Windows Vista: Auf USB-Stick werden Ordner nur mit Verknüpfungen angezeigt.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-02-2015
Ran by Timsize (administrator) on TIMSIZE-PC on 09-02-2015 23:28:46
Running from c:\Users\Timsize\Downloads
Loaded Profiles: Timsize (Available profiles: Timsize)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 7 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\ver8Safer-Surf\S6Safer-Surfj.exe
() C:\Program Files\ZooToolbar\WBrowserDirect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\ver8Safer-Surf\Safer-Surf.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(PC Utilities Software Limited) C:\ProgramData\{2a2056fb-291a-ee13-2a20-056fb2915bec}\optimizerpro_soft_partner.exe
(Weather Protector LLC) C:\Program Files\StormWatch\StormWatch.exe
() C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files\Hotspot Shield\bin\hsswd.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(Weather Protector LLC) C:\Program Files\StormWatch\SWUpdaterSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\HSSCP.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\af_proxy_cmd.exe
() C:\Program Files\Hotspot Shield\bin\openvpn.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\FBWMgr.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\FBW.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\FBW.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\FBW.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Microsoft Corporation) C:\Windows\System32\mfpmp.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2015-02-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Safer-Surf] => C:\Program Files\ver8Safer-Surf\Safer-Surf.exe [118272 2014-08-10] ()
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [fst_de_173] => "C:\Program Files\fst_de_173\fst_de_173.exe"
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro 3.38\OptProLauncher.exe
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [171840 2014-05-23] ()
Startup: C:\Users\Timsize\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\optimizerpro_soft_partner.lnk
ShortcutTarget: optimizerpro_soft_partner.lnk -> C:\ProgramData\{2a2056fb-291a-ee13-2a20-056fb2915bec}\optimizerpro_soft_partner.exe (PC Utilities Software Limited)
Startup: C:\Users\Timsize\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatch.lnk
ShortcutTarget: StormWatch.lnk -> C:\Program Files\StormWatch\StormWatch.exe (Weather Protector LLC)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55422;https=127.0.0.1:55422;
ProxyEnable: [S-1-5-21-2479421501-3003247162-2090698253-1000] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-2479421501-3003247162-2090698253-1000] => http=127.0.0.1:8555;https=127.0.0.1:8555
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://start.mysearchdial.com/?f=1&a=ir_14_25_ch&cd=2XzuyEtN2Y1L1QzutDtD0F0F0B0Czz0ByEzzzy0B0FyByE0BtN0D0Tzu0SzytDtCtN1L2XzutBtFtBtCtFyBtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyB0DyD0Azy0AyCyCtGyBtAtA0CtGtCyD0AyDtGtCtDyDyDtGtBtB0F0C0B0A0F0DzzyCzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtD0DyEzzyB0CyCtG0Ezz0C0AtG0E0ByCtAtGyE0A0EtDtGtA0D0EyByEtByD0D0EyDyDtD2Q&cr=1703586962&ir=
HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1402569176&from=wpm0612&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEY08A8213882138
HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=US&userid=1bfeda6b-f517-4a43-a1c4-6344f0fb52f4&searchtype=ds&q={searchTerms}&installDate=27/02/2013
HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=US&userid=1bfeda6b-f517-4a43-a1c4-6344f0fb52f4&searchtype=ds&q={searchTerms}&installDate=27/02/2013
URLSearchHook: HKLM - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - No File
URLSearchHook: HKLM - (No Name) - {04a8dd1a-4754-48fe-a703-99846646ef04} - No File
URLSearchHook: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
SearchScopes: HKLM -> DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=US&userid=1bfeda6b-f517-4a43-a1c4-6344f0fb52f4&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.only-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B89700FF5D7FE6F3&affID=129280&tsp=5336
SearchScopes: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=US&userid=1bfeda6b-f517-4a43-a1c4-6344f0fb52f4&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.only-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B89700FF5D7FE6F3&affID=129280&tsp=5336
SearchScopes: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1402569176&from=wpm0612&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEY08A8213882138&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_25_ch&cd=2XzuyEtN2Y1L1QzutDtD0F0F0B0Czz0ByEzzzy0B0FyByE0BtN0D0Tzu0SzytDtCtN1L2XzutBtFtBtCtFyBtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyB0DyD0Azy0AyCyCtGyBtAtA0CtGtCyD0AyDtGtCtDyDyDtGtBtB0F0C0B0A0F0DzzyCzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtD0DyEzzyB0CyCtG0Ezz0C0AtG0E0ByCtAtGyE0A0EtDtGtA0D0EyByEtByD0D0EyDyDtD2Q&cr=1703586962&ir=
BHO: No Name -> {04a8dd1a-4754-48fe-a703-99846646ef04} -> No File
BHO: Safer-Surf -> {6B30A35A-CAB6-BC8D-02A5-C68829DFFA5A} -> C:\Program Files\ver8Safer-Surf\176.dll ()
BHO: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -> No File
Toolbar: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - No File
Toolbar: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> No Name - {04A8DD1A-4754-48FE-A703-99846646EF04} - No File
Toolbar: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000 -> No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 172.16.65.254
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\user.js
FF SearchPlugin: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\searchplugins\Zoo Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Zoo Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\delta-homes.xml
FF Extension: MediaPlayerEnhance - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com [2015-02-07]
FF Extension: Avira Savings Advisor - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\ciuvo-extension@avira.de [2014-07-21]
FF Extension: Plus-HD-V1.8c - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\EOPN29927080@OCIFAPD100469180.com [2015-02-07]
FF Extension: WoWWCoUUpoun - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\ltqotm@xxia.net [2014-04-10]
FF Extension: SalesChecker - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\mjb-qtsm@eeoykrhu-.co.uk [2014-07-02]
FF Extension: Quick Start - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\quick_start@gmail.com [2014-05-31]
FF Extension: shortcut - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\shortcutff@gmail.com [2014-07-31]
FF Extension: Yahoo! Toolbar - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2015-02-07]
FF Extension: Zoo Toolbar - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\{7bae994e-55d4-4124-af27-804288ec7422} [2014-07-14]
FF Extension: Iminent - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\firefoxmini@go.im.xpi [2014-08-10]
FF Extension: JSLoader - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\jid1-AmwpXGJDNkwpNA@jetpack.xpi [2014-07-16]
FF Extension: Suche App - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-21]
FF Extension: MySearchDial - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-07-02]
FF Extension: Adblock Edge - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-31]
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com [2014-05-31]
FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-05-31]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-02-27]
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\extensions\quick_start@gmail.com
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\extensions\faststartff@gmail.com
FF HKLM\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Timsize\AppData\Roaming\Mozilla\Firefox\Profiles\ohrflras.default\extensions\shortcutff@gmail.com
FF HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-04-25]
FF HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\Firefox\Extensions: [{710EF659-BFDD-438D-28D0-AE8CADB62C10}] - C:\Program Files\ver8Safer-Surf\176.xpi
FF Extension: Safer-Surf - C:\Program Files\ver8Safer-Surf\176.xpi [2014-08-10]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (cosstminn) - C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgkooiphedkpapgcjkbpjiikcjniaici [2014-07-21]
CHR Extension: (Avira Browserschutz) - C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-23]
CHR Extension: (MySearchDial) - C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff [2015-02-08]
CHR HKLM\...\Chrome\Extension: [cojnmaaohncijldefpkpkkakjonfmgeb] - C:\Program Files\avira\Chrome\avira-1.5.14.crx [2013-12-11]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - No Path
StartMenuInternet: Google Chrome - chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2015-02-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2015-02-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2009-01-08] (Macrovision Europe Ltd.) [File not signed]
R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [1019688 2014-06-26] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [78512 2014-06-26] ()
R2 HssWd; C:\Program Files\Hotspot Shield\bin\hsswd.exe [573224 2014-06-26] ()
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SWUpdater; C:\Program Files\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
S2 8df1bcd0; "C:\Windows\system32\rundll32.exe" "c:\Program Files\Optimizer Pro 3.38\OptProMon.dll",ENT
S2 ca82e1a5; "C:\Windows\system32\rundll32.exe" "c:\progra~1\optimi~1\OptProCrashSvc.dll",ServiceMain
S4 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2015-02-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-02-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2014-06-26] (AnchorFree Inc.)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2014-06-12] (NetFilterSDK.com) [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-07-02] (Avira GmbH)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2014-03-19] (Anchorfree Inc.)
R2 webinstr; C:\Windows\system32\Drivers\webinstr.sys [51336 2014-07-16] (Corsica)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-09 23:28 - 2015-02-09 23:29 - 00022277 _____ () C:\Users\Timsize\Downloads\FRST.txt
2015-02-09 23:28 - 2015-02-09 23:29 - 00000000 ____D () C:\FRST
2015-02-09 23:27 - 2015-02-09 23:27 - 01124352 _____ (Farbar) C:\Users\Timsize\Downloads\FRST.exe
2015-02-09 23:26 - 2015-02-09 23:26 - 00000476 _____ () C:\Windows\system32\defogger_disable.log
2015-02-09 23:26 - 2015-02-09 23:26 - 00000000 _____ () C:\Users\Timsize\defogger_reenable
2015-02-09 23:24 - 2015-02-09 23:24 - 00050477 _____ () C:\Users\Timsize\Downloads\Defogger.exe
2015-02-07 02:09 - 2015-02-09 22:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-07 01:11 - 2015-02-07 02:07 - 00000000 ____D () C:\ProgramData\{2a2056fb-291a-ee13-2a20-056fb2915bec}
2015-02-07 01:10 - 2015-02-08 20:52 - 00000000 ____D () C:\Program Files\StormWatch
2015-02-07 01:10 - 2015-02-07 09:04 - 00000000 ____D () C:\Users\Timsize\AppData\Local\StormWatch
2015-02-07 01:10 - 2015-02-07 01:10 - 00000000 ____D () C:\Users\Timsize\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
2015-02-07 01:10 - 2015-02-07 01:10 - 00000000 ____D () C:\Users\Timsize\AppData\Local\Weather_Protector_LLC

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-09 23:26 - 2013-02-26 19:38 - 00000000 ____D () C:\Users\Timsize
2015-02-09 23:17 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-09 23:17 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-09 21:52 - 2008-01-21 08:16 - 01445310 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-09 20:57 - 2014-07-21 20:57 - 00000000 ____D () C:\Program Files\cosstminn
2015-02-09 20:19 - 2014-08-10 17:00 - 00000000 ____D () C:\Program Files\ver8Safer-Surf
2015-02-09 20:19 - 2014-07-07 18:56 - 00000000 ____D () C:\Program Files\HQube-V1.6
2015-02-09 20:18 - 2014-07-16 22:01 - 00000000 ____D () C:\Users\Timsize\AppData\Roaming\iejsloader
2015-02-09 19:16 - 2013-02-26 19:26 - 01451073 _____ () C:\Windows\WindowsUpdate.log
2015-02-08 21:05 - 2014-08-10 17:00 - 00000392 _____ () C:\Windows\Tasks\Safer-Surf Update.job
2015-02-08 21:05 - 2014-08-10 17:00 - 00000372 _____ () C:\Windows\Tasks\Safer-Surf_wd.job
2015-02-08 21:05 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-08 21:04 - 2014-08-01 11:27 - 00039400 _____ () C:\Windows\PFRO.log
2015-02-08 20:54 - 2006-11-02 14:01 - 00032602 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-07 09:56 - 2013-12-11 21:31 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-07 09:51 - 2013-02-26 21:02 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-07 09:51 - 2013-02-26 21:02 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-07 09:05 - 2014-07-21 21:49 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-02-07 09:05 - 2014-07-21 21:49 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-07 02:15 - 2013-02-27 12:38 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-02-07 02:12 - 2014-08-01 11:48 - 00010145 _____ () C:\Windows\setupact.log
2015-02-07 02:10 - 2014-07-07 18:49 - 00000000 ____D () C:\Users\Timsize\AppData\Local\fst_de_88

==================== Files in the root of some directories =======

2013-09-17 21:34 - 2013-09-17 21:34 - 0003863 _____ () C:\Users\Timsize\AppData\Roaming\1892.exe
2013-08-24 21:52 - 2013-08-24 21:52 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\4995.exe
2013-09-20 00:29 - 2013-09-20 00:29 - 0003862 _____ () C:\Users\Timsize\AppData\Roaming\4C62.exe
2013-08-24 21:52 - 2013-08-24 21:52 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\5385.exe
2013-09-20 00:29 - 2013-09-20 00:29 - 0003862 _____ () C:\Users\Timsize\AppData\Roaming\547E.exe
2013-08-23 18:34 - 2013-08-23 18:34 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\56DB.exe
2013-08-23 18:34 - 2013-08-23 18:34 - 0003863 _____ () C:\Users\Timsize\AppData\Roaming\6167.exe
2013-08-15 13:16 - 2013-08-15 13:16 - 0000000 _____ () C:\Users\Timsize\AppData\Roaming\711C.exe
2013-09-08 20:51 - 2013-09-08 20:51 - 0003863 _____ () C:\Users\Timsize\AppData\Roaming\8C57.exe
2013-09-10 11:15 - 2013-09-10 11:15 - 0003863 _____ () C:\Users\Timsize\AppData\Roaming\C746.exe
2013-09-17 22:48 - 2013-09-17 22:48 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\C836.exe
2014-07-07 19:01 - 2014-07-07 19:01 - 0005265 _____ () C:\Users\Timsize\AppData\Roaming\callbanner.png
2013-09-17 21:34 - 2013-09-17 21:34 - 0003863 _____ () C:\Users\Timsize\AppData\Roaming\CDE.exe
2013-08-24 11:54 - 2013-08-24 11:54 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\D746.exe
2013-08-22 19:03 - 2013-08-22 19:03 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\D84D.exe
2013-08-22 19:03 - 2013-08-22 19:03 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\E559.exe
2013-08-24 11:54 - 2013-08-24 11:54 - 0011133 _____ () C:\Users\Timsize\AppData\Roaming\E616.exe
2013-08-07 18:54 - 2013-08-07 18:54 - 0000000 _____ () C:\Users\Timsize\AppData\Roaming\EC1B.exe
2014-04-09 13:32 - 2014-07-18 23:55 - 0000094 _____ () C:\Users\Timsize\AppData\Roaming\WB.CFG
2014-07-07 20:13 - 2014-07-07 20:13 - 0000266 _____ () C:\Users\Timsize\AppData\Local\aavid.bat
2014-07-07 19:12 - 2014-07-07 19:12 - 0000266 _____ () C:\Users\Timsize\AppData\Local\atealf.bat
2014-07-07 19:21 - 2014-07-07 19:21 - 0000266 _____ () C:\Users\Timsize\AppData\Local\cfdaorok.bat
2014-07-07 19:43 - 2014-07-07 19:43 - 0000266 _____ () C:\Users\Timsize\AppData\Local\cplavkgt.bat
2014-07-07 19:16 - 2014-07-07 19:16 - 0000266 _____ () C:\Users\Timsize\AppData\Local\cxtad.bat
2013-04-16 13:13 - 2014-01-30 12:12 - 0005972 _____ () C:\Users\Timsize\AppData\Local\d3d9caps.dat
2014-07-07 19:29 - 2014-07-07 19:29 - 0000266 _____ () C:\Users\Timsize\AppData\Local\daqgft.bat
2013-04-03 22:47 - 2014-09-27 23:19 - 0016896 _____ () C:\Users\Timsize\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-07 19:27 - 2014-07-07 19:27 - 0000266 _____ () C:\Users\Timsize\AppData\Local\dfpfh.bat
2014-07-07 19:39 - 2014-07-07 19:39 - 0000266 _____ () C:\Users\Timsize\AppData\Local\duetbs.bat
2014-07-07 20:03 - 2014-07-07 20:03 - 0000266 _____ () C:\Users\Timsize\AppData\Local\dzotj.bat
2014-07-07 19:41 - 2014-07-07 19:41 - 0000266 _____ () C:\Users\Timsize\AppData\Local\fdfdo.bat
2014-07-07 20:11 - 2014-07-07 20:11 - 0000266 _____ () C:\Users\Timsize\AppData\Local\fefcu.bat
2014-07-07 19:04 - 2014-07-07 19:04 - 0000266 _____ () C:\Users\Timsize\AppData\Local\fmlsrar.bat
2014-07-07 20:05 - 2014-07-07 20:05 - 0000266 _____ () C:\Users\Timsize\AppData\Local\ghpppq.bat
2014-07-07 19:23 - 2014-07-07 19:23 - 0000266 _____ () C:\Users\Timsize\AppData\Local\gongong.bat
2014-07-07 19:53 - 2014-07-07 19:53 - 0000266 _____ () C:\Users\Timsize\AppData\Local\haztmf.bat
2014-07-07 19:25 - 2014-07-07 19:25 - 0000266 _____ () C:\Users\Timsize\AppData\Local\isvhi.bat
2014-07-07 19:06 - 2014-07-07 19:06 - 0000266 _____ () C:\Users\Timsize\AppData\Local\jlfceacf.bat
2014-07-07 19:14 - 2014-07-07 19:14 - 0000266 _____ () C:\Users\Timsize\AppData\Local\jnbebey.bat
2014-07-07 19:02 - 2014-07-07 19:02 - 0000266 _____ () C:\Users\Timsize\AppData\Local\jozfbm.bat
2014-07-07 19:19 - 2014-07-07 19:19 - 0000266 _____ () C:\Users\Timsize\AppData\Local\lkigfdba.bat
2014-07-07 20:09 - 2014-07-07 20:09 - 0000266 _____ () C:\Users\Timsize\AppData\Local\mdczzfw.bat
2014-07-07 19:45 - 2014-07-07 19:45 - 0000266 _____ () C:\Users\Timsize\AppData\Local\mkjigf.bat
2014-07-07 20:15 - 2014-07-07 20:15 - 0000266 _____ () C:\Users\Timsize\AppData\Local\mutcai.bat
2014-07-07 19:37 - 2014-07-07 19:37 - 0000266 _____ () C:\Users\Timsize\AppData\Local\ngngng.bat
2014-07-07 19:10 - 2014-07-07 19:10 - 0000266 _____ () C:\Users\Timsize\AppData\Local\nmtcsba.bat
2014-07-07 19:59 - 2014-07-07 19:59 - 0000266 _____ () C:\Users\Timsize\AppData\Local\nvdkssai.bat
2014-07-07 19:31 - 2014-07-07 19:31 - 0000266 _____ () C:\Users\Timsize\AppData\Local\nwfmnu.bat
2014-07-07 19:57 - 2014-07-07 19:57 - 0000266 _____ () C:\Users\Timsize\AppData\Local\oghpii.bat
2014-07-07 19:47 - 2014-07-07 19:47 - 0000266 _____ () C:\Users\Timsize\AppData\Local\oqibcs.bat
2014-07-26 21:00 - 2014-07-31 17:37 - 0000003 _____ () C:\Users\Timsize\AppData\Local\proxy.log
2014-07-07 20:18 - 2014-07-07 20:18 - 0000266 _____ () C:\Users\Timsize\AppData\Local\qacudfrb.bat
2014-07-07 19:49 - 2014-07-07 19:49 - 0000266 _____ () C:\Users\Timsize\AppData\Local\qudalnyb.bat
2014-07-13 15:36 - 2014-07-21 22:45 - 0146432 _____ () C:\Users\Timsize\AppData\Local\sptqvsw.gdb
2014-07-13 15:36 - 2014-07-27 18:59 - 1041623 _____ () C:\Users\Timsize\AppData\Local\sptqvsw.gss
2014-07-07 19:51 - 2014-07-07 19:51 - 0000266 _____ () C:\Users\Timsize\AppData\Local\taoujpdj.bat
2014-07-07 20:20 - 2014-07-07 20:20 - 0000266 _____ () C:\Users\Timsize\AppData\Local\thvcw.bat
2014-07-07 20:01 - 2014-07-07 20:01 - 0000266 _____ () C:\Users\Timsize\AppData\Local\tronsrd.bat
2014-07-07 19:08 - 2014-07-07 19:08 - 0000266 _____ () C:\Users\Timsize\AppData\Local\wendmn.bat
2014-07-07 19:33 - 2014-07-07 19:33 - 0000266 _____ () C:\Users\Timsize\AppData\Local\whpxpqh.bat
2014-07-07 20:07 - 2014-07-07 20:07 - 0000266 _____ () C:\Users\Timsize\AppData\Local\wngofv.bat
2014-07-07 19:35 - 2014-07-07 19:35 - 0000266 _____ () C:\Users\Timsize\AppData\Local\xqjbtm.bat
2014-07-07 19:55 - 2014-07-07 19:55 - 0000266 _____ () C:\Users\Timsize\AppData\Local\xybsbdn.bat
2013-05-31 13:06 - 2013-05-31 13:06 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-06-03 20:45 - 2013-06-04 09:02 - 0013494 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\Timsize\mp3DirectCut.exe


Some content of TEMP:
====================
C:\Users\Timsize\AppData\Local\Temp\avgnt.exe
C:\Users\Timsize\AppData\Local\Temp\buenosearch.exe
C:\Users\Timsize\AppData\Local\Temp\optprosetup.exe
C:\Users\Timsize\AppData\Local\Temp\ose00000.exe
C:\Users\Timsize\AppData\Local\Temp\tbu391F.exe
C:\Users\Timsize\AppData\Local\Temp\tbu48E.exe
C:\Users\Timsize\AppData\Local\Temp\tbu5235.exe
C:\Users\Timsize\AppData\Local\Temp\tbu6AF6.exe
C:\Users\Timsize\AppData\Local\Temp\tbuD460.exe
C:\Users\Timsize\AppData\Local\Temp\tmp1445.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-08 22:35

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-02-2015
Ran by Timsize at 2015-02-09 23:29:53
Running from c:\Users\Timsize\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Avira (HKLM\...\{df495620-2ba9-412d-828d-b27f020d9fc8}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Dropbox (HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Kastor - All Video Downloader V 5.9.1 (HKLM\...\{CB84FEF5-C573-4328-B9AF-B28568A4E10E}_is1) (Version: 5.9.1.0 - KastorSoft)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - )
Snap.Do Engine (HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\{05714d04-b414-4d5e-805e-80665f6e940a}) (Version: 11.7.1.13233 - ReSoft Ltd.) <==== ATTENTION
StormWatch (HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\StormWatch) (Version: 1.0.1.36 - StormWatch)
Update for PriceMeter (HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\...\PriceMeterUpdater) (Version: - Update for PriceMeter) <==== ATTENTION
Zoo Toolbar 6.9 (HKLM\...\{8ce4e458-3478-4e1b-b6d5-2fb25a05f360}_is1) (Version: 6.9 - InfoSpace LLC) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Timsize\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2479421501-3003247162-2090698253-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Timsize\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Restore Points =========================

13-09-2014 01:20:38 Geplanter Prüfpunkt
14-09-2014 21:57:42 Geplanter Prüfpunkt
16-09-2014 08:45:21 Geplanter Prüfpunkt
16-09-2014 16:54:50 Windows Update
19-09-2014 10:18:52 Windows Update
22-09-2014 12:42:43 Removed Snap.Do
23-09-2014 15:07:10 Windows Update
24-09-2014 09:38:32 Geplanter Prüfpunkt
25-09-2014 16:57:51 Geplanter Prüfpunkt
26-09-2014 12:07:15 Windows Update
26-09-2014 12:36:10 Windows Defender Checkpoint
06-02-2015 18:30:24 Geplanter Prüfpunkt
07-02-2015 09:12:16 Windows Update
07-02-2015 09:55:35 Windows Update
09-02-2015 20:56:52 Windows Defender Checkpoint

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2014-06-19 17:09 - 00000804 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1            d3oxij66pru1i3.cloudfront.net


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {01B7ADEA-3697-4891-8693-4BFA8EF3C76E} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe
Task: {058BAA3C-D8F8-44CF-94FA-FF6BED53487C} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files\ZooToolbar\WBrowserDirect.exe [2014-09-24] () <==== ATTENTION
Task: {0CCF4CB0-A42E-4E74-A8F3-DE72767E99F9} - \freeven-firefoxinstaller No Task File <==== ATTENTION
Task: {1416486C-3B14-4612-A549-E008A7DCFFE3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated)
Task: {1D2641C8-F4EA-48DF-B598-93FD73079E2D} - \freeven-enabler No Task File <==== ATTENTION
Task: {1F7352F4-5676-433B-8397-DE827CD8CA5B} - \freeven-codedownloader No Task File <==== ATTENTION
Task: {206A02D2-7239-4477-8DA7-0F5781387B4D} - System32\Tasks\Safer-Surf Update => C:\Program Files\ver8Safer-Surf\K9Safer-Surfk96.exe <==== ATTENTION
Task: {28D635C7-0D59-4624-8C1A-8DC157B1757B} - \freeven-chromeinstaller No Task File <==== ATTENTION
Task: {42157351-1710-45C1-8079-D93F4CD8440C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {4E9E33B6-FCDE-4FC6-88AA-9FACA220E335} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5498FD3A-FD43-46B1-BE02-82CD79F0A09F} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe
Task: {5839B4B0-B4DB-4ABD-9159-65E60BFA7167} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files\ZooToolbar\WSystemDefender.exe [2014-09-24] ()
Task: {68634B62-813B-44E9-8D3C-B87FF7C605C8} - System32\Tasks\EPUpdater => C:\Users\Timsize\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-12-12] () <==== ATTENTION
Task: {6C29BA3C-F953-40C9-BBDA-6D208A60D5FF} - \PCHelpers1st No Task File <==== ATTENTION
Task: {8BF9BD1B-72A4-4F7C-86A5-171D9D05E1AA} - System32\Tasks\Safer-Surf_wd => C:\Program Files\ver8Safer-Surf\S6Safer-Surfj.exe [2014-08-10] () <==== ATTENTION
Task: {A85F4513-18F9-4F6E-8502-11CF9A0D2234} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files\Optimizer Pro 3.38\OptProLauncher.exe <==== ATTENTION
Task: {B5A36A7D-5A28-46C4-B66A-3C37A40A1F6D} - \PCHelpers_period No Task File <==== ATTENTION
Task: {C18CC13A-8A27-4369-AD4D-B844CFAF4023} - System32\Tasks\Browser Updater\Browser Updater => C:\Program Files\ZooToolbar\WPackageUpdater.exe [2014-09-24] ()
Task: {DA47969F-45DF-44DA-BB52-CFAC29F01F48} - \freeven-updater No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Safer-Surf Update.job => C:\Program Files\ver8Safer-Surf\K9Safer-Surfk96.exe <==== ATTENTION
Task: C:\Windows\Tasks\Safer-Surf_wd.job => C:\Program Files\ver8Safer-Surf\S6Safer-Surfj.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2001-10-28 13:12 - 2001-10-28 13:12 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2014-08-10 17:00 - 2014-08-10 17:00 - 00120832 _____ () C:\Program Files\ver8Safer-Surf\S6Safer-Surfj.exe
2014-06-22 20:48 - 2014-09-24 03:36 - 00033648 _____ () C:\Program Files\ZooToolbar\WBrowserDirect.exe
2014-08-15 08:08 - 2014-07-14 15:49 - 00049744 _____ () C:\Users\Timsize\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-08-10 17:00 - 2014-08-10 17:00 - 00118272 _____ () C:\Program Files\ver8Safer-Surf\Safer-Surf.exe
2014-07-14 15:49 - 2014-07-14 15:49 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2007-09-11 00:45 - 2007-09-11 00:45 - 00124832 _____ () C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-26 22:56 - 2014-06-26 22:56 - 00573224 _____ () C:\Program Files\Hotspot Shield\bin\hsswd.exe
2014-06-26 22:50 - 2014-06-26 22:50 - 00966440 _____ () C:\Program Files\Hotspot Shield\bin\af_proxy.dll
2014-07-14 15:49 - 2014-07-14 15:49 - 00065104 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-05-31 15:40 - 2014-06-04 01:54 - 03866224 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-06-01 10:09 - 2014-05-14 00:40 - 04217672 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-06-01 10:09 - 2014-05-14 00:40 - 00414536 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-06-01 10:09 - 2014-05-14 00:40 - 01732424 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-07-11 04:14 - 2014-07-08 07:18 - 14663856 _____ () C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\PepperFlash\14.0.0.145\pepflashplayer.dll
2014-06-01 10:16 - 2014-02-10 12:44 - 04592128 _____ () C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2014-06-01 10:16 - 2014-02-10 12:44 - 00112128 _____ () C:\Users\Timsize\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
2014-06-26 23:28 - 2014-06-26 23:28 - 00229160 _____ () C:\Program Files\Hotspot Shield\bin\cmwhydraplugin.dll
2014-06-26 23:02 - 2014-06-26 23:02 - 00520488 _____ () C:\Program Files\Hotspot Shield\bin\HssRep.dll
2014-06-26 23:06 - 2014-06-26 23:06 - 00189736 _____ () C:\Program Files\Hotspot Shield\bin\cfghlp.dll
2014-06-26 22:31 - 2014-06-26 22:31 - 00598312 _____ () C:\Program Files\Hotspot Shield\bin\openvpn.exe
2009-03-27 21:02 - 2009-03-27 21:02 - 01554920 _____ () C:\Program Files\Hotspot Shield\bin\libeay32.dll
2009-03-27 21:02 - 2009-03-27 21:02 - 00332254 _____ () C:\Program Files\Hotspot Shield\bin\libssl32.dll
2015-02-07 09:51 - 2015-02-07 09:51 - 16852144 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2479421501-3003247162-2090698253-1000\Control Panel\Desktop\\Wallpaper -> c:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Wallpaper Galactic_1900x1440.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-2479421501-3003247162-2090698253-500 - Administrator - Disabled)
fbwuser (S-1-5-21-2479421501-3003247162-2090698253-1001 - Limited - Disabled)
Gast (S-1-5-21-2479421501-3003247162-2090698253-501 - Limited - Disabled)
Timsize (S-1-5-21-2479421501-3003247162-2090698253-1000 - Administrator - Enabled) => C:\Users\Timsize

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/09/2015 08:57:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/09/2015 08:56:50 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {caeaaa35-0d6e-4fc2-a6a1-1238de2dd3e8}

Error: (02/08/2015 09:06:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2015 08:34:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 10:05:33 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/07/2015 10:05:32 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/07/2015 02:35:46 AM) (Source: VSS) (EventID: 12298) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000], Leerung[0x00000000], Freigabe[0x80042314], Ausführung[0x00000000].


Vorgang:
Asynchroner Vorgang wird ausgeführt

Kontext:
Aktueller Status: DoSnapshotSet

Error: (02/07/2015 02:35:46 AM) (Source: VSS) (EventID: 12310) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{9bf2c431-8041-11e2-aea9-806e6f6e6963} - 00000144,0x0053c010,00EA7C18,0,00EA8C20,4096,[0]).


Vorgang:
Schattenkopien werden übertragen

Kontext:
Ausführungskontext: System Provider

Error: (02/07/2015 02:08:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 02:03:25 AM) (Source: VSS) (EventID: 12289) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy29,0xc0000000,0x00000003,...)". hr = 0x80070005.


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (02/09/2015 08:57:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/09/2015 08:56:50 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005

Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {caeaaa35-0d6e-4fc2-a6a1-1238de2dd3e8}

Error: (02/08/2015 09:06:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2015 08:34:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 10:05:33 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/07/2015 10:05:32 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/07/2015 02:35:46 AM) (Source: VSS) (EventID: 12298) (User: )
Description: C:\00x000000000x000000000x800423140x00000000

Vorgang:
Asynchroner Vorgang wird ausgeführt

Kontext:
Aktueller Status: DoSnapshotSet

Error: (02/07/2015 02:35:46 AM) (Source: VSS) (EventID: 12310) (User: )
Description: DeviceIoControl(\\?\Volume{9bf2c431-8041-11e2-aea9-806e6f6e6963} - 00000144,0x0053c010,00EA7C18,0,00EA8C20,4096,[0])

Vorgang:
Schattenkopien werden übertragen

Kontext:
Ausführungskontext: System Provider

Error: (02/07/2015 02:08:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 02:03:25 AM) (Source: VSS) (EventID: 12289) (User: )
Description: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy29,0xc0000000,0x00000003,...)0x80070005


CodeIntegrity Errors:
===================================
Date: 2015-02-09 23:29:17.419
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:17.273
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:17.106
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:16.959
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:16.735
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:16.553
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:16.400
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2015-02-09 23:29:16.257
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-11-24 23:03:29.162
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Timsize\AppData\Local\Temp\TEMP.^^^\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-11-24 23:03:28.968
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Timsize\AppData\Local\Temp\TEMP.^^^\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 72%
Total physical RAM: 2999.98 MB
Available physical RAM: 839.82 MB
Total Pagefile: 6210.29 MB
Available Pagefile: 3232.68 MB
Total Virtual: 2047.88 MB
Available Virtual: 1889.46 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:285.09 GB) (Free:140.47 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: 240F65D6)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=285.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================