Windows 7 Interpol Trojaner

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-AN1NJB7 on 17-10-2013 14:25:23
Running from G:\
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)
HKLM\...\Run: [OODefragTray] - C:\Program Files\OO Software\Defrag\oodtray.exe [3992904 2011-06-06] (O&O Software GmbH)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6937216 2009-10-09] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-19] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [DirectConsole2] - C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe [2861696 2009-08-11] (ASUSTek.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ACPW05DE] - C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe [822384 2011-11-17] (ACD Systems)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_MX_Premium\TrayServer_de.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Melchizedek\...\Run: [Nexus] - C:\Program Files (x86)\Winstep\Nexus.exe [16957056 2012-03-28] (Winstep Software Technologies)
HKU\Melchizedek\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\Melchizedek\...\Run: [PC Antivirus] - "C:\Program Files (x86)\PC Antivirus\PCCleanerAV.exe" /minimize
AppInit_DLLs:          [0 ] ()
Startup: C:\Users\Melchizedek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * OODBS

==================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-04-12] (Nero AG)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [3246920 2011-06-06] (O&O Software GmbH)
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 postgresql-8.4; C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files (x86)/PostgreSQL/8.4/data" -w [x]
S2 Winmgmt; C:\PROGRA~3\vqfrgtjw.pzz [x]
S2 Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService [x]

==================== Drivers (Whitelisted) ====================

S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [871408 2009-11-13] (Duplex Secure Ltd.)
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [x]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [x]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-17 13:04 - 2013-10-17 13:04 - 01954124 _____ (Farbar) C:\Users\Melchizedek\Desktop\FRST64.exe
2013-10-13 09:08 - 2013-10-13 09:09 - 15534198 _____ C:\Users\Melchizedek\Desktop\FIFA 14 by EA SPORTS™ [FULL] v1.3.0 apkmania.com.rar
2013-10-10 16:27 - 2013-10-17 13:15 - 00002710 _____ C:\Windows\setupact.log
2013-10-10 16:27 - 2013-10-10 18:20 - 00001388 _____ C:\Windows\PFRO.log
2013-10-10 16:27 - 2013-10-10 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-10-10 16:10 - 2013-10-10 16:19 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\AVPro
2013-10-10 16:10 - 2013-10-10 16:10 - 01332560 _____ (Sunbelt Software) C:\Windows\SysWOW64\sbte.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00582992 _____ (Sunbelt Software) C:\Windows\SysWOW64\sbap.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00415056 _____ (Sunbelt Software) C:\Windows\SysWOW64\SpursDownload.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00308560 _____ () C:\Windows\SysWOW64\vipre.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00160768 _____ C:\Windows\SysWOW64\unrar.dll
2013-10-10 16:10 - 2013-10-10 16:09 - 06205168 _____ (PC Cleaners) C:\Windows\uninstac.exe
2013-10-09 17:50 - 2013-10-10 19:30 - 00000000 ____D C:\Users\Melchizedek\Desktop\interpol
2013-10-09 16:32 - 2013-10-09 16:32 - 00000000 ____D C:\ProgramData\Oracle
2013-10-09 16:31 - 2013-10-09 16:31 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-09 16:31 - 2013-10-09 16:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-09 16:31 - 2013-10-09 16:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-09 16:31 - 2013-10-09 16:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-09 16:27 - 2013-10-09 16:27 - 00913832 _____ (Oracle Corporation) C:\Users\Melchizedek\Desktop\jxpiinstall.exe
2013-10-09 14:22 - 2013-10-09 14:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 14:22 - 2013-10-09 14:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 13:50 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 13:50 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-10-09 13:50 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-09 13:50 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 13:49 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 13:49 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 13:49 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 13:49 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-09 13:49 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-09 13:49 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-09 13:49 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-09 13:49 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-09 13:49 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-10-09 13:49 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 13:39 - 2013-10-09 13:42 - 00000000 ____D C:\Windows\System32\MRT
2013-10-09 13:37 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-09 13:37 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-10-09 13:37 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:37 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:37 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-09 13:37 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-09 13:37 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-09 13:37 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 13:37 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-09 13:37 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-09 13:37 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-10-09 13:37 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-10-09 13:37 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-10-09 13:37 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-09 13:37 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 13:37 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 13:37 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 13:37 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-09 13:37 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 13:37 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 13:36 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-10-09 13:36 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-09 13:23 - 2013-10-09 13:23 - 04369632 _____ (Piriform Ltd) C:\Users\Melchizedek\Desktop\ccsetup406.exe
2013-10-08 17:31 - 2013-10-08 17:31 - 00000000 ____D C:\FRST
2013-10-08 15:57 - 2013-10-08 17:35 - 00000000 ____D C:\AdwCleaner
2013-10-08 13:13 - 2013-10-08 16:17 - 95025368 ____T C:\ProgramData\vqfrgtjw.pff
2013-10-08 13:13 - 2013-10-08 16:06 - 00000000 _____ C:\ProgramData\vqfrgtjw.ctrl
2013-10-07 19:17 - 2013-10-08 07:28 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2013-10-06 13:18 - 2013-10-06 13:23 - 294266032 _____ C:\Users\Melchizedek\Desktop\Let´s Play Team Fortress 2 #001 [GERMAN_HD].mp4
2013-10-06 13:07 - 2013-10-06 13:13 - 302836428 _____ C:\Users\Melchizedek\Desktop\Lets Play Team Fortress 2 #002 [HD].mp4
2013-10-06 08:35 - 2013-10-06 08:35 - 00000000 ____D C:\Users\Melchizedek\Desktop\RamDevDas-BlvdofKrshn
2013-10-06 08:35 - 2013-10-06 08:35 - 00000000 ____D C:\Users\Melchizedek\Desktop\2005_20-%20Dakshina
2013-10-06 08:33 - 2013-10-06 08:33 - 00000000 ____D C:\Users\Melchizedek\Desktop\Medwyn_20Goodall_20-_20Music_20for_20Relaxation%20
2013-09-29 15:32 - 2013-09-29 15:51 - 102717466 _____ C:\Users\Melchizedek\Desktop\Ganjaman - Grenzenlos Festival Augsburg.MP4
2013-09-29 14:50 - 2013-09-29 14:50 - 00004128 _____ C:\Users\Melchizedek\Desktop\Ganjaman redet über das system_mp4.AVD
2013-09-28 20:08 - 2013-09-28 20:08 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\Malwarebytes
2013-09-28 20:07 - 2013-09-28 20:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-28 20:07 - 2013-09-28 20:07 - 00001092 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-28 20:07 - 2013-09-28 20:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-28 20:07 - 2013-04-04 13:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-09-28 17:40 - 2013-09-28 17:40 - 00000000 ____D C:\Users\Melchizedek\Desktop\Neuer Ordner
2013-09-27 18:04 - 2013-09-27 18:28 - 00000000 ____D C:\Program Files (x86)\stinger
2013-09-26 14:12 - 2013-10-07 19:21 - 00001923 _____ C:\Users\Melchizedek\Desktop\Neues Textdokument.txt
2013-09-26 11:19 - 2013-10-17 11:17 - 00000000 ____D C:\Users\Melchizedek\Desktop\bellafb
2013-09-25 15:04 - 2013-10-01 18:18 - 00000000 ____D C:\Users\Melchizedek\Desktop\HandyMukke
2013-09-22 08:52 - 2013-10-09 17:52 - 00000000 ____D C:\Users\Melchizedek\Desktop\musikid3tag2013
2013-09-19 09:59 - 2013-09-19 09:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-10-17 13:18 - 2013-05-29 10:45 - 00000000 ____D C:\Users\Melchizedek\AppData\Local\HTC MediaHub
2013-10-17 13:15 - 2013-10-10 16:27 - 00002710 _____ C:\Windows\setupact.log
2013-10-17 13:15 - 2012-10-10 16:50 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
2013-10-17 13:15 - 2009-11-12 22:32 - 03320612 _____ C:\Windows\System32\oodbs.lor
2013-10-17 13:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-17 13:13 - 2010-12-04 19:07 - 01148186 _____ C:\Windows\WindowsUpdate.log
2013-10-17 13:04 - 2013-10-17 13:04 - 01954124 _____ (Farbar) C:\Users\Melchizedek\Desktop\FRST64.exe
2013-10-17 13:02 - 2009-07-14 05:45 - 00017072 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-17 13:02 - 2009-07-14 05:45 - 00017072 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-17 11:17 - 2013-09-26 11:19 - 00000000 ____D C:\Users\Melchizedek\Desktop\bellafb
2013-10-17 07:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-10-16 17:22 - 2010-01-31 13:12 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\Skype
2013-10-16 16:11 - 2013-04-12 16:45 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-15 22:22 - 2009-11-13 12:16 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\uTorrent
2013-10-14 20:55 - 2011-08-05 10:30 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\vlc
2013-10-13 09:09 - 2013-10-13 09:08 - 15534198 _____ C:\Users\Melchizedek\Desktop\FIFA 14 by EA SPORTS™ [FULL] v1.3.0 apkmania.com.rar
2013-10-11 17:31 - 2010-01-31 13:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-11 17:31 - 2010-01-31 13:12 - 00000000 ____D C:\ProgramData\Skype
2013-10-10 19:30 - 2013-10-09 17:50 - 00000000 ____D C:\Users\Melchizedek\Desktop\interpol
2013-10-10 19:30 - 2013-09-11 18:50 - 00000000 ____D C:\Users\Melchizedek\Desktop\deutsch
2013-10-10 19:29 - 2013-09-11 18:51 - 00000000 ____D C:\Users\Melchizedek\Desktop\englisch
2013-10-10 18:20 - 2013-10-10 16:27 - 00001388 _____ C:\Windows\PFRO.log
2013-10-10 16:27 - 2013-10-10 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-10-10 16:19 - 2013-10-10 16:10 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\AVPro
2013-10-10 16:10 - 2013-10-10 16:10 - 01332560 _____ (Sunbelt Software) C:\Windows\SysWOW64\sbte.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00582992 _____ (Sunbelt Software) C:\Windows\SysWOW64\sbap.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00415056 _____ (Sunbelt Software) C:\Windows\SysWOW64\SpursDownload.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00308560 _____ () C:\Windows\SysWOW64\vipre.dll
2013-10-10 16:10 - 2013-10-10 16:10 - 00160768 _____ C:\Windows\SysWOW64\unrar.dll
2013-10-10 16:09 - 2013-10-10 16:10 - 06205168 _____ (PC Cleaners) C:\Windows\uninstac.exe
2013-10-10 15:45 - 2013-03-09 15:02 - 00000000 ____D C:\Users\Melchizedek\Desktop\musik
2013-10-10 15:29 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-10 15:19 - 2009-11-12 21:28 - 00000000 ____D C:\Users\Melchizedek\Documents\CCregs
2013-10-10 15:17 - 2010-10-31 23:37 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-10 15:17 - 2009-11-12 15:04 - 00000000 ____D C:\Windows\Panther
2013-10-09 17:52 - 2013-09-22 08:52 - 00000000 ____D C:\Users\Melchizedek\Desktop\musikid3tag2013
2013-10-09 16:38 - 2010-02-17 15:22 - 00000000 ____D C:\users\postgres.Melchizedek-PC
2013-10-09 16:32 - 2013-10-09 16:32 - 00000000 ____D C:\ProgramData\Oracle
2013-10-09 16:31 - 2013-10-09 16:31 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-09 16:30 - 2013-10-09 16:31 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-09 16:30 - 2013-10-09 16:31 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-09 16:30 - 2013-10-09 16:31 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-09 16:30 - 2012-05-12 10:50 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-10-09 16:30 - 2010-06-01 12:01 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-10-09 16:27 - 2013-10-09 16:27 - 00913832 _____ (Oracle Corporation) C:\Users\Melchizedek\Desktop\jxpiinstall.exe
2013-10-09 14:22 - 2013-10-09 14:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 14:22 - 2013-10-09 14:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 14:22 - 2009-11-12 19:23 - 00000000 ____D C:\Users\Melchizedek\AppData\Local\Adobe
2013-10-09 14:14 - 2009-07-14 05:45 - 05088184 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-09 13:42 - 2013-10-09 13:39 - 00000000 ____D C:\Windows\System32\MRT
2013-10-09 13:24 - 2010-12-04 11:55 - 00000000 ____D C:\Program Files\CCleaner
2013-10-09 13:23 - 2013-10-09 13:23 - 04369632 _____ (Piriform Ltd) C:\Users\Melchizedek\Desktop\ccsetup406.exe
2013-10-09 13:15 - 2011-12-24 22:40 - 00000000 ____D C:\Program Files (x86)\Nikon
2013-10-09 13:12 - 2010-08-03 15:38 - 00000000 ____D C:\Program Files (x86)\Nokia
2013-10-09 13:11 - 2013-03-05 16:57 - 00000000 ____D C:\ProgramData\MAGIX
2013-10-09 13:11 - 2013-03-05 16:57 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-10-09 13:07 - 2011-04-18 19:41 - 00000000 ____D C:\Program Files (x86)\Philips
2013-10-09 13:03 - 2010-07-16 19:17 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-09 13:02 - 2010-07-16 19:17 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-09 12:55 - 2009-11-12 15:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-09 12:54 - 2011-10-08 10:50 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-09 12:51 - 2010-06-24 18:58 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-10-09 12:43 - 2010-04-08 11:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-09 12:43 - 2009-11-12 15:52 - 00000000 ____D C:\ProgramData\Adobe
2013-10-09 12:41 - 2010-12-09 19:47 - 00000000 ____D C:\Program Files\Adobe
2013-10-09 12:27 - 2012-10-10 16:50 - 00000000 ____D C:\Windows\AutoKMS
2013-10-08 17:35 - 2013-10-08 15:57 - 00000000 ____D C:\AdwCleaner
2013-10-08 17:31 - 2013-10-08 17:31 - 00000000 ____D C:\FRST
2013-10-08 16:17 - 2013-10-08 13:13 - 95025368 ____T C:\ProgramData\vqfrgtjw.pff
2013-10-08 16:06 - 2013-10-08 13:13 - 00000000 _____ C:\ProgramData\vqfrgtjw.ctrl
2013-10-08 07:28 - 2013-10-07 19:17 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2013-10-07 19:21 - 2013-09-26 14:12 - 00001923 _____ C:\Users\Melchizedek\Desktop\Neues Textdokument.txt
2013-10-06 21:15 - 2009-07-14 18:58 - 43424164 _____ C:\Windows\System32\perfc007.dat
2013-10-06 21:15 - 2009-07-14 18:58 - 130516518 _____ C:\Windows\System32\perfh007.dat
2013-10-06 21:15 - 2009-07-14 06:13 - 00005442 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-06 13:23 - 2013-10-06 13:18 - 294266032 _____ C:\Users\Melchizedek\Desktop\Let´s Play Team Fortress 2 #001 [GERMAN_HD].mp4
2013-10-06 13:13 - 2013-10-06 13:07 - 302836428 _____ C:\Users\Melchizedek\Desktop\Lets Play Team Fortress 2 #002 [HD].mp4
2013-10-06 08:35 - 2013-10-06 08:35 - 00000000 ____D C:\Users\Melchizedek\Desktop\RamDevDas-BlvdofKrshn
2013-10-06 08:35 - 2013-10-06 08:35 - 00000000 ____D C:\Users\Melchizedek\Desktop\2005_20-%20Dakshina
2013-10-06 08:33 - 2013-10-06 08:33 - 00000000 ____D C:\Users\Melchizedek\Desktop\Medwyn_20Goodall_20-_20Music_20for_20Relaxation%20
2013-10-06 08:19 - 2013-04-30 15:34 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\Mp3tag
2013-10-01 18:18 - 2013-09-25 15:04 - 00000000 ____D C:\Users\Melchizedek\Desktop\HandyMukke
2013-09-29 15:51 - 2013-09-29 15:32 - 102717466 _____ C:\Users\Melchizedek\Desktop\Ganjaman - Grenzenlos Festival Augsburg.MP4
2013-09-29 15:14 - 2013-03-09 17:01 - 00000000 ____D C:\Users\Melchizedek\Documents\MAGIX_Videoton_Cleaning_Lab_DLV
2013-09-29 14:50 - 2013-09-29 14:50 - 00004128 _____ C:\Users\Melchizedek\Desktop\Ganjaman redet über das system_mp4.AVD
2013-09-28 20:08 - 2013-09-28 20:08 - 00000000 ____D C:\Users\Melchizedek\AppData\Roaming\Malwarebytes
2013-09-28 20:08 - 2013-09-28 20:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-28 20:07 - 2013-09-28 20:07 - 00001092 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-28 20:07 - 2013-09-28 20:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-28 17:40 - 2013-09-28 17:40 - 00000000 ____D C:\Users\Melchizedek\Desktop\Neuer Ordner
2013-09-27 18:28 - 2013-09-27 18:04 - 00000000 ____D C:\Program Files (x86)\stinger
2013-09-26 00:46 - 2009-11-12 18:28 - 80541720 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-23 00:28 - 2013-10-09 13:49 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 00:28 - 2013-10-09 13:49 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 00:27 - 2013-10-09 13:50 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 00:27 - 2013-10-09 13:49 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-22 23:55 - 2013-10-09 13:49 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-22 23:55 - 2013-10-09 13:49 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-22 23:55 - 2013-10-09 13:49 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-22 23:54 - 2013-10-09 13:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-22 23:54 - 2013-10-09 13:49 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-09-21 04:38 - 2013-10-09 13:50 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-21 04:30 - 2013-10-09 13:50 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 03:48 - 2013-10-09 13:49 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-09-21 03:39 - 2013-10-09 13:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 19:27 - 2010-08-29 15:24 - 00000000 ____D C:\Users\Public\Documents\Winstep
2013-09-19 10:58 - 2010-01-18 19:47 - 00026624 _____ C:\Users\Melchizedek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-19 10:42 - 2012-04-30 09:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-19 09:59 - 2013-09-19 09:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-19 09:59 - 2009-11-12 19:05 - 00000000 ____D C:\Users\Melchizedek\AppData\Local\Mozilla

Files to move or delete:
====================
C:\Users\Melchizedek\AppData\Roaming\ud_soundmanager.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
C:\ProgramData\vqfrgtjw.ctrl
C:\ProgramData\vqfrgtjw.pff


Some content of TEMP:
====================
C:\Users\Melchizedek\AppData\Local\Temp\230292-671033-pc-cleaner-pro-2013.exe
C:\Users\Melchizedek\AppData\Local\Temp\instloffer.exe
C:\Users\Melchizedek\AppData\Local\Temp\SkypeSetup.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

26
Restore point made on: 2013-10-03 15:27:31
Restore point made on: 2013-10-09 12:38:38
Restore point made on: 2013-10-09 12:39:10
Restore point made on: 2013-10-09 12:39:41
Restore point made on: 2013-10-09 12:40:24
Restore point made on: 2013-10-09 12:42:11
Restore point made on: 2013-10-09 12:43:36
Restore point made on: 2013-10-09 12:44:43
Restore point made on: 2013-10-09 12:46:09
Restore point made on: 2013-10-09 12:52:24
Restore point made on: 2013-10-09 12:54:24
Restore point made on: 2013-10-09 12:55:27
Restore point made on: 2013-10-09 12:56:42
Restore point made on: 2013-10-09 12:57:57
Restore point made on: 2013-10-09 12:59:20
Restore point made on: 2013-10-09 13:02:00
Restore point made on: 2013-10-09 13:04:16
Restore point made on: 2013-10-09 13:10:05
Restore point made on: 2013-10-09 13:10:29
Restore point made on: 2013-10-09 13:11:04
Restore point made on: 2013-10-09 13:12:04
Restore point made on: 2013-10-09 13:13:00
Restore point made on: 2013-10-09 13:15:08
Restore point made on: 2013-10-09 13:38:14
Restore point made on: 2013-10-09 16:30:17
Restore point made on: 2013-10-17 11:49:25

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 4095.11 MB
Available physical RAM: 3408.92 MB
Total Pagefile: 4093.26 MB
Available Pagefile: 3393.44 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: (Ultimate7) (Fixed) (Total:242.54 GB) (Free:48.68 GB) NTFS
Drive d: (DATA) (Fixed) (Total:223.12 GB) (Free:17.48 GB) NTFS
Drive g: () (Removable) (Total:14.94 GB) (Free:10.8 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 97646C29)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=243 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 15 GB) (Disk ID: F9875DE1)
Partition 1: (Active) - (Size=15 GB) - (Type=07 NTFS)


LastRegBack: 2013-10-11 11:18

==================== End Of Log ============================