Hallo zusammen,

ich habe seit kurzem einen Sperrschirm beim Booten (Interpol etc 100Euro usw)
Mein System: Windows 8 /64 bit

Ich habe einen Farbar Recovery Scan durchgeführt und dies ist die entstandene Log file:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-3ADNFCU on 10-10-2013 15:51:27
Running from D:\
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2013-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BtPreLoad] - "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe"
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))
HKLM-x32\...\Run: [BakupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-22] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [508256 2012-04-22] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] - [x]
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-10] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKU\Anja\...\Run: [AcerCloud] - C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [11064904 2013-01-24] (Acer Incorporated)
HKU\Anja\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-03-06] (Google Inc.)
HKU\Anja\...\Run: [Spotify Web Helper] - C:\Users\Anja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-30] (Spotify Ltd)
HKU\Anja\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKU\Anja\...\Run: [isCNoWgFrx.exe] - C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe [111472 2013-10-10] (Microsoft Corporation)
HKU\Anja\...\Winlogon: [Shell] cmd.exe [404992 2012-07-25] (Microsoft Corporation) <==== ATTENTION 
HKU\Anja\...\Command Processor: "C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe" <===== ATTENTION!
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [266448 2013-05-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [214448 2013-05-12] (NVIDIA Corporation)
Startup: C:\Users\Anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-01-24] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-22] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
S2 ETDService; C:\Program Files\Elantech\ETDService.exe [92560 2013-03-12] (ELAN Microelectronics Corp.)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-10] (Symantec Corporation)
S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-22] (NTI Corporation)
S2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-11] (Dritek System INC.)
S2 StrartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [71488 2013-01-23] (IObit)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation)
S1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00A\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)
S3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-11] (Dritek System Inc.)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-10 15:42 - 2013-10-10 15:42 - 00000000 ____D C:\FRST
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
2013-10-09 22:58 - 2013-10-09 22:58 - 00451472 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-08 10:00 - 2013-09-22 15:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-08 10:00 - 2013-09-22 15:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-08 10:00 - 2013-09-22 14:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-08 10:00 - 2013-07-05 16:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-08 10:00 - 2013-07-03 18:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-08 10:00 - 2013-05-15 14:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-08 10:00 - 2013-05-15 14:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-10-08 10:00 - 2013-05-14 05:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-08 10:00 - 2013-05-14 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-08 10:00 - 2013-04-28 14:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-08 10:00 - 2013-02-21 02:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-08 10:00 - 2013-02-21 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-08 10:00 - 2013-02-19 01:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-10-08 10:00 - 2012-11-07 20:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-08 10:00 - 2012-11-07 20:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-08 09:57 - 2013-08-22 21:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-08 09:57 - 2013-07-19 14:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 09:57 - 2013-07-19 14:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 09:57 - 2013-07-05 14:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-08 09:57 - 2013-07-05 14:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-08 09:57 - 2013-07-01 17:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2013-10-08 09:57 - 2013-07-01 17:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-10-08 09:57 - 2013-07-01 17:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-10-08 09:57 - 2013-07-01 14:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbscan.sys
2013-10-08 09:57 - 2013-07-01 14:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbprint.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-08 09:57 - 2013-06-28 19:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-08 09:57 - 2013-06-28 19:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-08 09:57 - 2013-06-28 19:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-08 09:57 - 2013-06-28 19:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-08 09:57 - 2013-06-21 21:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-08 09:57 - 2013-06-21 21:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys
2013-10-08 09:57 - 2013-05-26 15:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-08 09:57 - 2013-05-26 14:59 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-08 09:57 - 2013-05-24 19:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-08 09:57 - 2013-05-24 18:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-04 10:04 - 2013-10-04 10:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 08:31 - 2013-08-06 21:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\System32\tssdisai.dll
2013-10-03 06:43 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 06:40 - 2013-10-03 06:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 06:38 - 2013-10-03 06:43 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 06:38 - 2013-10-03 06:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 06:38 - 2013-10-03 06:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 06:37 - 2013-10-03 06:38 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 06:37 - 2013-10-03 06:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 06:34 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 06:34 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 06:30 - 2013-10-03 06:43 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 06:30 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 06:30 - 2013-10-03 06:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-09-27 05:02 - 2013-09-27 05:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 00:59 - 2013-09-27 00:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-27 00:48 - 2013-09-27 01:02 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-26 00:12 - 2013-09-26 00:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 00:12 - 2013-09-26 00:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-25 23:42 - 2013-09-26 00:11 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-24 07:19 - 2013-09-24 07:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 05:49 - 2013-09-27 06:01 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-24 04:24 - 2013-09-24 04:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-23 08:16 - 2013-10-04 00:57 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-09-21 04:42 - 2013-09-21 04:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-20 09:02 - 2013-09-20 09:03 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 00:59 - 2013-09-26 23:55 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-19 23:34 - 2013-09-20 23:26 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-18 01:23 - 2013-09-27 05:35 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-18 00:04 - 2013-09-27 05:38 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-12 14:14 - 2013-08-15 21:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys
2013-09-12 14:14 - 2013-08-15 21:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\System32\WSService.dll
2013-09-12 14:14 - 2013-08-15 21:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-09-12 14:14 - 2013-08-15 21:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\System32\NotificationUI.exe
2013-09-12 14:14 - 2013-08-15 21:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\System32\sppsvc.exe
2013-09-12 14:14 - 2013-08-15 21:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-09-12 14:14 - 2013-08-15 21:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\System32\sppwinob.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\System32\WSClient.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\System32\WSSync.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\System32\sppc.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\setupcln.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-09-12 14:14 - 2013-08-15 21:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-09-12 14:14 - 2013-08-15 14:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-09-12 14:14 - 2013-08-15 14:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-09-12 14:14 - 2013-08-15 14:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-09-12 14:12 - 2013-07-09 00:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msgpioclx.sys
2013-09-12 14:12 - 2013-07-08 22:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe
2013-09-12 14:12 - 2013-07-08 20:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-09-12 14:12 - 2013-07-08 19:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\System32\wwanmm.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\wwanconn.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\System32\Wwanadvui.dll
2013-09-12 14:12 - 2013-07-08 14:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2013-09-12 14:12 - 2013-07-05 16:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-09-12 14:12 - 2013-07-02 16:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-09-12 14:12 - 2013-07-02 16:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll
2013-09-12 14:12 - 2013-07-02 16:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll
2013-09-12 14:12 - 2013-07-02 16:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-09-12 14:12 - 2013-07-02 16:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-12 14:12 - 2013-07-02 16:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-12 14:12 - 2013-07-02 16:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-09-12 14:12 - 2013-07-01 14:08 - 00387583 _____ C:\Windows\System32\ApnDatabase.xml
2013-09-12 14:12 - 2013-06-30 14:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-09-12 14:12 - 2013-06-30 14:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\openfiles.exe
2013-09-12 14:12 - 2013-06-28 22:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2013-09-12 14:12 - 2013-06-28 22:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2013-09-12 14:12 - 2013-06-28 21:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Classpnp.sys
2013-09-12 14:12 - 2013-06-28 17:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-09-12 14:12 - 2013-06-25 19:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\udfs.sys
2013-09-12 14:12 - 2013-06-25 18:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\HdAudio.sys
2013-09-12 14:12 - 2013-06-24 14:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-09-12 14:12 - 2013-06-24 14:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\System32\wcmsvc.dll
2013-09-12 14:12 - 2013-06-24 14:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\System32\wcmcsp.dll
2013-09-12 14:12 - 2013-06-18 21:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\System32\winmmbase.dll
2013-09-12 14:12 - 2013-06-18 21:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winmm.dll
2013-09-12 14:12 - 2013-06-18 14:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-09-12 14:12 - 2013-06-18 14:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-09-12 14:12 - 2013-06-11 15:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-09-12 14:12 - 2013-06-11 15:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll
2013-09-12 14:12 - 2013-06-10 13:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys
2013-09-12 14:12 - 2013-06-10 11:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-09-12 14:12 - 2013-06-10 11:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-09-12 14:12 - 2013-06-10 11:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2013-09-12 14:12 - 2013-06-10 11:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-09-12 14:12 - 2013-06-10 11:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-09-12 14:12 - 2013-06-10 11:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-09-12 14:12 - 2013-06-06 00:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBSTOR.SYS
2013-09-10 03:53 - 2013-09-10 09:34 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

==================== One Month Modified Files and Folders =======

2013-10-10 15:42 - 2013-10-10 15:42 - 00000000 ____D C:\FRST
2013-10-10 05:24 - 2013-03-06 03:51 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 05:20 - 2012-07-25 23:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:11 - 2013-03-06 03:51 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
2013-10-10 04:00 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru
2013-10-10 03:58 - 2013-02-26 02:32 - 01097422 _____ C:\Windows\WindowsUpdate.log
2013-10-09 22:58 - 2013-10-09 22:58 - 00451472 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-09 12:16 - 2012-07-25 21:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-10-08 10:24 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-05 06:40 - 2012-08-02 18:21 - 00045428 _____ C:\Windows\PFRO.log
2013-10-04 10:13 - 2013-08-30 07:57 - 00000000 ____D C:\Users\Anja\AppData\Local\Deployment
2013-10-04 10:04 - 2013-10-04 10:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 00:57 - 2013-09-23 08:16 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-10-04 00:53 - 2013-03-01 13:19 - 00000000 ____D C:\Users\Anja\AppData\Local\CrashDumps
2013-10-03 07:05 - 2013-02-26 08:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\vlc
2013-10-03 06:51 - 2012-09-12 00:56 - 00757416 _____ C:\Windows\System32\perfh007.dat
2013-10-03 06:51 - 2012-09-12 00:56 - 00159916 _____ C:\Windows\System32\perfc007.dat
2013-10-03 06:51 - 2012-07-25 23:28 - 01745416 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-03 06:47 - 2012-09-11 15:21 - 00495300 _____ C:\Windows\DPINST.LOG
2013-10-03 06:43 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 06:43 - 2013-10-03 06:38 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 06:43 - 2013-10-03 06:30 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 06:43 - 2013-10-03 06:30 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 06:43 - 2012-08-02 18:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 06:42 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 06:42 - 2013-02-26 02:31 - 00000000 ____D C:\users\Anja
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 06:40 - 2013-10-03 06:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 06:38 - 2013-10-03 06:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 06:38 - 2013-10-03 06:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 06:38 - 2013-10-03 06:37 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 06:38 - 2013-04-05 03:07 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-10-03 06:37 - 2013-10-03 06:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 06:34 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 06:30 - 2013-10-03 06:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-03 06:30 - 2012-07-25 23:21 - 00038950 _____ C:\Windows\setupact.log
2013-10-02 06:00 - 2013-08-30 09:03 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Spotify
2013-10-02 05:55 - 2013-08-30 09:04 - 00000000 ____D C:\Users\Anja\AppData\Local\Spotify
2013-10-01 17:38 - 2013-03-05 00:40 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-01 17:38 - 2013-03-05 00:40 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-27 06:01 - 2013-09-24 05:49 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-27 05:38 - 2013-09-18 00:04 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-27 05:35 - 2013-09-18 01:23 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-27 05:02 - 2013-09-27 05:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 01:02 - 2013-09-27 00:48 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-27 00:59 - 2013-09-27 00:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-26 23:55 - 2013-09-20 00:59 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-26 05:37 - 2013-08-30 08:03 - 00119024 _____ C:\Users\Anja\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-26 00:34 - 2013-03-14 03:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Ape
2013-09-26 00:14 - 2013-09-26 00:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 00:14 - 2013-09-26 00:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-26 00:11 - 2013-09-25 23:42 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-25 22:46 - 2013-03-10 23:13 - 00000000 ____D C:\Users\Anja\Desktop\Anja p
2013-09-25 10:48 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF
2013-09-24 07:19 - 2013-09-24 07:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 04:26 - 2013-03-04 03:53 - 00000000 ____D C:\Users\Anja\Desktop\Jena Unterlagen
2013-09-24 04:24 - 2013-09-24 04:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-22 15:28 - 2013-10-08 10:00 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 15:28 - 2013-10-08 10:00 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-22 14:54 - 2013-10-08 10:00 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-21 13:20 - 2013-02-26 02:32 - 00000000 ____D C:\Users\Anja\AppData\Local\Packages
2013-09-21 04:42 - 2013-09-21 04:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-21 04:40 - 2013-08-30 07:44 - 00000000 ____D C:\Users\Anja\AppData\Local\Microsoft Help
2013-09-20 23:26 - 2013-09-19 23:34 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-20 09:03 - 2013-09-20 09:02 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 00:55 - 2013-09-09 00:49 - 00144896 _____ C:\Users\Anja\Desktop\PRT anja.xls
2013-09-15 23:46 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache
2013-09-13 07:13 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore
2013-09-13 07:13 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-13 07:13 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\oobe
2013-09-12 23:11 - 2013-08-14 01:23 - 00000000 ____D C:\Windows\System32\MRT
2013-09-12 23:10 - 2013-03-02 01:42 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-10 09:34 - 2013-09-10 03:53 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

Files to move or delete:
====================
C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe


Some content of TEMP:
====================
C:\Users\Anja\AppData\Local\Temp\drm_dyndata_7400006.dll
C:\Users\Anja\AppData\Local\Temp\ose00000.exe
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.dll
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

4
Restore point made on: 2013-09-25 00:52:34
Restore point made on: 2013-10-02 06:07:07
Restore point made on: 2013-10-03 06:37:30
Restore point made on: 2013-10-08 09:59:03

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 3911.27 MB
Available physical RAM: 3260.95 MB
Total Pagefile: 3911.27 MB
Available Pagefile: 3277.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:443.69 GB) (Free:385.09 GB) NTFS
Drive d: () (Removable) (Total:1.91 GB) (Free:1.91 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3E7054EA)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 9B2CF522)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)


LastRegBack: 2013-10-09 09:42

==================== End Of Log ============================
         

Kann mir jemand die weiteren Schritte erklären? Danke schonmal im Voraus!

Hallo,

kannst du den Rechner nach folgendem Fix wieder normal starten?


Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\Anja\...\Winlogon: [Shell] cmd.exe [404992 2012-07-25] (Microsoft Corporation) <==== ATTENTION 
HKU\Anja\...\Command Processor: "C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe" <===== ATTENTION!
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.dll
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.exe
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Danke für die schnelle Antwort!

Fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by SYSTEM at 2013-10-10 16:37:21 Run:1
Running from D:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\Anja\...\Winlogon: [Shell] cmd.exe [404992 2012-07-25] (Microsoft Corporation) <==== ATTENTION 
HKU\Anja\...\Command Processor: "C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe" <===== ATTENTION!
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.dll
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.exe
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
         
*****************

HKU\Anja\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Anja\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.dll => Moved successfully.
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.exe => Moved successfully.
C:\Users\Anja\AppData\Roaming\LjqRPvoC => Moved successfully.
C:\Users\Anja\AppData\Local\7N4GsmCRl => Moved successfully.
C:\ProgramData\z3Ix2uyRn => Moved successfully.
C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5 => Moved successfully.
C:\Users\Anja\AppData\Local\soj79ulZ => Moved successfully.
C:\ProgramData\loRlUdx5T => Moved successfully.
C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F => Moved successfully.
C:\Users\Anja\AppData\Local\qNgKnoXR => Moved successfully.
C:\ProgramData\8I6H6IlGz => Moved successfully.
C:\Users\Anja\AppData\Roaming\ez2U7pqoi => Moved successfully.
C:\Users\Anja\AppData\Local\bcH7oCIr => Moved successfully.
C:\ProgramData\mjpGOaua5 => Moved successfully.
C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR => Moved successfully.
C:\Users\Anja\AppData\Local\TcB7B2Xi8D6 => Moved successfully.
C:\ProgramData\64RTLFh2Pk => Moved successfully.
C:\Users\Anja\AppData\Local\abspPPDUN => Moved successfully.

==== End of Fixlog ====
         

Startet der Rechner wieder ohne Sperrbildschirm?

Ja, er startet wieder normal! Supi! jetzt sollte ich bestimmt ein paar Scans fahren, oder ist damit schon alles wieder in Butter?

Noch ist nicht alles im Butter.
So weiter:


Verschiebe die frst64.exe vom USB-Stick auf den Desktop.

• Starte dann FRST.
• Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
• Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Anja (administrator) on ANJA on 10-10-2013 17:09:28
Running from C:\Users\Anja\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2013-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BtPreLoad] - "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe"
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))
HKCU\...\Run: [AcerCloud] - C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [11064904 2013-01-24] (Acer Incorporated)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-03-06] (Google Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Anja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-30] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [isCNoWgFrx.exe] - "C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe"
HKLM-x32\...\Run: [BakupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-22] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] - [x]
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-11] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [266448 2013-05-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [214448 2013-05-12] (NVIDIA Corporation)
Startup: C:\Users\Anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKLM - {D2D4A489-A6A7-4200-9306-E0303D3474CC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {D2D4A489-A6A7-4200-9306-E0303D3474CC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - {D2D4A489-A6A7-4200-9306-E0303D3474CC} URL = 
BHO: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblockx64.dll (Simple Adblock)
BHO-x32: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files (x86)\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Extension: (Google Docs) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-01-24] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-22] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [92560 2013-03-12] (ELAN Microelectronics Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-11] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-22] (NTI Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-12] (Dritek System INC.)
R2 StrartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [71488 2013-01-23] (IObit)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00A\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-12] (Dritek System Inc.)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-11 01:42 - 2013-10-11 01:42 - 00000000 ____D C:\FRST
2013-10-10 17:08 - 2013-10-10 14:48 - 01954124 _____ (Farbar) C:\Users\Anja\Desktop\FRST64.exe
2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-10-10 17:00 - 2013-10-10 17:02 - 00000000 ____D C:\AdwCleaner
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Roaming\rPrHXP9K
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Local\S5myd3Sd
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\ProgramData\3mNkbU1T
2013-10-10 08:58 - 2013-10-10 08:58 - 00451472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-08 20:00 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-08 20:00 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-08 20:00 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-08 20:00 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-08 20:00 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-08 20:00 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-08 20:00 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-08 20:00 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-08 20:00 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-08 20:00 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-08 20:00 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-08 20:00 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-08 20:00 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-08 20:00 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-08 20:00 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-08 20:00 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-10-08 20:00 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-08 20:00 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-08 20:00 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-10-08 20:00 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-08 20:00 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-08 20:00 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-08 20:00 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-08 20:00 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-08 20:00 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-08 20:00 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-10-08 20:00 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-08 20:00 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-08 19:57 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-08 19:57 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 19:57 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 19:57 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-08 19:57 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-08 19:57 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-08 19:57 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-08 19:57 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-08 19:57 - 2013-07-02 00:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-08 19:57 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-08 19:57 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-08 19:57 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-08 19:57 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-08 19:57 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-08 19:57 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-08 19:57 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-08 19:57 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-08 19:57 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-08 19:57 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-08 19:57 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-08 19:57 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-08 19:57 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-08 19:57 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-08 19:57 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-04 20:04 - 2013-10-04 20:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 18:31 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-10-03 16:43 - 2013-10-03 16:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 16:41 - 2013-10-03 16:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 16:41 - 2013-10-03 16:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 16:40 - 2013-10-03 16:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 16:38 - 2013-10-03 16:43 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 16:38 - 2013-10-03 16:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 16:38 - 2013-10-03 16:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 16:37 - 2013-10-03 16:38 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 16:37 - 2013-10-03 16:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 16:34 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 16:34 - 2013-10-03 16:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 16:30 - 2013-10-03 16:43 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 16:30 - 2013-10-03 16:43 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 16:30 - 2013-10-03 16:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-09-27 15:02 - 2013-09-27 15:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 10:59 - 2013-09-27 10:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-27 10:48 - 2013-09-27 11:02 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-26 10:12 - 2013-09-26 10:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 10:12 - 2013-09-26 10:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-26 09:42 - 2013-09-26 10:11 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-24 17:19 - 2013-09-24 17:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 15:49 - 2013-09-27 16:01 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-24 14:24 - 2013-09-24 14:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-23 18:16 - 2013-10-04 10:57 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-09-21 14:42 - 2013-09-21 14:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-20 19:02 - 2013-09-20 19:03 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 10:59 - 2013-09-27 09:55 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-20 09:34 - 2013-09-21 09:26 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-18 11:23 - 2013-09-27 15:35 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-18 10:04 - 2013-09-27 15:38 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-13 00:14 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2013-09-13 00:14 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2013-09-13 00:14 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-13 00:14 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2013-09-13 00:14 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-09-13 00:14 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-13 00:14 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-13 00:14 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-13 00:14 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-09-13 00:14 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-09-13 00:14 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-09-13 00:14 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-09-13 00:14 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-09-13 00:12 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2013-09-13 00:12 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2013-09-13 00:12 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-09-13 00:12 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-09-13 00:12 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2013-09-13 00:12 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-09-13 00:12 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2013-09-13 00:12 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2013-09-13 00:12 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-13 00:12 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-13 00:12 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-13 00:12 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-09-13 00:12 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-09-13 00:12 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-13 00:12 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-13 00:12 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-09-13 00:12 - 2013-07-02 00:08 - 00387583 _____ C:\Windows\system32\ApnDatabase.xml
2013-09-13 00:12 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-09-13 00:12 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2013-09-13 00:12 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-09-13 00:12 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-09-13 00:12 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2013-09-13 00:12 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-09-13 00:12 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-09-13 00:12 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-09-13 00:12 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-09-13 00:12 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2013-09-13 00:12 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2013-09-13 00:12 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2013-09-13 00:12 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-09-13 00:12 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-09-13 00:12 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-09-13 00:12 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-09-13 00:12 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-09-13 00:12 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-09-13 00:12 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-09-13 00:12 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-09-13 00:12 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-09-13 00:12 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-09-13 00:12 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-09-13 00:12 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-09-13 00:12 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-09-10 13:53 - 2013-09-10 19:34 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

==================== One Month Modified Files and Folders =======

2013-10-11 01:42 - 2013-10-11 01:42 - 00000000 ____D C:\FRST
2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-10-10 17:03 - 2013-03-06 13:51 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 17:03 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-10 17:02 - 2013-10-10 17:00 - 00000000 ____D C:\AdwCleaner
2013-10-10 17:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-10 16:35 - 2013-02-26 12:31 - 00000000 ____D C:\Users\Anja
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Roaming\rPrHXP9K
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Local\S5myd3Sd
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\ProgramData\3mNkbU1T
2013-10-10 14:48 - 2013-10-10 17:08 - 01954124 _____ (Farbar) C:\Users\Anja\Desktop\FRST64.exe
2013-10-10 14:11 - 2013-03-06 13:51 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 13:58 - 2013-02-26 12:32 - 01097422 _____ C:\Windows\WindowsUpdate.log
2013-10-10 08:58 - 2013-10-10 08:58 - 00451472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 22:16 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-10-08 20:24 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-05 16:40 - 2012-08-03 04:21 - 00045428 _____ C:\Windows\PFRO.log
2013-10-04 20:13 - 2013-08-30 17:57 - 00000000 ____D C:\Users\Anja\AppData\Local\Deployment
2013-10-04 20:04 - 2013-10-04 20:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 10:57 - 2013-09-23 18:16 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-10-04 10:53 - 2013-03-01 23:19 - 00000000 ____D C:\Users\Anja\AppData\Local\CrashDumps
2013-10-03 17:05 - 2013-02-26 18:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\vlc
2013-10-03 16:51 - 2012-09-12 10:56 - 00757416 _____ C:\Windows\system32\perfh007.dat
2013-10-03 16:51 - 2012-09-12 10:56 - 00159916 _____ C:\Windows\system32\perfc007.dat
2013-10-03 16:51 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-03 16:47 - 2012-09-12 01:21 - 00495300 _____ C:\Windows\DPINST.LOG
2013-10-03 16:43 - 2013-10-03 16:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 16:43 - 2013-10-03 16:38 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 16:43 - 2013-10-03 16:30 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 16:43 - 2013-10-03 16:30 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 16:43 - 2012-08-03 04:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 16:42 - 2013-10-03 16:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 16:42 - 2013-10-03 16:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 16:41 - 2013-10-03 16:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 16:41 - 2013-10-03 16:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 16:40 - 2013-10-03 16:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 16:38 - 2013-10-03 16:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 16:38 - 2013-10-03 16:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 16:38 - 2013-10-03 16:37 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 16:38 - 2013-04-05 13:07 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-10-03 16:37 - 2013-10-03 16:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 16:36 - 2013-10-03 16:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 16:34 - 2013-10-03 16:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 16:30 - 2013-10-03 16:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-03 16:30 - 2012-07-26 09:21 - 00038950 _____ C:\Windows\setupact.log
2013-10-02 16:00 - 2013-08-30 19:03 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Spotify
2013-10-02 15:55 - 2013-08-30 19:04 - 00000000 ____D C:\Users\Anja\AppData\Local\Spotify
2013-10-02 03:38 - 2013-03-05 10:40 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-03-05 10:40 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-27 16:01 - 2013-09-24 15:49 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-27 15:38 - 2013-09-18 10:04 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-27 15:35 - 2013-09-18 11:23 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-27 15:02 - 2013-09-27 15:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 11:02 - 2013-09-27 10:48 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-27 10:59 - 2013-09-27 10:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-27 09:55 - 2013-09-20 10:59 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-26 15:37 - 2013-08-30 18:03 - 00119024 _____ C:\Users\Anja\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-26 10:34 - 2013-03-14 13:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Ape
2013-09-26 10:14 - 2013-09-26 10:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 10:14 - 2013-09-26 10:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-26 10:11 - 2013-09-26 09:42 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-26 08:46 - 2013-03-11 09:13 - 00000000 ____D C:\Users\Anja\Desktop\Anja p
2013-09-25 20:48 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\NDF
2013-09-24 17:19 - 2013-09-24 17:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 14:26 - 2013-03-04 13:53 - 00000000 ____D C:\Users\Anja\Desktop\Jena Unterlagen
2013-09-24 14:24 - 2013-09-24 14:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-23 01:28 - 2013-10-08 20:00 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-08 20:00 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-08 20:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-08 20:00 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-08 20:00 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-08 20:00 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-08 20:00 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-08 20:00 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-08 20:00 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-08 20:00 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-08 20:00 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-08 20:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-21 23:20 - 2013-02-26 12:32 - 00000000 ____D C:\Users\Anja\AppData\Local\Packages
2013-09-21 14:42 - 2013-09-21 14:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-21 14:40 - 2013-08-30 17:44 - 00000000 ____D C:\Users\Anja\AppData\Local\Microsoft Help
2013-09-21 09:26 - 2013-09-20 09:34 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-20 19:03 - 2013-09-20 19:02 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 10:55 - 2013-09-09 10:49 - 00144896 _____ C:\Users\Anja\Desktop\PRT anja.xls
2013-09-16 09:46 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-09-13 17:13 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore
2013-09-13 17:13 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-13 17:13 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\system32\oobe
2013-09-13 09:11 - 2013-08-14 11:23 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 09:10 - 2013-03-02 11:42 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 19:34 - 2013-09-10 13:53 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

Some content of TEMP:
====================
C:\Users\Anja\AppData\Local\Temp\drm_dyndata_7400006.dll
C:\Users\Anja\AppData\Local\Temp\ose00000.exe
C:\Users\Anja\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-09 19:42

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Anja at 2013-10-10 17:10:20
Running from C:\Users\Anja\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.1910)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.1910)
Acer Backup Manager (x32 Version: 4.0.0.0059)
Acer Device Fast-lane (Version: 1.00.3007)
Acer Instant Update Service (Version: 1.00.3013)
Acer Power Management (Version: 7.00.3006)
Acer Recovery Management (Version: 6.00.3011)
AcerCloud Docs (x32 Version: 1.01.2007)
AcerCloud Portal (x32 Version: 2.02.2018)
Adblock IE 2.2 (Version: 2.2.1524)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Apple Application Support (x32 Version: 1.2.1)
Apple Software Update (x32 Version: 2.1.1.116)
Avanquest update (x32 Version: 1.34)
Backup Manager v4 (x32 Version: 4.0.0.0059)
BioEdit (x32 Version: 7.1.11.0)
BMG LABTECH MARS Data Analysis (x32)
Broadcom Card Reader Driver Installer (Version: 15.4.4.2)
clear.fi Media (x32 Version: 2.01.3107)
clear.fi Photo (x32 Version: 2.01.3107)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3103_44819)
Dolby Home Theater v4 (x32 Version: 7.2.8000.13)
ETDWare PS/2-X64 11.6.11.002_WHQL (Version: 11.6.11.002)
Google Chrome (x32 Version: 30.0.1599.69)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
GUILD WARS (x32)
Guitar Hero World Tour (x32 Version: 1.0)
Hex Workshop v6.7 (Version: 6.7.3.5308)
Identity Card (x32 Version: 2.00.3004)
ImageMagick 6.7.5-7 Q16 (2012-03-01) (x32 Version: 6.7.5)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.0.1207)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 17 (x32 Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
Launch Manager (x32 Version: 7.0.4)
Live Updater (x32 Version: 2.00.3003)
MATLAB Component Runtime (x32 Version: 7.2)
Media Go (x32 Version: 1.4.269)
MEGA5.1 (x32)
MEGA5.2.1 (x32)
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (x32 Version: 12.0.4518.1014)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
MyWinLocker (Version: 4.0.14.35)
MyWinLocker 4 (x32 Version: 4.0.14.35)
MyWinLocker Suite (x32 Version: 4.0.14.24)
Norton Online Backup (x32 Version: 2.2.3.45)
Norton Online Backup ARA (x32 Version: 4.1.0.10)
NTI Media Maker 9 (x32 Version: 9.0.2.9008)
NVIDIA Grafiktreiber 320.18 (Version: 320.18)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 320.18 (Version: 320.18)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Office Addin (x32 Version: 2.02.2008)
Office Addin 2003 (x32 Version: 2.02.2008)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
PDF24 Creator 5.7.0 (x32)
PDFtk Server (x32 Version: 1.45.1)
PlayStation(R)Network Downloader (x32 Version: 2.02.00076)
PlayStation(R)Store (x32 Version: 3.1.8.07881)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.220)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 11.41)
QuickTime (x32 Version: 7.66.71.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6657)
Shared C Run-time for x64 (Version: 10.0.0)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Simple Adblock (x32 Version: 1.1.5)
Sony PC Companion 2.10.174 (x32 Version: 2.10.174)
SpellForce (x32 Version: SpellForce v1.52)
Spotify (x32 Version: 0.8.4.99.ga249b5f1)
Start Menu 8 (x32 Version: 1.0.0.0)
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
VLC media player 2.0.5 (Version: 2.0.5)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

25-09-2013 08:51:03 Windows Update
02-10-2013 14:06:45 Geplanter Prüfpunkt
03-10-2013 14:37:02 Installed QuickTime
08-10-2013 17:58:36 Windows Update

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {002B6439-677C-4E67-8366-300189A981E6} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-22] ()
Task: {305A840D-EABE-444D-B6CC-7FB0CAD13E06} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-22] ()
Task: {30CB288C-6BF9-42BE-AE51-0CFA6103CBE5} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)
Task: {41D7949E-B659-4F93-833A-5E01E5F838B9} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {471F197B-F37A-4E1D-9C95-BFE3D9E865CA} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {4FFE574D-B33B-4A68-95BD-208E867FCCF2} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {5BBF186B-44CB-4EB0-B62C-E38260418794} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {7230EE0C-DB30-44C4-B702-AA8B0FD5EBBB} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-24] ()
Task: {AE5D5526-D581-47B7-9852-53F1EF9E89BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: {BE558F44-B198-440B-B412-85DFCA4E4044} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: {FD5869C3-622D-447F-966D-D1203F1AB49C} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-01-28 14:45 - 2013-01-28 14:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-28 14:42 - 2013-01-28 14:42 - 00084992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2012-08-10 10:54 - 2012-08-08 17:48 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2013-03-20 17:29 - 2013-01-19 18:03 - 00348992 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madExcept_.bpl
2013-03-20 17:29 - 2013-01-19 18:02 - 00183616 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madBasic_.bpl
2013-03-20 17:29 - 2013-01-19 18:02 - 00051008 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madDisAsm_.bpl
2012-09-12 01:18 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/09/2013 08:43:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/09/2013 08:43:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/09/2013 08:43:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/09/2013 08:39:46 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile  Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/09/2013 07:32:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.2.9200.16628, Zeitstempel: 0x51a94434
Name des fehlerhaften Moduls: twinui.dll, Version: 6.2.9200.16604, Zeitstempel: 0x5184a60b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000186c
ID des fehlerhaften Prozesses: 0xb74
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5

Error: (10/06/2013 07:14:20 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16688 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: f44

Startzeit: 01cec2b719b28889

Endzeit: 8

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Berichts-ID: b6ee4f65-2eaa-11e3-bf62-68942305e19e

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/04/2013 00:58:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/04/2013 00:58:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/04/2013 00:58:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (10/04/2013 00:58:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile  Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


System errors:
=============
Error: (10/10/2013 04:34:28 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎10.‎2013 um 16:32:25 unerwartet heruntergefahren.

Error: (10/10/2013 04:25:58 PM) (Source: DCOM) (User: ANJA)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (10/10/2013 04:20:39 PM) (Source: DCOM) (User: ANJA)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (10/10/2013 04:20:39 PM) (Source: DCOM) (User: ANJA)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (10/10/2013 04:20:39 PM) (Source: DCOM) (User: ANJA)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (10/10/2013 04:20:21 PM) (Source: DCOM) (User: ANJA)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (10/10/2013 04:19:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NLA (Network Location Awareness)" ist vom Dienst "DHCP-Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (10/10/2013 04:19:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB 2.0-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (10/10/2013 04:19:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB 1.x-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (10/10/2013 04:19:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB-Miniredirector-Wrapper und -Modul" ist vom Dienst "Umgeleitetes Puffersubsystem" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%31


Microsoft Office Sessions:
=========================
Error: (09/27/2013 11:03:44 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (09/27/2013 11:00:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (09/26/2013 03:36:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 5171 seconds with 1500 seconds of active time.  This session ended with a crash.

Error: (09/20/2013 10:58:11 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 160 seconds with 120 seconds of active time.  This session ended with a crash.

Error: (09/20/2013 10:55:08 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 644 seconds with 600 seconds of active time.  This session ended with a crash.

Error: (09/09/2013 00:38:47 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6568 seconds with 4920 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 3911.27 MB
Available physical RAM: 2789.81 MB
Total Pagefile: 4615.27 MB
Available Pagefile: 3447.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:443.69 GB) (Free:385.09 GB) NTFS
Drive e: () (Removable) (Total:1.91 GB) (Free:1.91 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3E7054EA)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 9B2CF522)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================
         

Leider muss ich mich erstmal vom Comuter lösen... hab noch ne Verabredung. Danke vielmals, ich schau spätestens morgen wieder rein!

Ok, dann weiter:


Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Roaming\rPrHXP9K
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\Users\Anja\AppData\Local\S5myd3Sd
2013-10-10 16:32 - 2013-10-10 16:32 - 00321536 _____ C:\ProgramData\3mNkbU1T
2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\ProgramData\boost_interprocess
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Bitte poste in deiner nächsten Antwort:

• Fixlog von FRST
• Log von MBAM
• Log von ESET
• Log von FRST

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass dein Rechner schon sauber ist.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.