FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Shitface (administrator) on SHITFACE-HP on 04-01-2014 20:22:51
Running from C:\Users\Shitface\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\stacsv64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\AESTSr64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
() C:\Program Files (x86)\TorrentExpress\TorrentExpress.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\audiosrv.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(APN LLC.) C:\Users\Shitface\AppData\Local\VNT\vntldr.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-29] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [WirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [499768 2009-09-01] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [QLBController] - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-10-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.)
HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-12-12] (Hewlett-Packard)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2010-01-22] (Hewlett-Packard Company)
HKCU\...\Run: [TorrentExpress] - C:\Program Files (x86)\TorrentExpress\TorrentExpress.exe [667648 2013-06-19] ()
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll [ ] ()
BootExecute: autocheck autochk /p \??\C:autocheck autochk *
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.claro-search.com/?affID=120133&babsrc=HP_ss&mntrId=8c03e0fe000000000000e02a825d6f3a
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?utf8in=1&fr=ietb&q={SearchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=120133&babsrc=SP_ss&mntrId=8c03e0fe000000000000e02a825d6f3a
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb203?a=6OzaPyGGSB&search={searchTerms}&i=26
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?utf8in=1&fr=ietb&q={SearchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Applon - {1B4D240E-8BDE-4C8D-8B93-C74D2F8A8284} - C:\Program Files (x86)\Tiny Media Player\Applon_ie.dll (Applon)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {09900DE8-1DCA-443F-9243-26FF581438AF} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR DefaultSearchKeyword:
CHR DefaultSearchProvider:
CHR DefaultSearchURL:
CHR DefaultNewTabURL:
CHR Extension: (Skype Click to Call) - C:\Users\Shitface\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0
CHR Extension: (Google Wallet) - C:\Users\Shitface\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Shitface\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dijpoieccemifpgijppmfkdhdjgggclg] - C:\Users\Shitface\AppData\Local\Google\Chrome\\User Data\\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\dijpoieccemifpgijppmfkdhdjgggclg.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx
==================== Services (Whitelisted) =================
R2 AESTFilters; C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [280120 2010-10-01] (Hewlett-Packard Company)
S3 npggsvc; C:\windows\SysWow64\GameMon.des [3955824 2012-10-16] (INCA Internet Co., Ltd.)
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\STacSV64.exe [244736 2010-01-29] (IDT, Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 BTMNET; C:\Windows\System32\DRIVERS\btmnet.sys [28672 2010-06-17] (Motorola, Inc.)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [96384 2010-05-21] (Realtek Semiconductor Corp.)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va012; \??\C:\windows\SysWOW64\Drivers\X6va012 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-04 20:22 - 2014-01-04 20:23 - 00014577 _____ C:\Users\Shitface\Downloads\FRST.txt
2014-01-04 20:22 - 2014-01-04 20:22 - 01931368 _____ (Farbar) C:\Users\Shitface\Downloads\FRST64.exe
2014-01-04 20:22 - 2014-01-04 20:22 - 00000000 ____D C:\FRST
2014-01-04 20:16 - 2014-01-04 20:16 - 00001461 _____ C:\Users\Shitface\Downloads\Download (4)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (3)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (2)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (1)
2014-01-04 20:14 - 2014-01-04 20:14 - 00001461 _____ C:\Users\Shitface\Downloads\Download
2014-01-04 18:46 - 2014-01-04 20:06 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-04 18:46 - 2014-01-04 20:05 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Opera Software
2014-01-04 18:46 - 2014-01-04 20:05 - 00000000 ____D C:\Users\Shitface\AppData\Local\Opera Software
2014-01-04 18:44 - 2014-01-04 18:45 - 33803296 _____ (Opera Software ASA) C:\Users\Shitface\Downloads\Opera_18.0.1284.68_Setup.exe
2014-01-04 16:29 - 2014-01-04 16:29 - 00000222 _____ C:\Users\Shitface\Desktop\Rust.url
2014-01-04 16:29 - 2014-01-04 16:29 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-03 17:31 - 2014-01-04 18:35 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-03 17:31 - 2014-01-03 17:31 - 01133552 _____ C:\Users\Shitface\Downloads\SteamSetup.exe
2014-01-03 17:31 - 2014-01-03 17:31 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2014-01-02 19:25 - 2014-01-02 19:25 - 00356352 _____ C:\Users\Shitface\Desktop\Minecraft.exe
2014-01-02 19:25 - 2014-01-02 19:25 - 00009142 _____ C:\Users\Shitface\Desktop\MineCraft.zip
2014-01-01 03:39 - 2014-01-01 03:48 - 00000084 _____ C:\Users\Shitface\Downloads\MOL_Properties.properties
2014-01-01 03:39 - 2014-01-01 03:48 - 00000000 ____D C:\Users\Shitface\minecraft
2014-01-01 03:39 - 2014-01-01 03:39 - 00473416 _____ C:\Users\Shitface\Downloads\MinecraftSMP cracked Launcher.jar
2014-01-01 03:39 - 2014-01-01 03:39 - 00473416 _____ C:\Users\Shitface\Downloads\MinecraftSMP cracked Launcher (1).jar
2013-12-31 21:41 - 2013-12-31 21:41 - 00000992 _____ C:\Users\Shitface\Desktop\Bandicam.lnk
2013-12-31 17:41 - 2013-12-31 17:41 - 00000000 ____D C:\Program Files (x86)\Gameforge4D
2013-12-31 16:47 - 2013-12-31 17:33 - 1652170224 _____ (Gameforge4D ) C:\Users\Shitface\Downloads\4Story_DE_4.2.1.exe
2013-12-31 00:49 - 2013-12-31 00:50 - 1283496964 _____ C:\Users\Shitface\Downloads\Lavanda2.rar
2013-12-30 01:54 - 2013-12-30 01:54 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\BANDISOFT
2013-12-30 01:53 - 2014-01-01 22:41 - 00000000 ____D C:\Users\Shitface\Documents\Bandicam
2013-12-30 01:53 - 2013-12-31 21:41 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-12-30 01:53 - 2013-12-31 21:41 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-12-30 01:53 - 2013-12-30 01:53 - 07374512 _____ (Bandisoft) C:\Users\Shitface\Downloads\bdcamsetup192.exe
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Users\Shitface\AppData\Local\VNT
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-28 17:23 - 2013-12-28 17:23 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Avira
2013-12-28 17:23 - 2013-12-28 17:23 - 00000000 ____D C:\ProgramData\APN
2013-12-28 17:22 - 2013-12-28 17:22 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-28 17:22 - 2013-12-28 17:22 - 00000000 ____D C:\ProgramData\Avira
2013-12-28 17:22 - 2013-12-28 17:22 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-28 17:22 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-12-28 17:22 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-12-28 17:22 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-12-28 17:22 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-12-28 17:16 - 2013-12-28 17:19 - 129598176 _____ C:\Users\Shitface\Downloads\avira_free_antivirus_de_14.0.2.286.exe
2013-12-28 16:23 - 2013-12-28 16:24 - 02547000 _____ (Eximion B.V.) C:\Users\Shitface\Downloads\KalydoPlayer_5.09.05.exe
2013-12-27 19:34 - 2013-12-27 19:34 - 00000540 _____ C:\Users\Shitface\Desktop\Neues Textdokument (3).txt
2013-12-23 14:10 - 2014-01-01 14:58 - 00000000 ____D C:\Users\Shitface\Desktop\Fusion-Network
2013-12-23 13:45 - 2013-12-23 14:10 - 1015453079 _____ C:\Users\Shitface\Downloads\Fusion-Network_15_11.2013.rar
2013-12-12 06:40 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-12 06:40 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-12 06:40 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-12 06:40 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-12 06:39 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-12 06:39 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-12 06:39 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-12 06:39 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-12 06:39 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-12 06:39 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-12 06:39 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-12 06:39 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-12 06:39 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-12 06:39 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-12 06:39 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-12 06:39 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-12 06:39 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-12 06:39 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-12 06:39 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-12 06:39 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-12 06:39 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-12 06:39 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-12 06:39 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-12 06:39 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-12 06:39 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-12 06:39 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-12 06:39 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-12 06:39 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-12 06:39 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-12 06:39 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-12 06:39 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-12 06:39 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-12 06:39 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-12 06:39 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-12 06:39 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-12 06:31 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-12 06:31 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-12 06:31 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-12 06:31 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-12 06:31 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-12 06:31 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-12 06:31 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-12 06:31 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-12 06:31 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-12 06:31 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-12 06:31 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-12 06:31 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-12 06:31 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-12 06:31 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-12 06:31 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-12 06:31 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-12 06:31 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-12 06:31 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-12 06:31 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-11 11:40 - 2013-12-11 11:40 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-08 19:02 - 2014-01-04 18:22 - 00000000 ___RD C:\SHITFACE-HP
2013-12-08 19:02 - 2013-12-08 19:02 - 00000528 ____R C:\MediaID.bin
==================== One Month Modified Files and Folders =======
2014-01-04 20:23 - 2014-01-04 20:22 - 00014577 _____ C:\Users\Shitface\Downloads\FRST.txt
2014-01-04 20:22 - 2014-01-04 20:22 - 01931368 _____ (Farbar) C:\Users\Shitface\Downloads\FRST64.exe
2014-01-04 20:22 - 2014-01-04 20:22 - 00000000 ____D C:\FRST
2014-01-04 20:21 - 2012-11-19 20:29 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Skype
2014-01-04 20:19 - 2012-11-19 17:42 - 02003761 _____ C:\windows\WindowsUpdate.log
2014-01-04 20:16 - 2014-01-04 20:16 - 00001461 _____ C:\Users\Shitface\Downloads\Download (4)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (3)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (2)
2014-01-04 20:15 - 2014-01-04 20:15 - 00001461 _____ C:\Users\Shitface\Downloads\Download (1)
2014-01-04 20:14 - 2014-01-04 20:14 - 00001461 _____ C:\Users\Shitface\Downloads\Download
2014-01-04 20:14 - 2013-02-20 20:00 - 00000952 ___SH C:\ProgramData\KGyGaAvL.sys
2014-01-04 20:06 - 2014-01-04 18:46 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-04 20:05 - 2014-01-04 18:46 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Opera Software
2014-01-04 20:05 - 2014-01-04 18:46 - 00000000 ____D C:\Users\Shitface\AppData\Local\Opera Software
2014-01-04 20:05 - 2013-05-15 19:37 - 00001425 _____ C:\Users\Shitface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-04 19:40 - 2013-12-04 17:35 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 19:40 - 2013-02-07 14:43 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 19:12 - 2009-07-14 05:45 - 00019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 19:12 - 2009-07-14 05:45 - 00019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 18:45 - 2014-01-04 18:44 - 33803296 _____ (Opera Software ASA) C:\Users\Shitface\Downloads\Opera_18.0.1284.68_Setup.exe
2014-01-04 18:35 - 2014-01-03 17:31 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 18:22 - 2013-12-08 19:02 - 00000000 ___RD C:\SHITFACE-HP
2014-01-04 18:05 - 2012-12-15 19:38 - 00000000 ____D C:\Users\Shitface\AppData\Local\CrashDumps
2014-01-04 18:05 - 2012-11-20 17:57 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\TS3Client
2014-01-04 18:05 - 2009-07-27 16:04 - 00000000 ____D C:\windows\Panther
2014-01-04 17:40 - 2013-12-04 17:35 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 16:29 - 2014-01-04 16:29 - 00000222 _____ C:\Users\Shitface\Desktop\Rust.url
2014-01-04 16:29 - 2014-01-04 16:29 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-04 12:33 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-04 03:29 - 2012-11-25 22:45 - 01527912 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2014-01-04 03:29 - 2010-12-10 04:42 - 00654852 _____ C:\windows\system32\perfh007.dat
2014-01-04 03:29 - 2010-12-10 04:42 - 00130434 _____ C:\windows\system32\perfc007.dat
2014-01-03 17:31 - 2014-01-03 17:31 - 01133552 _____ C:\Users\Shitface\Downloads\SteamSetup.exe
2014-01-03 17:31 - 2014-01-03 17:31 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2014-01-02 19:44 - 2013-03-10 15:17 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\.minecraft
2014-01-02 19:25 - 2014-01-02 19:25 - 00356352 _____ C:\Users\Shitface\Desktop\Minecraft.exe
2014-01-02 19:25 - 2014-01-02 19:25 - 00009142 _____ C:\Users\Shitface\Desktop\MineCraft.zip
2014-01-01 22:41 - 2013-12-30 01:53 - 00000000 ____D C:\Users\Shitface\Documents\Bandicam
2014-01-01 19:42 - 2013-04-09 19:36 - 00003204 _____ C:\windows\System32\Tasks\HPCeeScheduleForShitface
2014-01-01 19:42 - 2013-04-09 19:36 - 00000344 _____ C:\windows\Tasks\HPCeeScheduleForShitface.job
2014-01-01 14:58 - 2013-12-23 14:10 - 00000000 ____D C:\Users\Shitface\Desktop\Fusion-Network
2014-01-01 03:48 - 2014-01-01 03:39 - 00000084 _____ C:\Users\Shitface\Downloads\MOL_Properties.properties
2014-01-01 03:48 - 2014-01-01 03:39 - 00000000 ____D C:\Users\Shitface\minecraft
2014-01-01 03:39 - 2014-01-01 03:39 - 00473416 _____ C:\Users\Shitface\Downloads\MinecraftSMP cracked Launcher.jar
2014-01-01 03:39 - 2014-01-01 03:39 - 00473416 _____ C:\Users\Shitface\Downloads\MinecraftSMP cracked Launcher (1).jar
2014-01-01 03:39 - 2012-11-19 17:46 - 00000000 ____D C:\Users\Shitface
2013-12-31 21:41 - 2013-12-31 21:41 - 00000992 _____ C:\Users\Shitface\Desktop\Bandicam.lnk
2013-12-31 21:41 - 2013-12-30 01:53 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-12-31 21:41 - 2013-12-30 01:53 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-12-31 17:41 - 2013-12-31 17:41 - 00000000 ____D C:\Program Files (x86)\Gameforge4D
2013-12-31 17:33 - 2013-12-31 16:47 - 1652170224 _____ (Gameforge4D ) C:\Users\Shitface\Downloads\4Story_DE_4.2.1.exe
2013-12-31 16:52 - 2013-11-21 20:22 - 00000000 __SHD C:\windows\SysWOW64\AI_RecycleBin
2013-12-31 00:50 - 2013-12-31 00:49 - 1283496964 _____ C:\Users\Shitface\Downloads\Lavanda2.rar
2013-12-30 14:13 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-30 01:54 - 2013-12-30 01:54 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\BANDISOFT
2013-12-30 01:53 - 2013-12-30 01:53 - 07374512 _____ (Bandisoft) C:\Users\Shitface\Downloads\bdcamsetup192.exe
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Users\Shitface\AppData\Local\VNT
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-28 17:24 - 2013-12-28 17:24 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-28 17:23 - 2013-12-28 17:23 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\Avira
2013-12-28 17:23 - 2013-12-28 17:23 - 00000000 ____D C:\ProgramData\APN
2013-12-28 17:22 - 2013-12-28 17:22 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-28 17:22 - 2013-12-28 17:22 - 00000000 ____D C:\ProgramData\Avira
2013-12-28 17:22 - 2013-12-28 17:22 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-28 17:19 - 2013-12-28 17:16 - 129598176 _____ C:\Users\Shitface\Downloads\avira_free_antivirus_de_14.0.2.286.exe
2013-12-28 16:24 - 2013-12-28 16:23 - 02547000 _____ (Eximion B.V.) C:\Users\Shitface\Downloads\KalydoPlayer_5.09.05.exe
2013-12-27 19:34 - 2013-12-27 19:34 - 00000540 _____ C:\Users\Shitface\Desktop\Neues Textdokument (3).txt
2013-12-24 17:27 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-23 14:10 - 2013-12-23 13:45 - 1015453079 _____ C:\Users\Shitface\Downloads\Fusion-Network_15_11.2013.rar
2013-12-23 09:04 - 2013-04-09 19:02 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log
2013-12-22 21:15 - 2012-11-19 17:46 - 00000000 ____D C:\Users\Shitface\AppData\Roaming\hpqLog
2013-12-22 21:15 - 2010-12-10 04:44 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-12-22 21:15 - 2009-07-27 17:14 - 00000000 ____D C:\swsetup
2013-12-22 20:30 - 2013-04-28 15:54 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-12-22 20:15 - 2012-11-25 22:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-12-22 20:15 - 2012-11-19 17:47 - 00000000 ____D C:\ProgramData\FLEXnet
2013-12-22 20:15 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration
2013-12-21 20:11 - 2012-11-20 17:57 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-12-15 11:16 - 2012-11-20 02:38 - 00000000 ____D C:\windows\rescache
2013-12-14 11:32 - 2013-09-22 17:31 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-14 11:32 - 2013-09-22 17:31 - 00000000 ____D C:\windows\system32\MRT
2013-12-12 10:53 - 2009-07-14 06:13 - 01500294 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-12 10:47 - 2009-07-14 05:45 - 00277640 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-11 11:40 - 2013-12-11 11:40 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-11 11:40 - 2013-02-07 14:43 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 11:40 - 2013-02-07 14:43 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 11:40 - 2013-02-07 14:43 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-09 11:37 - 2013-12-28 17:22 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2013-12-28 17:22 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2013-12-28 17:22 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2013-12-28 17:22 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-12-08 19:02 - 2013-12-08 19:02 - 00000528 ____R C:\MediaID.bin
Files to move or delete:
====================
C:\ProgramData\hash.dat
Some content of TEMP:
====================
C:\Users\Shitface\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-04 16:16
==================== End Of Log ============================
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014
Ran by Shitface at 2014-01-04 20:23:44
Running from C:\Users\Shitface\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
AnotherLife Client Version 1.3 (x32 Version: 1.3 - Tim Witschel Serververmietung)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2951 - APN, LLC)
Bandicam (x32 Version: 1.9.2.454 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (x32 Version: - Bandisoft.com)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
CCleaner (Version: 4.01 - Piriform)
Corel Home Office - CS Templates (x32 Version: 5.6 - 公司名称) Hidden
Corel Home Office - CT Templates (x32 Version: 5.6 - 您的公司名稱) Hidden
Corel Home Office - IPM (x32 Version: 5.6 - Corel Corporation) Hidden
Corel Home Office - JP Templates (x32 Version: 5.6 - 会社名) Hidden
Corel Home Office - KR Templates (x32 Version: 5.6 - 회사명) Hidden
Corel Home Office - Launcher (x32 Version: 5.6 - Corel Corporation) Hidden
Corel Home Office - Templates RU (x32 Version: 5.6 - Название организации) Hidden
Corel Home Office - Templates1 (x32 Version: 5.6 - Your Company Name) Hidden
Corel Home Office (x32 Version: 5.0.85.588 - Corel Corporation)
Corel Home Office (x32 Version: 5.6 - Corel Corporation) Hidden
Energy Star Digital Logo (x32 Version: 1.0.1 - Hewlett-Packard)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (x32 Version: 1.5.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (x32 Version: 1.1.8.1 - Hewlett-Packard Company)
HP HotKey Support (Version: 4.0.3.1 - Hewlett-Packard Company)
HP Setup (x32 Version: 8.5.4371.3505 - Hewlett-Packard Company)
HP SoftPaq Download Manager (x32 Version: 3.0.5.0 - Hewlett-Packard Company)
HP Software Framework (x32 Version: 4.0.51.1 - Hewlett-Packard Company)
HP Software Setup (x32 Version: 7.0.1.6 - Hewlett-Packard Company)
HP Support Assistant (x32 Version: 7.0.39.15 - Hewlett-Packard Company)
HP Web Camera (Version: 1.0.0 - Hewlett-Packard) Hidden
HP Webcam (x32 Version: 1.0.25.0 - Roxio)
HP Webcam Driver (x32 Version: 6.1.7600.0049 - Realtek Semiconductor Corp.)
HP Wireless Assistant (x32 Version: 3.50.10.1 - Hewlett-Packard)
IDT Audio (x32 Version: 1.0.6268.0 - IDT)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2057 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014 - Intel Corporation)
Java 7 Update 9 (x32 Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
LightScribe System Software (x32 Version: 1.18.11.1 - LightScribe)
LSI HDA Modem (Version: 2.2.98 - LSI Corporation)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)
Ralink Motorola BC4 Bluetooth 3.0+HS Adapter (Version: 3.0.41.262 - Motorola, Inc.)
Ralink RT3090 802.11b/g/n WiFi Adapter (x32 Version: 1.2.0.27 - Ralink)
Realtek Ethernet Controller All-In-One Windows Driver (x32 Version: 1.12.0011 - Realtek)
Rust (x32 Version: - Facepunch Studios)
Skype Click to Call (x32 Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Steam (x32 Version: - Valve Corporation)
TeamSpeak 3 Client (x32 Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.16642 - TeamViewer)
Tiny Media Player v1.0 (x32 Version: 1.0.0.0 - )
Unity Web Player (HKCU Version: - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Windows 7 Default Setting (x32 Version: 1.0.1.6 - Hewlett-Packard Company)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WinZip 14.5 (x32 Version: 14.5.9095 - WinZip Computing, S.L. )
==================== Restore Points =========================
03-01-2014 03:50:17 Windows Update
04-01-2014 02:00:18 Windows Update
04-01-2014 02:29:18 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1DEF630F-8853-4C6E-81A8-344DA867ABA6} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {3059CCA3-2473-4546-A623-13781287BB50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-09-23] (Hewlett-Packard Company)
Task: {40374CB7-986B-487B-B128-A7E0D4CF977C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {63010A0A-626A-48CA-A7EF-D2AE6F26C601} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-04] (Google Inc.)
Task: {736BA112-658C-46F6-8684-22CA4D621095} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-12-12] (Microsoft)
Task: {C8E6094B-F3B3-4DE3-8205-7558ED683E4D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {CCE4DAC8-3C7C-4DD3-A78E-31F4B6324D23} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {ED2593FD-3D77-429C-99E0-EDD240BD71B1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {F0383CF6-714D-48DA-AAEA-0B9F492AD49F} - System32\Tasks\HPCeeScheduleForShitface => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {F2897158-5475-4FB5-B77A-A47603124BCF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-04] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForShitface.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (whitelisted) =============
2013-12-28 17:22 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2010-01-22 19:29 - 2010-01-22 19:29 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2010-01-22 19:30 - 2010-01-22 19:30 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2010-01-22 19:29 - 2010-01-22 19:29 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2013-06-05 09:52 - 2013-06-05 09:52 - 00279955 _____ () C:\Program Files (x86)\TorrentExpress\libidn-11.dll
2013-08-15 19:11 - 2013-08-15 19:11 - 00170496 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\44bfa824a3b8a6f789fda79a2e01a8db\IsdiInterop.ni.dll
2010-12-10 04:49 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-03 17:36 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-01-03 17:36 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-01-03 17:36 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-01-03 17:36 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-01-03 17:36 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-01-03 17:36 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-12-11 11:40 - 2013-12-11 11:40 - 16242056 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
2013-12-04 17:36 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-04 17:36 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-04 17:36 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-04 17:36 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-04 17:36 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Ralink Motorola BC4 Bluetooth 3.0+HS Adapter
Description: Ralink Motorola BC4 Bluetooth 3.0+HS Adapter
Class Guid: {a173b237-6a34-4bb5-aa63-2561160fa200}
Manufacturer: Motorola, Inc.
Service: BTMUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/04/2014 00:39:28 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (01/04/2014 00:36:26 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (01/04/2014 03:29:36 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Office Klick-und-Los 2010 - Update "Update for Microsoft Office 2010 (KB2598285) 32-Bit Edition" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (01/04/2014 03:02:24 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Office Klick-und-Los 2010 - Update "Update for Microsoft Office 2010 (KB2598285) 32-Bit Edition" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (01/03/2014 03:08:15 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (01/03/2014 03:06:08 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (01/03/2014 03:05:15 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/03/2014 02:49:51 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (01/03/2014 02:47:52 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: AUSNAHMEFEHLER beim Aufruf der Funktion IThread(ProtocolSrvConThread)::run() für die Datei
unknown
[ACCESS_VIOLATION Exception!! EIP = 0x73236ffb]
Bitte Avira informieren und die obige Datei übersenden!
Error: (01/03/2014 02:44:48 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
System errors:
=============
Error: (01/04/2014 03:29:36 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/04/2014 03:03:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/03/2014 05:37:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/03/2014 05:37:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (01/03/2014 03:02:28 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 03.01.2014 um 15:00:53 unerwartet heruntergefahren.
Error: (01/03/2014 04:50:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/03/2014 03:03:39 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/02/2014 04:46:08 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/02/2014 03:03:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Error: (01/01/2014 05:17:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Office 2010 (KB2598285) 32-Bit-Edition
Microsoft Office Sessions:
=========================
Error: (01/04/2014 00:39:28 PM) (Source: CVHSVC)(User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (01/04/2014 00:36:26 PM) (Source: CVHSVC)(User: )
Description: Too many failures while downloading ranges: 2
Error: (01/04/2014 03:29:36 AM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Microsoft Office Klick-und-Los 2010Update for Microsoft Office 2010 (KB2598285) 32-Bit Edition1603(NULL)(NULL)(NULL)
Error: (01/04/2014 03:02:24 AM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Microsoft Office Klick-und-Los 2010Update for Microsoft Office 2010 (KB2598285) 32-Bit Edition1603(NULL)(NULL)(NULL)
Error: (01/03/2014 03:08:15 PM) (Source: CVHSVC)(User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (01/03/2014 03:06:08 PM) (Source: CVHSVC)(User: )
Description: Too many failures while downloading ranges: 2
Error: (01/03/2014 03:05:15 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/03/2014 02:49:51 PM) (Source: CVHSVC)(User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (01/03/2014 02:47:52 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: unknownACCESS_VIOLATION0x73236ffbIThread(ProtocolSrvConThread)::run()
Error: (01/03/2014 02:44:48 PM) (Source: CVHSVC)(User: )
Description: Too many failures while downloading ranges: 2
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 3996.27 MB
Available physical RAM: 1909.83 MB
Total Pagefile: 7990.71 MB
Available Pagefile: 5238.93 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:280.79 GB) (Free:214.12 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 3AE5595A)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=281 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
SecurityCheck und:
