:\Program Files\CCleaner
2013-09-12 18:21 - 2013-09-12 18:21 - 04454952 _____ (Piriform Ltd) C:\Users\Flo\Downloads\ccsetup405.exe
2013-09-12 18:09 - 2013-10-12 12:09 - 00001286 _____ C:\Windows\Tasks\a2zLyrics-1-updater.job
2013-09-12 18:09 - 2013-09-12 18:10 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
2013-09-12 18:09 - 2013-09-12 18:10 - 00000000 ____D C:\Program Files (x86)\SmartTweak
2013-09-12 18:09 - 2013-09-12 18:09 - 00004316 _____ C:\Windows\System32\Tasks\a2zLyrics-1-updater
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Babylon
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\ProgramData\Babylon
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Program Files (x86)\IZArc
2013-09-12 18:08 - 2013-10-12 12:08 - 00001898 _____ C:\Windows\Tasks\a2zLyrics-1-chromeinstaller.job
2013-09-12 18:08 - 2013-10-09 18:09 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-12 18:07 - 2013-09-12 18:07 - 05486444 _____ (Ivan Zahariev) C:\Users\Flo\Downloads\IZArcInstall.exe

==================== One Month Modified Files and Folders =======

2013-10-12 13:33 - 2013-09-19 18:04 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Free Download Manager
2013-10-12 13:32 - 2013-10-12 13:32 - 00000000 _____ C:\Users\Flo\defogger_reenable
2013-10-12 13:32 - 2013-09-19 18:04 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-10-12 13:32 - 2013-08-16 17:41 - 00000000 ____D C:\Users\Flo
2013-10-12 13:27 - 2013-10-12 13:26 - 00022535 _____ C:\Users\Flo\Desktop\Addition.txt
2013-10-12 13:25 - 2013-10-12 13:25 - 00000000 ____D C:\FRST
2013-10-12 12:45 - 2013-10-09 15:34 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-12 12:09 - 2013-09-12 18:09 - 00001286 _____ C:\Windows\Tasks\a2zLyrics-1-updater.job
2013-10-12 12:08 - 2013-09-12 18:08 - 00001898 _____ C:\Windows\Tasks\a2zLyrics-1-chromeinstaller.job
2013-10-12 11:19 - 2013-08-16 22:44 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Skype
2013-10-12 11:17 - 2013-08-16 17:54 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Adobe
2013-10-12 11:15 - 2013-10-12 11:15 - 00000000 ____D C:\Users\Flo\AppData\Local\Adobe
2013-10-12 11:15 - 2013-10-12 11:15 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-12 11:15 - 2009-11-14 02:59 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-12 11:14 - 2013-10-12 11:13 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Flo\Downloads\AdobeAIRInstaller.exe
2013-10-12 11:11 - 2013-08-26 15:17 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-12 11:11 - 2013-08-16 17:57 - 00000000 ____D C:\Users\Flo\AppData\Local\Deployment
2013-10-12 11:11 - 2009-12-22 02:18 - 01593190 _____ C:\Windows\WindowsUpdate.log
2013-10-12 11:10 - 2013-10-09 15:34 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-12 11:10 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-12 11:10 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-12 11:03 - 2013-10-12 11:03 - 00000056 _____ C:\Windows\setupact.log
2013-10-12 11:03 - 2013-10-12 11:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-12 11:03 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-12 01:29 - 2013-09-11 23:03 - 00000000 ____D C:\Users\Flo\AppData\Local\Battle.net
2013-10-11 17:10 - 2013-10-11 14:09 - 00000000 ____D C:\AdwCleaner
2013-10-11 14:08 - 2013-10-11 14:08 - 01048960 _____ C:\Users\Flo\Desktop\adwcleaner_3.0.0.7.exe
2013-10-11 13:45 - 2013-08-22 20:38 - 00000000 ____D C:\Users\Flo\AppData\Roaming\TS3Client
2013-10-11 13:45 - 2009-09-07 03:57 - 00000000 ____D C:\Windows\Panther
2013-10-10 22:40 - 2013-10-09 15:34 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 22:40 - 2013-10-09 15:34 - 00003848 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-10 08:39 - 2009-11-14 10:10 - 00696870 _____ C:\Windows\system32\perfh007.dat
2013-10-10 08:39 - 2009-11-14 10:10 - 00148134 _____ C:\Windows\system32\perfc007.dat
2013-10-10 08:39 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-10 08:35 - 2013-08-16 22:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-10 08:35 - 2013-08-16 22:44 - 00000000 ____D C:\ProgramData\Skype
2013-10-10 08:32 - 2009-07-14 06:45 - 00349840 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 01:21 - 2013-08-19 00:55 - 01590378 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 18:09 - 2013-09-12 18:08 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-10-09 17:53 - 2013-10-08 21:20 - 00000000 ____D C:\Program Files (x86)\Vampires Dawn - Reign of Blood
2013-10-09 15:39 - 2013-09-11 23:05 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-10-09 15:38 - 2013-10-09 15:38 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-09 15:38 - 2013-08-16 17:57 - 00000000 ____D C:\Users\Flo\AppData\Local\Google
2013-10-09 15:37 - 2013-08-16 17:57 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-09 15:24 - 2013-08-16 17:46 - 00084696 _____ C:\Users\Flo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-08 21:53 - 2013-10-08 21:53 - 00000000 _____ C:\Users\Flo\Desktop\Neues Textdokument.txt
2013-10-03 20:30 - 2013-10-03 20:30 - 00000000 ____D C:\Users\Flo\Documents\Praetorians
2013-10-03 20:30 - 2013-10-03 20:30 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-03 20:03 - 2013-10-03 20:03 - 00002071 _____ C:\Users\Public\Desktop\Praetorians.lnk
2013-10-03 20:02 - 2013-10-03 20:02 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-10-03 19:49 - 2013-09-15 20:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2013-10-03 19:49 - 2013-08-16 17:41 - 00000000 ___RD C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-03 19:49 - 2013-08-16 17:41 - 00000000 ___RD C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-02 16:28 - 2013-10-02 16:28 - 00000221 _____ C:\Users\Flo\Desktop\Magicka.url
2013-10-01 23:06 - 2013-10-01 23:06 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2013-09-30 21:53 - 2013-09-30 21:43 - 00000000 ____D C:\Users\Flo\Documents\Impire
2013-09-30 21:05 - 2013-09-30 21:05 - 00000222 _____ C:\Users\Flo\Desktop\Impire.url
2013-09-29 21:56 - 2013-09-11 23:03 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-09-26 23:02 - 2013-09-26 23:02 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 23:01 - 2013-09-26 23:01 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-26 23:01 - 2013-09-26 23:01 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-26 23:01 - 2013-08-26 22:37 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-26 23:01 - 2013-08-26 22:37 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-23 21:03 - 2013-09-23 21:00 - 08423758 _____ C:\Users\Flo\Downloads\ROWDYMODv1.zip
2013-09-23 19:51 - 2013-08-24 16:28 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-23 19:51 - 2013-08-24 16:19 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-23 01:28 - 2013-10-10 01:22 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-10 01:22 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-10 01:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 00:55 - 2013-10-10 01:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-10 01:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-10 01:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-10 01:22 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-10 01:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-21 05:38 - 2013-10-10 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-10 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-10 01:22 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-10 01:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 22:43 - 2013-09-20 22:17 - 52421322 _____ C:\Users\Flo\Downloads\addons.rar
2013-09-19 20:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 18:12 - 2013-08-16 15:42 - 00000000 ____D C:\Users\Flo\Documents\The Core
2013-09-19 18:04 - 2013-09-19 18:04 - 00001071 _____ C:\Users\Flo\Desktop\Free Download Manager.lnk
2013-09-19 18:04 - 2013-09-19 18:04 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-09-19 18:01 - 2013-09-19 18:01 - 07696614 _____ (FreeDownloadManager.ORG                                     ) C:\Users\Flo\Downloads\fdminst_3.9.2b1303.exe
2013-09-19 17:45 - 2013-09-18 21:04 - 1250879164 _____ C:\Users\Flo\Downloads\WoWdeDEWin.rar
2013-09-19 17:45 - 2013-09-12 18:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-17 22:50 - 2013-09-17 22:43 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Curse Advertising
2013-09-17 22:43 - 2013-09-17 22:43 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2013-09-17 22:43 - 2013-08-16 17:47 - 00000000 ___RD C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-17 22:37 - 2013-09-17 22:37 - 00402696 _____ () C:\Users\Flo\Downloads\setup.exe
2013-09-17 22:34 - 2013-09-17 22:33 - 06944697 _____ C:\Users\Flo\Downloads\Interface380.zip
2013-09-15 20:18 - 2013-09-15 20:16 - 83293072 _____ (Blizzard Entertainment) C:\Users\Flo\Downloads\World-of-Warcraft-Setup-deDE (1).exe
2013-09-15 20:18 - 2013-09-11 23:01 - 00000000 ____D C:\ProgramData\Battle.net
2013-09-14 16:14 - 2013-09-11 23:03 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Battle.net
2013-09-14 03:10 - 2013-10-09 15:46 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-12 18:31 - 2013-09-12 18:31 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-12 18:31 - 2013-09-12 18:31 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-12 18:30 - 2013-09-12 18:30 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-12 18:30 - 2013-09-12 18:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-12 18:28 - 2013-09-12 18:25 - 131918888 _____ C:\Users\Flo\Downloads\avast_free_antivirus_setup.exe
2013-09-12 18:22 - 2013-09-12 18:22 - 00002768 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-09-12 18:22 - 2013-09-12 18:22 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-09-12 18:22 - 2013-09-12 18:22 - 00000000 ____D C:\Program Files\CCleaner
2013-09-12 18:21 - 2013-09-12 18:21 - 04454952 _____ (Piriform Ltd) C:\Users\Flo\Downloads\ccsetup405.exe
2013-09-12 18:10 - 2013-09-12 18:09 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
2013-09-12 18:10 - 2013-09-12 18:09 - 00000000 ____D C:\Program Files (x86)\SmartTweak
2013-09-12 18:09 - 2013-09-12 18:09 - 00004316 _____ C:\Windows\System32\Tasks\a2zLyrics-1-updater
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Users\Flo\AppData\Roaming\Babylon
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\ProgramData\Babylon
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-12 18:09 - 2013-09-12 18:09 - 00000000 ____D C:\Program Files (x86)\IZArc
2013-09-12 18:07 - 2013-09-12 18:07 - 05486444 _____ (Ivan Zahariev) C:\Users\Flo\Downloads\IZArcInstall.exe
2013-09-12 18:04 - 2013-08-16 17:47 - 00000000 ___RD C:\Users\Flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-01 20:00

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Flo at 2013-10-12 13:26:15
Running from C:\Downloads\Software
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Norton Internet Security (Enabled - Up to date) {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Up to date) {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security (Disabled) {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

==================== Installed Programs ======================

a2zLyrics-1 (x32 Version: 1.28.153.2)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.32.18)
Adobe Reader 9.1 MUI (x32 Version: 9.1.0)
Adobe Shockwave Player (x32 Version: 11.0)
AMD USB Filter Driver (x32 Version: 1.0.10.84)
Atheros Driver Installation Program (x32 Version: 5.0)
ATI Catalyst Install Manager (Version: 3.0.732.0)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Awesomenauts (x32)
Battle.net (x32)
Bundled software uninstaller (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Full New (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Light (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center InstallProxy (x32 Version: 2009.0804.2223.38385)
Catalyst Control Center Localization All (x32 Version: 2009.0804.2223.38385)
CCC Help Chinese Standard (x32 Version: 2009.0804.2222.38385)
CCC Help Chinese Traditional (x32 Version: 2009.0804.2222.38385)
CCC Help Czech (x32 Version: 2009.0804.2222.38385)
CCC Help Danish (x32 Version: 2009.0804.2222.38385)
CCC Help Dutch (x32 Version: 2009.0804.2222.38385)
CCC Help English (x32 Version: 2009.0804.2222.38385)
CCC Help Finnish (x32 Version: 2009.0804.2222.38385)
CCC Help French (x32 Version: 2009.0804.2222.38385)
CCC Help German (x32 Version: 2009.0804.2222.38385)
CCC Help Greek (x32 Version: 2009.0804.2222.38385)
CCC Help Hungarian (x32 Version: 2009.0804.2222.38385)
CCC Help Italian (x32 Version: 2009.0804.2222.38385)
CCC Help Japanese (x32 Version: 2009.0804.2222.38385)
CCC Help Korean (x32 Version: 2009.0804.2222.38385)
CCC Help Norwegian (x32 Version: 2009.0804.2222.38385)
CCC Help Polish (x32 Version: 2009.0804.2222.38385)
CCC Help Portuguese (x32 Version: 2009.0804.2222.38385)
CCC Help Russian (x32 Version: 2009.0804.2222.38385)
CCC Help Spanish (x32 Version: 2009.0804.2222.38385)
CCC Help Swedish (x32 Version: 2009.0804.2222.38385)
CCC Help Thai (x32 Version: 2009.0804.2222.38385)
CCC Help Turkish (x32 Version: 2009.0804.2222.38385)
ccc-core-static (x32 Version: 2009.0804.2223.38385)
ccc-utility64 (Version: 2009.0804.2223.38385)
CCleaner (Version: 4.05)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.4518.1014)
Curse Client (HKCU Version: 5.1.1.792)
CyberLink DVD Suite (x32 Version: 7.0.2111)
DVD Menu Pack for HP MediaSmart Video (x32 Version: 3.1.3224)
ENE CIR Receiver Driver (Version: 2.7.4.0)
Free Download Manager 3.9.2 (x32)
Free YouTube to MP3 Converter version 3.12.10.812 (x32 Version: 3.12.10.812)
Google Chrome (x32 Version: 30.0.1599.69)
Google Update Helper (x32 Version: 1.3.21.165)
Hearthstone (x32)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)
HP 3D DriveGuard (Version: 4.0.3.1)
HP Advisor (x32 Version: 3.3.9512.3162)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3)
HP Games (x32 Version: 1.0.0.71)
HP MediaSmart DVD (x32 Version: 3.1.3402)
HP MediaSmart Internet TV (x32 Version: 3.1.2125)
HP MediaSmart Live TV (x32 Version: 3.1.2206)
HP MediaSmart Music/Photo/Video (x32 Version: 3.1.3405)
HP MediaSmart SmartMenu (Version: 3.1.0.1)
HP MediaSmart Webcam (x32 Version: 3.1.2207)
HP Quick Launch Buttons (x32 Version: 6.50.7.1)
HP Setup (x32 Version: 1.2.3560.3170)
HP Support Assistant (x32 Version: 7.0.39.15)
HP Update (x32 Version: 5.005.000.001)
HP User Guides 0154 (x32 Version: 1.01.0001)
HP Wireless Assistant (x32 Version: 3.50.9.1)
IDT Audio (x32 Version: 1.0.6225.0)
Impire (x32)
IrfanView (remove only) (x32 Version: 4.36)
IZArc 4.1.8 (x32 Version: 4.1.8)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 15 (64-bit) (Version: 6.0.150)
Java(TM) SE Development Kit 6 Update 15 (64-bit) (Version: 1.6.0.150)
JMicron Flash Media Controller Driver (x32 Version: 1.0.32.1)
Junk Mail filter update (x32 Version: 14.0.8089.726)
LabelPrint (x32 Version: 2.5.2111)
League of Legends (x32 Version: 3.0.1)
LightScribe System Software (x32 Version: 1.18.8.1)
Magic Desktop (x32)
Magicka (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Search Enhancement Pack (x32 Version: 1.2.123.0)
Microsoft Silverlight (x32 Version: 3.0.40624.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Movie Theme Pack for HP MediaSmart Video (x32 Version: 3.1.3310)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Norton Internet Security (x32 Version: 17.0.0.136)
Norton Online Backup (x32 Version: 1.2.20.0)
NVIDIA PhysX (x32 Version: 9.10.0513)
Pando Media Booster (x32 Version: 2.6.0.7)
Power2Go (x32 Version: 6.0.3311)
PowerDirector (x32 Version: 7.0.3311)
Praetorians (x32)
QLBCASL (x32 Version: 6.40.17.2)
Realtek 8136 8168 8169 Ethernet Driver (x32 Version: 1.00.0007)
Recovery Manager (x32 Version: 5.5.2202)
Skype™ 6.9 (x32 Version: 6.9.106)
Steam (x32 Version: 1.0.0.0)
Synaptics Pointing Device Driver (Version: 13.2.4.12)
TeamSpeak 3 Client (Version: 3.0.12)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Office 2007 (KB934528) (x32)
Vampires Dawn: Reign of Blood (x32 Version: Vampires Dawn: Reign of Blood 1.31)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Toolbar (x32 Version: 14.0.8064.206)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777)

==================== Restore Points  =========================

09-10-2013 13:28:39 Windows Update
09-10-2013 23:11:40 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {054A119C-167B-46BC-9BD3-494E9E35643E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {132FAC8C-26F5-46E0-AA24-E22A08D88E9B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-09-05] (Hewlett-Packard Company)
Task: {1DB3C5B1-AEF2-43F2-97BE-F440FE8CA8A3} - System32\Tasks\CapUninst => c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapUninst.exe [2009-10-06] (CL)
Task: {4611E575-D21D-41F1-9474-3C846BD2B61B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)
Task: {4F306344-FF9A-40D3-B82F-88595A163DEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)
Task: {567EA877-0B30-4DCF-8D0C-6B7F714E625E} - System32\Tasks\a2zLyrics-1-chromeinstaller => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-chromeinstaller.exe [2013-09-12] (Lyrics)
Task: {574C1FE6-1C09-4B64-85D5-3342349BC921} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
Task: {670BEACF-F904-4D55-9FAB-C78616F1088F} - System32\Tasks\CLMLSvc => c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [2009-10-06] (CyberLink)
Task: {7D06124F-C8C0-4E77-861F-87FF42278816} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)
Task: {9B0FA0B9-7D2F-468D-9042-A5277A2879A1} - System32\Tasks\CapSchedInst => c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSchedInst.exe [2009-10-06] (CL)
Task: {A79AD016-F66A-4D79-866D-FE601E3FF14D} - System32\Tasks\a2zLyrics-1-updater => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-updater.exe [2013-09-12] (Lyrics)
Task: {B4908A19-1DA3-42D4-8E05-A7A03654A471} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-09-17] (Microsoft)
Task: {BB9A1AA8-32E7-4FFD-AAAF-C708945A8FCC} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {CAFCFFCF-622E-44EA-9639-7414BDD4542D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {CFED7F3E-74E5-44DA-B159-9F4198BA197E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)
Task: {D70000BC-881E-416B-BD47-152C9E6FF5B4} - System32\Tasks\CapSvcInst => c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSvcInst.exe [2009-10-06] (CL)
Task: {D7B43A9D-D9D9-40F2-8207-1408762788CF} - System32\Tasks\TVAgent => c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe [2009-10-06] (CyberLink Corp.)
Task: {EB04F53A-F9F1-4C5C-BEAB-248D28F653C2} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2009-10-07] ()
Task: {F1C352C6-3B9B-4040-9732-1D60FCEFD7EE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\a2zLyrics-1-chromeinstaller.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-chromeinstaller.exe
Task: C:\Windows\Tasks\a2zLyrics-1-updater.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-12 18:09 - 2012-07-20 14:39 - 02469888 _____ () C:\Program Files (x86)\IZArc\IZArcCM64.dll
2009-10-02 16:46 - 2009-10-02 16:46 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2009-12-22 02:16 - 2009-12-22 02:16 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-10-11 21:16 - 2013-10-11 19:09 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101100\algo.dll
2009-08-20 13:35 - 2009-08-20 13:35 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2009-08-20 13:35 - 2009-08-20 13:35 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2009-08-20 13:35 - 2009-08-20 13:35 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2009-10-06 00:08 - 2009-10-06 00:08 - 00931112 _____ () c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll
2013-09-19 18:04 - 2013-01-11 03:17 - 00105984 _____ () C:\Program Files (x86)\Free Download Manager\fdmumsp.dll
2013-09-19 18:04 - 2013-01-11 03:22 - 03547136 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/09/2013 09:22:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Updater.exe, Version: 6.6.1.56732, Zeitstempel: 0x51c41488
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x006500c4
ID des fehlerhaften Prozesses: 0x380
Startzeit der fehlerhaften Anwendung: 0xUpdater.exe0
Pfad der fehlerhaften Anwendung: Updater.exe1
Pfad des fehlerhaften Moduls: Updater.exe2
Berichtskennung: Updater.exe3

Error: (10/06/2013 04:23:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (10/06/2013 04:21:21 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (10/03/2013 01:01:32 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (10/03/2013 00:59:17 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (10/01/2013 08:04:06 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (10/01/2013 08:01:45 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (09/29/2013 03:26:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hpasset.exe, Version: 3.0.3.1, Zeitstempel: 0x5202c98c
Name des fehlerhaften Moduls: hpasset.exe, Version: 3.0.3.1, Zeitstempel: 0x5202c98c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002b78a
ID des fehlerhaften Prozesses: 0x8cc
Startzeit der fehlerhaften Anwendung: 0xhpasset.exe0
Pfad der fehlerhaften Anwendung: hpasset.exe1
Pfad des fehlerhaften Moduls: hpasset.exe2
Berichtskennung: hpasset.exe3

Error: (09/28/2013 02:54:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (09/28/2013 02:52:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (10/12/2013 11:03:18 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/11/2013 00:53:44 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/10/2013 08:32:08 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/10/2013 08:28:08 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/09/2013 09:22:32 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Skype Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/09/2013 03:22:52 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/08/2013 06:54:20 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/07/2013 07:18:20 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/06/2013 03:50:01 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/05/2013 06:41:50 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 4092.2 MB
Available physical RAM: 2295.05 MB
Total Pagefile: 8182.58 MB
Available Pagefile: 6214.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:284.15 GB) (Free:209.21 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:13.65 GB) (Free:2.25 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 85D7F68D)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=284 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================