Trojaner-Board - Gerätemanager unter Windows7 leer -event. Trojaner ?

Hallo, danke für die schnelle Hilfe !

FRST.txt

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-04-2014

Ran by EDDIE (administrator) on EDDIE-PC on 22-04-2014 17:00:09

Running from C:\Users\EDDIE\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

() C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe

() C:\ProgramData\DatacardService\DCService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

() C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser HD Edition\MBCameraMonitor.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe

(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Fujitsu) C:\Program Files (x86)\Fujitsu\AIS Connect\bin\AISMessageForYou.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHndHkb.exe

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.EXE

(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1861416 2009-10-09] (Synaptics Incorporated)

HKLM\...\Run: [PfNet] => C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6310912 2010-06-24] (FUJITSU LIMITED)

HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264 2009-07-30] (FUJITSU LIMITED)

HKLM\...\Run: [FDM7] => C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712 2009-11-26] (FUJITSU LIMITED)

HKLM\...\Run: [LoadFujitsuQuickTouch] => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [157544 2009-10-15] (FUJITSU LIMITED)

HKLM\...\Run: [LoadBtnHnd] => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [35176 2009-10-15] (FUJITSU LIMITED)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)

HKLM-x32\...\Run: [LoadFUJ02E3] => C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe [36712 2009-10-08] (FUJITSU LIMITED)

HKLM-x32\...\Run: [IndicatorUtility] => C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [47976 2009-10-09] (FUJITSU LIMITED)

HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Mirror Tray icon] => C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912 2009-07-08] (CyberLink Corp.)

HKLM-x32\...\Run: [AIS_MessageForYou] => C:\Program Files (x86)\Fujitsu\AIS Connect\bin\AISMessageForYou.exe [1965056 2010-03-18] (Fujitsu)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1661856 2014-04-19] (Simply Super Software)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1881642484-1841782945-982198653-1001\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)

HKU\S-1-5-21-1881642484-1841782945-982198653-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

Startup: C:\Users\EDDIE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=FTSG&bmod=FTSG

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {02FFDFB6-B3DD-45B6-96A3-DA5A801C59F4} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

SearchScopes: HKCU - {1C07D89C-87EE-4C44-8B7B-79ADE7EE611D} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

SearchScopes: HKCU - {428D14C8-8786-4B0C-9AE4-B3DF7D80F67A} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

SearchScopes: HKCU - {55C603F5-9810-4BD9-BE03-CFBBED300935} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

SearchScopes: HKCU - {B41CF142-459A-4ED2-B2BD-36928FA149CB} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

SearchScopes: HKCU - {C7961BA8-7581-4101-8D7F-78D6BC8E3ECF} URL = 

SearchScopes: HKCU - {CA1858FF-6B74-4BAB-8CCC-A484AC44F0C9} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0

BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default

FF DefaultSearchEngine: Amazon.de

FF SelectedSearchEngine: Amazon.de

FF Homepage: hxxp://www.ostseebad-trassenheide.de/template/trassenheide/webcamstrand/webcam_strand/pic.php?path=webcam_strand

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\duckduckgo.xml

FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\googlede.xml

FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\safesearch.xml

FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\wettercom.xml

FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\youtube-videosuche.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Schnäppchenfuchs Gutscheinfinder - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\firefox@schnaeppchenfuchs.com [2013-01-05]

FF Extension: WOT - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27]

FF Extension: Adblock Plus Pop-up Addon - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-12-27]

FF Extension: anonymoX - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\client@anonymox.net.xpi [2013-12-15]

FF Extension: external IP - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\externalip@erik.morlin.xpi [2011-08-25]

FF Extension: Ghostery - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\firefox@ghostery.com.xpi [2013-08-17]

FF Extension: DuckDuckGo Plus - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2013-09-08]

FF Extension: TrackMeNot - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-01-13]

FF Extension: NoScript - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-08-25]

FF Extension: BugMeNot Plugin - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}.xpi [2011-12-27]

FF Extension: Adblock Plus - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-25]

FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\

FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2014-01-04]

FF HKCU\...\Firefox\Extensions: [mail@shopping-preise.de] - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\extensions\mail@shopping-preise.de

FF HKCU\...\Firefox\Extensions: [extension@preispilot.com] - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\extensions\extension@preispilot.com
 

==================== Services (Whitelisted) =================
 

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()

R2 AISConnect; C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe [32768 2009-01-26] ()

R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation)

R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [330240 2010-06-24] (FUJITSU LIMITED)

R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2009-07-30] (FUJITSU LIMITED)
 

==================== Drivers (Whitelisted) ====================
 

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2011-09-06] (Google Inc)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-01-04] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-01-04] (Symantec Corporation)

U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [252928 2010-04-30] (Huawei Technologies Co., Ltd.)

U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [114560 2010-03-20] (Huawei Technologies Co., Ltd.)

R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED)

R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)

R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140421.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-22] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)

R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140421.033\ENG64.SYS [126040 2014-01-04] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140421.033\EX64.SYS [2099288 2014-01-04] (Symantec Corporation)

R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-01-04] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)

S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]

S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]

S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-22 17:00 - 2014-04-22 17:00 - 00022472 _____ () C:\Users\EDDIE\Downloads\FRST.txt

2014-04-22 17:00 - 2014-04-22 17:00 - 00000000 ____D () C:\FRST

2014-04-22 16:59 - 2014-04-22 16:59 - 02061312 _____ (Farbar) C:\Users\EDDIE\Downloads\FRST64.exe

2014-04-22 16:53 - 2014-04-22 16:53 - 00027400 _____ () C:\Users\EDDIE\Downloads\devcon.zip

2014-04-22 08:12 - 2014-04-22 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{D1E24903-6DD0-40DA-AF3F-8448CBDDE8CF}

2014-04-21 18:18 - 2014-04-21 18:18 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E8BC1574-5720-4DE5-ABCC-6EDFBF46ABDA}

2014-04-21 15:39 - 2014-04-21 15:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys

2014-04-21 15:38 - 2014-04-21 15:39 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{70622781-0C47-482E-A2FC-AACE24281AA5}

2014-04-20 09:08 - 2014-04-20 09:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CF600483-EBC7-41F1-9D7F-A40F0859787B}

2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\Documents\Simply Super Software

2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Roaming\Simply Super Software

2014-04-19 11:58 - 2014-04-19 12:00 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover

2014-04-19 11:58 - 2014-04-19 11:58 - 00001145 _____ () C:\Users\Public\Desktop\Trojan Remover.lnk

2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Simply Super Software

2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Licenses

2014-04-19 10:41 - 2014-04-19 10:42 - 21407864 _____ (Simply Super Software ) C:\Users\EDDIE\Downloads\trjsetup690.exe

2014-04-19 10:37 - 2014-04-19 10:37 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{8C2DA287-5E6B-4753-8475-3E350A0DE4F5}

2014-04-19 10:27 - 2014-04-19 10:27 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE(1).exe

2014-04-19 10:25 - 2014-04-22 10:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\NPE

2014-04-19 10:25 - 2014-04-19 10:26 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE.exe

2014-04-19 09:15 - 2014-04-19 09:15 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BED805A0-A0DB-4F47-A41F-DB29122EB2D0}

2014-04-18 19:07 - 2014-04-18 19:07 - 00380416 _____ () C:\Users\EDDIE\Downloads\Gmer-19357.exe

2014-04-18 18:21 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-04-18 18:21 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-04-18 18:21 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-04-18 18:21 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-04-18 18:20 - 2014-04-18 18:21 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log

2014-04-18 18:10 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-04-18 18:10 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-04-18 18:02 - 2014-04-18 18:03 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6D520F94-C704-4F57-9530-324394528595}

2014-04-17 16:34 - 2014-04-22 16:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-17 16:33 - 2014-04-17 16:33 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-04-17 16:33 - 2014-04-17 16:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-17 16:33 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-17 16:33 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-17 16:33 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-17 16:32 - 2014-04-17 16:33 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\EDDIE\Downloads\mbam-setup-2.0.1.1004.exe

2014-04-17 15:14 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-04-17 15:14 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-04-17 15:14 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-04-17 15:14 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-04-17 15:14 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-04-17 15:14 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-04-17 15:14 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-04-17 15:14 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-04-17 15:14 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-04-17 15:14 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-04-17 15:14 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-04-17 15:14 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-04-17 15:14 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-04-17 15:14 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-04-17 15:14 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-04-17 15:14 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-04-17 15:14 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-04-17 15:14 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-04-17 14:56 - 2014-04-17 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf

2014-04-17 14:34 - 2014-04-17 14:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\LG Electronics

2014-04-17 14:09 - 2014-04-17 14:10 - 09441140 _____ () C:\Users\EDDIE\Downloads\LGUnitedMobileDriver_S4981MAN38AP22_ML_WHQL_Ver_3.8.1(0)_4.9.8.1.zip

2014-04-17 13:39 - 2014-04-17 14:33 - 00000000 ____D () C:\Program Files (x86)\LG Electronics

2014-04-17 08:06 - 2014-04-17 08:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AAF269BF-1297-44CB-B27F-C38908D1E84C}

2014-04-16 11:06 - 2014-04-16 11:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E50A0730-D4A0-4FB2-BB21-AB3C8662CFE3}

2014-04-15 10:14 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-15 10:14 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-15 10:13 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-04-15 10:13 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-04-15 10:13 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-15 10:13 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-04-15 10:13 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-15 10:13 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-15 10:13 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-15 10:13 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-15 10:13 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-15 10:13 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-15 10:13 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-04-15 10:13 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-15 10:13 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-15 10:13 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-15 10:13 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-15 10:13 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-15 10:13 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-15 10:13 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-15 10:13 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-15 10:13 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-15 10:13 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-15 10:13 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-15 10:13 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-15 10:13 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-15 10:13 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-15 10:13 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-15 10:13 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-15 10:13 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-15 10:13 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-15 10:13 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-15 10:13 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-15 10:13 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-15 10:13 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-15 10:13 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-15 10:13 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-15 10:13 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-15 10:13 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-15 10:13 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-15 10:13 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-15 10:13 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-15 10:13 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-15 10:13 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-15 10:13 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-15 10:13 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-15 10:13 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-15 10:13 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-04-15 07:59 - 2014-04-15 07:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{71FB05BA-58F0-407C-BEA8-68A6B15A0B1E}

2014-04-14 18:39 - 2014-04-14 18:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DDFC8284-B5A4-4938-8C0B-9A24A1581FFA}

2014-04-14 14:07 - 2014-04-14 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{471943C3-ECAF-4516-BD4C-6B403BB5E029}

2014-04-13 09:27 - 2014-04-13 09:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{790A7709-34DD-4E47-8FE3-A21FBDE658AC}

2014-04-13 09:00 - 2014-04-13 09:00 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{5BFDBC54-12C2-46E5-A4A8-FA7FC75ABB8F}

2014-04-13 08:58 - 2014-04-13 08:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{544021E9-DC95-415A-AE28-A2772642A9CE}

2014-04-12 13:27 - 2014-04-12 13:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9D0647AF-5AD9-4F87-9DE4-F2300967A03C}

2014-04-11 14:28 - 2014-04-11 14:29 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{79DB5F93-A169-4823-9B0C-7339CFDF4F51}

2014-04-10 14:17 - 2014-04-10 14:17 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{30901ABB-9B22-4F38-A007-E115CAD7C2F4}

2014-04-10 12:24 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-04-10 12:24 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2014-04-10 12:24 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2014-04-10 12:24 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2014-04-10 12:24 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2014-04-10 12:24 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2014-04-10 12:24 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-04-10 12:24 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2014-04-10 12:24 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2014-04-10 12:24 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2014-04-10 12:24 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2014-04-10 12:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2014-04-10 12:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2014-04-10 12:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2014-04-10 12:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll

2014-04-10 12:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll

2014-04-10 12:24 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-04-10 12:20 - 2014-04-10 12:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BA130065-622B-4BD9-B66E-A5A3F78D6525}

2014-04-09 18:10 - 2014-04-09 18:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{89FA2741-CF05-4847-8340-B6452F957A43}

2014-04-08 13:30 - 2014-04-08 13:30 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{00368F33-9306-4B1B-AD96-4152782B2562}

2014-04-07 08:53 - 2014-04-07 08:53 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9C536EBA-91C2-4076-ABEA-33CDE4236201}

2014-04-06 21:34 - 2014-04-06 21:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{91CB2D89-BE94-441F-A4FE-2404E36D97CB}

2014-04-06 10:55 - 2014-02-01 16:28 - 00450712 _____ () C:\Windows\system32\Drivers\etc\hosts.20140406-105550.backup

2014-04-06 08:50 - 2014-04-06 08:50 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3F0E3590-47AF-4C7E-B497-178D69BDE3C2}

2014-04-05 08:32 - 2014-04-05 08:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{A9E31A77-F3D3-4A9E-A3BD-A0F8E3572EFC}

2014-04-04 18:41 - 2014-04-04 18:42 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{17AD4D5A-EEA9-42E8-9ECF-A4C4E567F40B}

2014-04-03 08:26 - 2014-04-03 08:26 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CD7B67F5-B997-4806-A2EA-F3BE6C0A8C71}

2014-04-03 08:13 - 2014-04-03 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{803D5B67-1827-4AE8-81D0-A9B3E17AC2DA}

2014-04-02 14:32 - 2014-04-02 14:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{647E8175-90A9-45A2-9E25-B8252FAD6883}

2014-04-01 12:09 - 2014-04-01 12:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{1259CD38-8367-4ECA-BCE2-5F812DDA57C5}

2014-03-31 18:38 - 2014-03-31 18:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{33B5A778-788C-47DB-B36D-522701A137B7}

2014-03-31 13:43 - 2014-03-31 13:43 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{B7DAA449-EF50-4020-8ADB-FB99C2568195}

2014-03-30 09:20 - 2014-03-30 09:21 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6E5B666D-1A19-4AA3-BA79-6727D95333BA}

2014-03-29 10:34 - 2014-03-29 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-03-29 10:31 - 2014-03-29 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-03-29 09:40 - 2014-03-29 09:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{F6ADC4F1-2AFF-4FBA-8067-05FBF3B263FF}

2014-03-28 08:57 - 2014-03-28 08:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3EA1EA11-494C-469C-A910-48BA2A5451E1}

2014-03-27 14:46 - 2014-03-27 14:46 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{272568F4-A171-407A-9AD4-888B1E13A1A4}

2014-03-26 15:01 - 2014-03-26 15:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AE637F94-71E6-473E-8A10-7306F2D04E57}

2014-03-26 10:57 - 2014-03-26 10:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{63AB7EC0-84BF-4119-B908-5FB9D222E311}

2014-03-25 14:08 - 2014-03-25 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AB479E29-00AB-4000-9698-1FAE4564C295}

2014-03-24 12:01 - 2014-03-24 12:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DB912AFA-E1DA-4F67-8161-EE2A4C7A0171}

2014-03-23 09:10 - 2014-03-23 09:11 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AC5E8F6B-FA98-455C-B399-5BE29195864E}
 

==================== One Month Modified Files and Folders =======
 

2014-04-22 17:00 - 2014-04-22 17:00 - 00022472 _____ () C:\Users\EDDIE\Downloads\FRST.txt

2014-04-22 17:00 - 2014-04-22 17:00 - 00000000 ____D () C:\FRST

2014-04-22 16:59 - 2014-04-22 16:59 - 02061312 _____ (Farbar) C:\Users\EDDIE\Downloads\FRST64.exe

2014-04-22 16:59 - 2011-08-23 21:59 - 01437067 _____ () C:\Windows\WindowsUpdate.log

2014-04-22 16:53 - 2014-04-22 16:53 - 00027400 _____ () C:\Users\EDDIE\Downloads\devcon.zip

2014-04-22 16:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-04-22 16:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-04-22 16:39 - 2014-04-17 16:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-22 16:37 - 2011-08-23 13:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-04-22 16:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-22 16:37 - 2009-07-14 06:51 - 00271137 _____ () C:\Windows\setupact.log

2014-04-22 16:07 - 2012-09-09 09:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-22 15:21 - 2011-08-23 13:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-04-22 15:07 - 2014-01-11 10:32 - 00000000 ____D () C:\Users\EDDIE\Documents\SCHRIFTVERKEHR

2014-04-22 12:49 - 2011-10-30 09:17 - 00173056 _____ () C:\Users\EDDIE\Desktop\Haushaltsbuch.xls

2014-04-22 10:13 - 2014-04-19 10:25 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\NPE

2014-04-22 08:13 - 2014-04-22 08:12 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{D1E24903-6DD0-40DA-AF3F-8448CBDDE8CF}

2014-04-21 18:18 - 2014-04-21 18:18 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E8BC1574-5720-4DE5-ABCC-6EDFBF46ABDA}

2014-04-21 15:39 - 2014-04-21 15:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys

2014-04-21 15:39 - 2014-04-21 15:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{70622781-0C47-482E-A2FC-AACE24281AA5}

2014-04-20 09:09 - 2014-04-20 09:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CF600483-EBC7-41F1-9D7F-A40F0859787B}

2014-04-19 14:23 - 2011-02-14 14:57 - 00700118 _____ () C:\Windows\system32\perfh007.dat

2014-04-19 14:23 - 2011-02-14 14:57 - 00149968 _____ () C:\Windows\system32\perfc007.dat

2014-04-19 14:23 - 2009-07-14 07:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-19 12:00 - 2014-04-19 11:58 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover

2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\Documents\Simply Super Software

2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Roaming\Simply Super Software

2014-04-19 11:58 - 2014-04-19 11:58 - 00001145 _____ () C:\Users\Public\Desktop\Trojan Remover.lnk

2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Simply Super Software

2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Licenses

2014-04-19 10:42 - 2014-04-19 10:41 - 21407864 _____ (Simply Super Software ) C:\Users\EDDIE\Downloads\trjsetup690.exe

2014-04-19 10:37 - 2014-04-19 10:37 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{8C2DA287-5E6B-4753-8475-3E350A0DE4F5}

2014-04-19 10:27 - 2014-04-19 10:27 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE(1).exe

2014-04-19 10:26 - 2014-04-19 10:25 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE.exe

2014-04-19 10:25 - 2011-08-23 13:30 - 00000000 ____D () C:\ProgramData\Norton

2014-04-19 09:15 - 2014-04-19 09:15 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BED805A0-A0DB-4F47-A41F-DB29122EB2D0}

2014-04-18 19:07 - 2014-04-18 19:07 - 00380416 _____ () C:\Users\EDDIE\Downloads\Gmer-19357.exe

2014-04-18 18:22 - 2013-10-21 19:45 - 00000000 ____D () C:\ProgramData\Oracle

2014-04-18 18:21 - 2014-04-18 18:20 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log

2014-04-18 18:21 - 2013-06-29 08:05 - 00000000 ____D () C:\Program Files (x86)\Java

2014-04-18 18:03 - 2014-04-18 18:02 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6D520F94-C704-4F57-9530-324394528595}

2014-04-17 16:33 - 2014-04-17 16:33 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-04-17 16:33 - 2014-04-17 16:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-17 16:33 - 2014-04-17 16:32 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\EDDIE\Downloads\mbam-setup-2.0.1.1004.exe

2014-04-17 16:33 - 2013-03-14 18:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-17 14:56 - 2014-04-17 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf

2014-04-17 14:42 - 2011-08-23 13:22 - 00000000 ____D () C:\Users\EDDIE

2014-04-17 14:40 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-04-17 14:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-04-17 14:34 - 2014-04-17 14:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\LG Electronics

2014-04-17 14:33 - 2014-04-17 13:39 - 00000000 ____D () C:\Program Files (x86)\LG Electronics

2014-04-17 14:10 - 2014-04-17 14:09 - 09441140 _____ () C:\Users\EDDIE\Downloads\LGUnitedMobileDriver_S4981MAN38AP22_ML_WHQL_Ver_3.8.1(0)_4.9.8.1.zip

2014-04-17 08:06 - 2014-04-17 08:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AAF269BF-1297-44CB-B27F-C38908D1E84C}

2014-04-16 12:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-04-16 11:06 - 2014-04-16 11:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E50A0730-D4A0-4FB2-BB21-AB3C8662CFE3}

2014-04-15 10:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-04-15 07:59 - 2014-04-15 07:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{71FB05BA-58F0-407C-BEA8-68A6B15A0B1E}

2014-04-14 20:13 - 2014-04-18 18:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-04-14 20:05 - 2014-04-18 18:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-04-14 20:05 - 2014-04-18 18:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-04-14 20:04 - 2014-04-18 18:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-04-14 18:40 - 2014-04-14 18:39 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DDFC8284-B5A4-4938-8C0B-9A24A1581FFA}

2014-04-14 14:08 - 2014-04-14 14:07 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{471943C3-ECAF-4516-BD4C-6B403BB5E029}

2014-04-13 09:27 - 2014-04-13 09:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{790A7709-34DD-4E47-8FE3-A21FBDE658AC}

2014-04-13 09:00 - 2014-04-13 09:00 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{5BFDBC54-12C2-46E5-A4A8-FA7FC75ABB8F}

2014-04-13 08:59 - 2014-04-13 08:58 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{544021E9-DC95-415A-AE28-A2772642A9CE}

2014-04-12 13:27 - 2014-04-12 13:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9D0647AF-5AD9-4F87-9DE4-F2300967A03C}

2014-04-12 13:24 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-04-11 14:29 - 2014-04-11 14:28 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{79DB5F93-A169-4823-9B0C-7339CFDF4F51}

2014-04-10 14:17 - 2014-04-10 14:17 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{30901ABB-9B22-4F38-A007-E115CAD7C2F4}

2014-04-10 12:30 - 2012-07-15 10:29 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-04-10 12:28 - 2013-07-15 07:55 - 00000000 ____D () C:\Windows\system32\MRT

2014-04-10 12:26 - 2011-08-23 16:21 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-04-10 12:20 - 2014-04-10 12:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BA130065-622B-4BD9-B66E-A5A3F78D6525}

2014-04-09 18:10 - 2014-04-09 18:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{89FA2741-CF05-4847-8340-B6452F957A43}

2014-04-08 13:30 - 2014-04-08 13:30 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{00368F33-9306-4B1B-AD96-4152782B2562}

2014-04-07 08:53 - 2014-04-07 08:53 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9C536EBA-91C2-4076-ABEA-33CDE4236201}

2014-04-06 21:34 - 2014-04-06 21:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{91CB2D89-BE94-441F-A4FE-2404E36D97CB}

2014-04-06 20:16 - 2011-08-23 13:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-04-06 20:16 - 2011-08-23 13:14 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-04-06 08:50 - 2014-04-06 08:50 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3F0E3590-47AF-4C7E-B497-178D69BDE3C2}

2014-04-05 08:32 - 2014-04-05 08:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{A9E31A77-F3D3-4A9E-A3BD-A0F8E3572EFC}

2014-04-04 18:42 - 2014-04-04 18:41 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{17AD4D5A-EEA9-42E8-9ECF-A4C4E567F40B}

2014-04-03 09:51 - 2014-04-17 16:33 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-03 09:51 - 2014-04-17 16:33 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-03 09:50 - 2014-04-17 16:33 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-03 08:26 - 2014-04-03 08:26 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CD7B67F5-B997-4806-A2EA-F3BE6C0A8C71}

2014-04-03 08:13 - 2014-04-03 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{803D5B67-1827-4AE8-81D0-A9B3E17AC2DA}

2014-04-02 14:32 - 2014-04-02 14:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{647E8175-90A9-45A2-9E25-B8252FAD6883}

2014-04-01 12:09 - 2014-04-01 12:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{1259CD38-8367-4ECA-BCE2-5F812DDA57C5}

2014-03-31 18:38 - 2014-03-31 18:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{33B5A778-788C-47DB-B36D-522701A137B7}

2014-03-31 13:43 - 2014-03-31 13:43 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{B7DAA449-EF50-4020-8ADB-FB99C2568195}

2014-03-30 09:21 - 2014-03-30 09:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6E5B666D-1A19-4AA3-BA79-6727D95333BA}

2014-03-29 11:59 - 2012-05-03 12:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-03-29 10:34 - 2014-03-29 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-03-29 10:34 - 2014-01-04 20:55 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-03-29 10:34 - 2014-01-04 20:55 - 00002507 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk

2014-03-29 10:34 - 2014-01-04 20:54 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-03-29 10:31 - 2014-03-29 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-03-29 09:40 - 2014-03-29 09:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{F6ADC4F1-2AFF-4FBA-8067-05FBF3B263FF}

2014-03-28 17:07 - 2012-02-03 13:49 - 00000000 ____D () C:\ProgramData\ashampoo

2014-03-28 08:57 - 2014-03-28 08:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3EA1EA11-494C-469C-A910-48BA2A5451E1}

2014-03-27 14:46 - 2014-03-27 14:46 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{272568F4-A171-407A-9AD4-888B1E13A1A4}

2014-03-26 15:01 - 2014-03-26 15:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AE637F94-71E6-473E-8A10-7306F2D04E57}

2014-03-26 10:57 - 2014-03-26 10:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{63AB7EC0-84BF-4119-B908-5FB9D222E311}

2014-03-25 14:08 - 2014-03-25 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AB479E29-00AB-4000-9698-1FAE4564C295}

2014-03-24 12:01 - 2014-03-24 12:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DB912AFA-E1DA-4F67-8161-EE2A4C7A0171}

2014-03-23 09:11 - 2014-03-23 09:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AC5E8F6B-FA98-455C-B399-5BE29195864E}
 

Some content of TEMP:

====================

C:\Users\EDDIE\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-04-16 12:04
 

==================== End Of Log ============================

--- --- ---

Addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2014

Ran by EDDIE at 2014-04-22 17:01:13

Running from C:\Users\EDDIE\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}

AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
 

==================== Installed Programs ======================
 

2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)

AIS Connect (HKLM-x32\...\AIS Connect) (Version: 1.1.1.6 - Fujitsu Technology Solutions GmbH)

AIS Connect (x32 Version: 1.1.1.6 - Fujitsu Technology Solutions GmbH) Hidden

Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)

Ashampoo Burning Studio 6 FREE v.6.80 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.0 - ashampoo GmbH & Co. KG)

Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)

BILDmobil (HKLM-x32\...\BILDmobil) (Version: 16.001.06.00.761 - Huawei Technologies Co.,Ltd)

Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.3.2291.0 - Microsoft Corporation)

Bing Bar Platform (x32 Version: 6.3.2291.0 - Microsoft Corporation) Hidden

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.1908.7636 - CyberLink Corp.)

CyberLink YouCam (x32 Version: 3.0.1908.7636 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Designer 2.0 (HKLM-x32\...\Designer 2.0_is1) (Version: 7.9.4 - Fomanu AG)

DeskUpdate 4.11 (HKLM-x32\...\DeskUpdate_is1) (Version: 4.11.0074 - Fujitsu Technology Solutions)

Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )

dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.0.4 - CEWE COLOR AG u Co. OHG)

eBay (HKLM-x32\...\{9983CD31-473F-4808-8317-5346119F0187}) (Version: 1.0.1 - eBay Inc.)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Everio MediaBrowser HD Edition (HKLM-x32\...\{548F12A2-BD2E-4B5A-9B62-BBC0AA8EB3DD}) (Version: 2.02.208 - PIXELA)

Fujitsu Display Manager (HKLM-x32\...\InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691}) (Version:  - )

Fujitsu Display Manager (Version: 7.01.00.210 - FUJITSU LIMITED) Hidden

Fujitsu Hotkey Utility (HKLM-x32\...\InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED)

Fujitsu Hotkey Utility (x32 Version: 3.60.1.0 - FUJITSU LIMITED) Hidden

Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version:  - )

Fujitsu MobilityCenter Extension Utility (Version: 3.01.00.000 - Ihr Firmenname) Hidden

Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version:  - )

Fujitsu System Extension Utility (Version: 3.1.1.0 - FUJITSU LIMITED) Hidden

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden

HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (HKLM\...\{ECFFD23C-3111-4685-8118-E1F79644203F}) (Version: 22.50.231.0 - Hewlett-Packard Co.)

HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife)

HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)

Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2025 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

LG United Mobile Drivers (HKLM-x32\...\{C2944BE7-9BFF-4EF0-A362-CB3281B7C50D}) (Version: 3.6.0.0 - LG Electronics)

LifeBook Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version:  - )

LifeBook Application Panel (Version: 8.1.0.0 - FUJITSU LIMITED) Hidden

Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0407-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.2.0.38 - Symantec Corporation)

OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)

Plugfree NETWORK (HKLM\...\{7BA64D21-EE46-4a9a-8145-52B0175C3F86}) (Version: 5.3.0.1 - FUJITSU LIMITED)

Plugfree NETWORK (Version: 5.3.001 - FUJITSU LIMITED) Hidden

Power Saving Utility (HKLM-x32\...\InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version:  - )

Power Saving Utility (Version: 31.01.11.013 - FUJITSU LIMITED) Hidden

Preispilot für Firefox (HKLM-x32\...\{0D8E6567-7082-48DB-A305-293873AC8B39}_is1) (Version: 2.0 - Preispilot)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30087 - Realtek Semiconductor Corp.)

Security Task Manager 1.8g (HKLM-x32\...\Security Task Manager) (Version: 1.8g - Neuber Software)

shopping-preise.de AddOn Firefox (HKLM-x32\...\{2B11BA9C-7F97-4C16-970F-1491FD77969B}_is1) (Version: 2.81 - shopping-preise.de)

Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)

Steuer-Spar-Erklärung 2012 (HKLM-x32\...\{CCD2BAD2-0919-40CB-80CC-E9538B0E4C2E}) (Version: 17.11 - Wolters Kluwer Deutschland GmbH)

Steuer-Spar-Erklärung 2013 (HKLM-x32\...\{AEB61F7A-4BBA-4292-A096-7893E09034A4}) (Version: 18.08 - Wolters Kluwer Deutschland GmbH)

SteuerSparErklärung 2014 (HKLM-x32\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.08.82 - Akademische Arbeitsgemeinschaft)

Studie zur Verbesserung von HP Deskjet 1000 J110 series Produkten (HKLM\...\{3F7C54EA-F59C-45DD-BA93-AD1E084A9550}) (Version: 22.50.231.0 - Hewlett-Packard Co.)

Sweet Home 3D version 4.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)

Trojan Remover 6.9.1.2929 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.1.2929 - Simply Super Software)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
 

==================== Restore Points  =========================
 

10-04-2014 10:24:44 Windows Update

10-04-2014 12:48:55 Windows Update

15-04-2014 08:12:37 Windows Update

17-04-2014 11:38:30 Installed LG United Mobile Drivers.

17-04-2014 12:36:44 Wiederherstellungsvorgang

17-04-2014 12:54:24 Installed LG United Mobile Drivers.

18-04-2014 16:19:29 Installed Java 7 Update 55

18-04-2014 16:40:05 Windows Update

22-04-2014 08:07:17 Norton_Power_Eraser_20140422100710161
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2014-04-06 10:55 - 00450712 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1        www.007guard.com

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        www.10sek.com

127.0.0.1        10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        www.123fporn.info

127.0.0.1        123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com

127.0.0.1        123moviedownload.com
 

There are 1000 more lines.
 
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {322CCE2C-5714-48BE-859F-4D6962CAFC71} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\WSCStub.exe [2014-03-12] (Symantec Corporation)

Task: {3A6704F2-431C-416B-ACF9-F21B269E3CF3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-23] (Google Inc.)

Task: {75BFF9C0-721F-46FF-998A-242F46AB4029} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)

Task: {77F9D08C-BDD1-4F5E-9C13-9FA48000B302} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)

Task: {9B4843F5-E148-4B24-9946-E8F3BAB684A7} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: {D962FEF8-C30B-4E31-9292-2FFE23C080E1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-23] (Google Inc.)

Task: {EF2080CF-59F8-4641-81D0-A59AB723B81B} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2008-10-24 17:35 - 2008-10-24 17:35 - 00128296 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

2009-01-26 17:49 - 2009-01-26 17:49 - 00032768 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe

2010-05-08 13:48 - 2010-05-08 13:48 - 00229376 _____ () C:\ProgramData\DatacardService\DCService.exe

2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\schedutils.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cutils.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00025088 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\osal.dll

2009-01-26 17:49 - 2009-01-26 17:49 - 00229376 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\serviceagent.dll

2009-01-26 17:46 - 2009-01-26 17:46 - 00204800 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\messaging.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00017920 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cmessaging.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00009216 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\threadpool.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\utils.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00011264 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cuxml.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\transports.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00208896 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\ssl.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00876544 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\crypto.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00077824 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\expat.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00081920 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\registration.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00090112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\remoteaccess.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\scheduler.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\pollingserver.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00045056 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\acm.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00021504 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\httpbroker.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00086016 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\monitormanager.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\filetransfer.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00013312 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\urischeme.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00155648 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\filerepository.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\md5c.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00258048 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\swupdate.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\commoncfg.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00045056 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\usagejob.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\sslinit.dll

2009-01-15 15:50 - 2009-01-15 15:50 - 00017408 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\c2sLogger.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00043008 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\httpServerConnDS.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00012288 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\sctunnel.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00017408 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\ttunnel.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\totalaccess.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00010240 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaversions.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\stdinstallers.dll

2009-03-25 11:23 - 2009-03-25 11:23 - 00029184 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\exectaDS.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00026112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winwmids.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00009728 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\pstoreds.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winsysinfods.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winvmstatds.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00025600 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winfsinfods.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00026112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cmdds.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00006656 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\uadfw.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00016896 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\stdrules.dll

2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\rulelib.dll

2012-08-11 10:26 - 2004-09-09 17:13 - 00364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser HD Edition\pxl_m17n_tool.dll

2011-01-17 16:19 - 2011-10-26 12:03 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

2014-03-29 10:31 - 2014-03-29 10:31 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9

AlternateDataStreams: C:\Users\EDDIE\Documents\Einladung!!!.eml:OECustomProperty
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 

Could not list Devices. Check "winmgmt" service or repair WMI.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/22/2014 04:38:57 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 02:45:32 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 00:46:19 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 10:11:05 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 09:57:52 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 09:52:45 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/22/2014 08:11:32 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/21/2014 06:17:35 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/21/2014 03:38:41 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/20/2014 04:54:34 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (04/22/2014 00:43:26 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMScheduler erreicht.
 

Error: (04/22/2014 00:42:51 PM) (Source: DCOM) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (04/17/2014 05:05:29 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (04/17/2014 05:04:28 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (04/17/2014 05:04:28 PM) (Source: DCOM) (User: )

Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}
 

Error: (04/17/2014 05:04:28 PM) (Source: DCOM) (User: )

Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}
 

Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2014-02-11 11:34:44.395

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-02-11 11:34:44.270

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 48%

Total physical RAM: 3892.55 MB

Available physical RAM: 1994.55 MB

Total Pagefile: 7783.29 MB

Available Pagefile: 5649.32 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (System) (Fixed) (Total:463.76 GB) (Free:364.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: B477DB1C)

Partition 1: (Active) - (Size=2 GB) - (Type=27)

Partition 2: (Not Active) - (Size=464 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---